Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/28695044-fdc2-3f03-bb5e-7c71fef2f129.roa
File:                     28695044-fdc2-3f03-bb5e-7c71fef2f129.roa (raw, json)
Hash identifier:          C+ao/LW5mqoNdAVJKsa2Ju0dFtLrHejfr82mQWR6hdA=
Subject key identifier:   5E:73:C8:88:43:DC:FD:53:B1:14:AB:E7:39:54:BF:A7:8D:FD:AF:74
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC87674D3A5C0463616D1AB00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/28695044-fdc2-3f03-bb5e-7c71fef2f129.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        172.65.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:74:d3:a5:c0:46:36:16:d1:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=5f5b97cf-39bb-4494-a7c9-771cb6e82cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a9:72:ee:19:94:d5:95:2f:d7:39:95:81:92:
                    51:49:a9:b8:c8:41:99:93:fb:a8:5d:56:fd:ca:87:
                    e9:df:8f:78:da:47:19:0e:c1:9b:4e:ee:12:d3:13:
                    44:62:1a:75:65:7f:ee:d0:7c:63:b4:1f:d6:6d:43:
                    80:63:b9:c2:e0:44:d5:40:2f:73:4f:63:98:a6:70:
                    6f:f6:66:1a:82:1d:dc:04:0b:0e:33:b9:95:32:16:
                    36:13:be:77:da:bf:94:c9:e3:41:99:e5:16:dc:73:
                    57:d8:9c:9e:12:09:60:ef:ff:6f:3e:5d:37:b6:40:
                    63:8f:67:24:43:76:06:31:46:1d:70:bd:79:ac:e7:
                    fd:30:85:9f:32:a8:32:2f:05:4a:4a:c3:23:54:0f:
                    e2:25:85:b8:71:70:8a:c6:ce:84:1b:f0:a9:fd:25:
                    49:c4:c6:69:f8:9f:67:69:d9:6f:02:f7:c8:b2:e4:
                    c2:b0:e3:72:53:07:64:6a:d5:e3:d6:69:8e:40:24:
                    e6:26:6e:8e:88:fd:37:b4:52:93:03:08:7f:65:40:
                    12:36:4a:06:ee:1e:cc:10:41:a2:93:2d:a5:0c:ae:
                    a4:f4:a8:f6:a2:4e:be:4a:05:e7:6b:29:56:9d:04:
                    75:fc:c9:3c:87:f7:c1:42:f8:9f:b2:b9:3b:c9:75:
                    29:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:73:C8:88:43:DC:FD:53:B1:14:AB:E7:39:54:BF:A7:8D:FD:AF:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/28695044-fdc2-3f03-bb5e-7c71fef2f129.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.65.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:97:e2:cb:97:1b:d6:cf:87:9d:d1:b7:c6:c6:02:f0:d9:6d:
         9f:3a:99:f8:cd:df:d9:51:8f:76:52:6f:03:66:32:6c:bc:9a:
         e6:56:20:71:6d:41:b6:d3:07:5b:be:e6:0d:6e:e1:c5:38:d3:
         08:4f:78:cb:66:dc:64:3b:e2:9d:1a:f9:1f:35:b9:da:01:90:
         e3:02:59:78:3c:94:a2:b1:72:69:92:0f:3d:02:08:c9:75:58:
         85:38:79:bf:41:fb:02:48:aa:ca:57:38:6d:ba:1b:55:c1:c7:
         30:ce:af:63:2b:87:40:39:c2:6d:ae:2c:4e:ae:04:51:32:2c:
         a3:bf:75:94:a9:53:50:b3:c5:38:1a:f4:16:b8:dd:c9:71:e1:
         b0:55:b7:2d:81:d5:07:34:bf:bc:21:29:be:a8:98:30:97:cc:
         09:f5:ab:92:e4:29:b1:f3:69:fa:f5:64:e0:0f:2f:76:c6:b1:
         0e:80:3c:d8:8c:74:55:67:ff:ea:64:0c:9f:05:fe:ee:b7:5a:
         ba:71:57:5a:a0:a3:39:8c:9a:48:b0:61:8a:a2:42:d9:85:0f:
         ff:c2:00:bb:a7:2d:c5:5b:af:ee:5d:75:71:9b:1a:34:22:75:
         fe:39:7e:d7:bc:9b:c7:82:55:79:52:0e:c8:63:bb:71:dc:3a:
         c1:79:6c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:17:40 2025 by rpki-client