Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d92430c-f6e3-32b9-bd7f-a5aa7dfc445d.roa
File:                     2d92430c-f6e3-32b9-bd7f-a5aa7dfc445d.roa (raw, json)
Hash identifier:          I8f5bzB0aOYDYdvmegFbIGlXPxLaOViosNYsSI2uTTo=
Subject key identifier:   A9:C8:A6:3F:0A:9A:4D:AE:A4:A0:83:F4:B1:CA:A9:25:54:9E:46:E8
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584ACF710C31E26520229428DA40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d92430c-f6e3-32b9-bd7f-a5aa7dfc445d.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     13335
IP address blocks:        172.70.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:0c:31:e2:65:20:22:94:28:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=1b68a369-6999-49f1-a3bc-1deff63bc417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fa:ff:95:7e:36:d5:50:60:bb:e0:e3:fc:a5:
                    b7:6c:f7:17:1b:9b:8a:2a:fb:87:3e:9e:11:f8:07:
                    bc:cb:16:c9:1a:7e:d8:99:42:1c:76:0d:25:37:d2:
                    7a:fd:11:e7:ea:42:d7:0c:ad:75:a6:90:00:83:47:
                    d6:f7:81:a7:25:1e:67:25:27:8a:11:4b:06:e9:22:
                    a8:17:a8:ae:1a:54:a4:bb:22:cd:ae:3c:66:e9:2f:
                    c4:0b:60:18:58:39:44:9d:5b:72:b7:c3:fd:e6:55:
                    89:db:18:33:19:9c:da:65:bf:fc:b9:84:04:77:39:
                    08:b3:02:0a:a7:29:43:6d:06:0c:62:65:5d:bd:9d:
                    b1:eb:24:2c:34:11:d8:21:f5:9c:14:a9:c0:e2:d3:
                    48:c3:d8:7f:34:98:d5:bf:be:87:c9:36:8e:37:07:
                    ed:b8:a8:81:20:dc:15:d6:c4:f6:6f:08:0d:3b:ba:
                    2f:d8:12:45:a8:c1:c5:ea:93:74:e4:5e:81:66:5f:
                    18:5e:74:e2:65:5a:d1:1c:bb:31:a6:91:c6:fe:bc:
                    4d:e0:76:f1:f0:ef:e3:e6:79:84:79:63:1a:9b:71:
                    01:40:5b:2f:b1:db:ed:1d:0a:2b:6d:fb:2b:8a:0e:
                    c1:94:1d:c5:89:2e:94:1b:17:a0:c8:d6:47:99:60:
                    9a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C8:A6:3F:0A:9A:4D:AE:A4:A0:83:F4:B1:CA:A9:25:54:9E:46:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d92430c-f6e3-32b9-bd7f-a5aa7dfc445d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c3:80:a9:79:e3:8b:fd:5b:05:9b:14:9c:17:6b:24:c9:de:
         9d:75:ff:36:df:2c:48:3b:9c:ef:3e:f9:a7:4e:50:2e:51:35:
         e2:91:c4:4b:26:28:36:e2:df:2a:ee:c7:a5:81:0c:45:6f:40:
         ab:ab:b2:07:a7:82:bf:ee:ac:7f:5b:da:b9:86:69:44:bb:c7:
         8a:7b:c4:a9:19:d6:61:fb:c9:0f:fd:be:27:1c:0d:22:4b:52:
         61:a4:f4:35:d1:7d:d3:04:f6:7e:d4:8e:95:5e:aa:fd:94:88:
         b2:ed:7a:32:a4:27:3d:3d:7d:6c:af:1e:87:21:13:07:bc:04:
         38:98:b6:b5:8d:1f:ad:eb:68:c4:14:1e:62:3e:af:2a:a6:56:
         50:85:68:e5:95:b5:7f:10:22:51:f4:7f:1e:29:4b:d5:99:92:
         e6:d9:9d:23:d1:80:bf:a1:26:ef:89:b8:e4:d2:a4:e0:8f:fb:
         a6:4d:0d:d5:18:ec:ba:bf:c4:dc:a8:a5:fd:cd:90:cf:81:de:
         a4:63:96:af:2c:02:56:3f:c2:23:e3:87:77:01:2e:a0:37:b2:
         38:44:7f:bd:d9:80:b6:54:8f:4b:7f:4b:5e:ef:7e:53:17:dd:
         35:19:1e:6d:1d:4f:8e:dc:a4:03:56:a9:08:0a:9a:9b:44:d1:
         08:08:50:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:52:09 2025 by rpki-client