Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a6ef38b-7055-3d68-88d4-dd134de9d7c2.roa
File:                     2a6ef38b-7055-3d68-88d4-dd134de9d7c2.roa (raw, json)
Hash identifier:          rzC9d3PrQ4IC4S4LBpeTXP3umJDGoQmAvxwAisnaLEI=
Subject key identifier:   34:C4:91:EE:6D:4C:33:F7:7C:8A:74:85:7F:7C:D6:A3:28:F7:2C:FB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584ACF710B89D3AD529285750860
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a6ef38b-7055-3d68-88d4-dd134de9d7c2.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     13335
IP address blocks:        172.69.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:0b:89:d3:ad:52:92:85:75:08:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=10a70464-0311-4660-946c-b60a9fdbdf19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:73:92:d4:37:40:73:10:31:7f:75:65:6b:11:
                    68:c4:cc:7a:cc:d1:e9:76:d1:25:ac:b6:14:15:c4:
                    af:e7:de:1e:49:ab:06:ef:a6:89:1d:8d:3f:4a:8f:
                    de:38:5f:bf:00:2c:76:c0:6b:f5:48:df:8b:fa:2e:
                    31:c9:19:13:4d:c8:51:57:31:4f:7f:ae:83:7a:d6:
                    81:87:83:61:ed:0f:f9:e1:3c:96:b4:9c:59:be:0a:
                    7c:42:7b:ff:f6:5f:2d:87:ff:63:e2:7b:25:13:20:
                    76:c8:1b:b2:93:39:c6:b3:2d:6b:80:74:cd:08:2a:
                    ec:a6:bf:b5:45:d0:c6:1a:2f:9c:d5:7e:15:1d:4c:
                    62:2a:b8:b1:04:45:8e:79:0e:b7:08:39:d3:08:db:
                    d9:55:91:dc:28:fe:4e:6a:b0:6e:30:98:36:2a:c9:
                    cd:1b:aa:7f:55:97:a2:4f:08:30:89:a9:d7:13:a2:
                    be:42:75:91:d2:53:23:47:cb:68:48:68:67:b4:62:
                    d1:d2:d9:50:c3:47:e2:2c:c6:d0:c4:9e:62:fe:01:
                    50:73:e7:75:e5:81:09:02:5c:68:85:4e:4c:c5:a2:
                    23:8c:20:e9:fb:44:f6:32:a2:2b:b8:7b:4c:9f:c9:
                    a5:1f:f9:5f:63:65:01:6f:b7:4a:b7:8a:2e:8b:aa:
                    3b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C4:91:EE:6D:4C:33:F7:7C:8A:74:85:7F:7C:D6:A3:28:F7:2C:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a6ef38b-7055-3d68-88d4-dd134de9d7c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:0d:11:5f:46:ac:02:f9:e7:0e:c8:b0:a6:b3:f5:e4:e7:17:
         34:e3:e7:de:b8:db:7c:87:31:91:83:39:d1:7c:55:54:67:cc:
         0e:01:08:4c:4d:b1:10:88:94:01:74:7a:f7:e8:95:5d:f5:88:
         52:21:39:de:02:6c:f0:3e:68:d6:1b:1c:df:13:4f:63:b1:7d:
         5b:78:3e:fc:d1:e8:ac:31:b9:3c:16:bd:43:bb:11:0b:a7:62:
         ef:92:d1:86:a9:a9:b4:f7:8d:77:12:5f:07:ea:c6:d2:2f:c9:
         d2:ea:72:23:a2:80:a3:82:56:48:c4:08:41:cd:35:4c:4e:1c:
         6e:6b:57:ca:9c:41:31:7f:36:59:11:4c:ab:e6:1f:30:ac:d2:
         4e:7d:67:18:b7:e5:1c:19:f7:ee:6a:a1:34:4f:af:04:f0:00:
         57:33:65:b5:e9:4e:a6:7d:af:8b:55:69:a1:d9:d8:cb:10:f3:
         43:66:8d:36:b7:fc:a1:4e:bf:78:c9:4f:ed:9f:c2:8e:bb:0d:
         5e:41:f6:c4:72:70:34:fe:49:08:90:a1:4d:54:89:87:b4:ae:
         81:01:3c:47:28:07:b8:10:f8:19:b8:3a:0d:17:26:33:ab:ef:
         52:8b:72:6f:80:b5:30:4a:77:f2:36:1a:11:bc:95:38:52:f7:
         4e:fb:e9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:11:13 2025 by rpki-client