Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e3bb9b7-08a6-3b5c-abe4-0b229b052350.roa
File:                     2e3bb9b7-08a6-3b5c-abe4-0b229b052350.roa (raw, json)
Hash identifier:          GVRTyju9/TbtY2hjOOmLvRIOB2HnDLm8xkycq81bJpQ=
Subject key identifier:   87:9E:8C:CD:69:78:4F:D4:A8:4A:86:54:0D:57:EB:4C:13:B8:44:DC
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC87660141F3E8B4824983DC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e3bb9b7-08a6-3b5c-abe4-0b229b052350.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        172.69.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:60:14:1f:3e:8b:48:24:98:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=53bdf9e4-b2d5-49f6-88e5-dc87c24e3252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e4:44:a3:6a:70:c5:d4:fe:9d:ae:c9:41:be:
                    7e:8c:34:63:c9:c9:1b:51:00:1f:a7:55:e0:c9:a3:
                    60:0a:d9:85:63:cc:b5:32:f8:5f:0b:d5:20:35:6a:
                    90:4c:4a:f9:2a:cb:82:14:58:8a:fe:ac:8b:b1:1c:
                    86:29:ed:55:ff:d6:53:56:56:ee:0d:6f:6b:b0:22:
                    10:93:7a:d4:58:fd:c8:31:16:bf:37:22:e7:06:b3:
                    cf:8c:7e:26:49:01:89:de:ee:9a:46:83:ee:cb:3d:
                    03:97:0b:89:8a:b2:7e:41:db:6f:3c:fa:0f:1c:c8:
                    43:38:cf:9a:ac:a4:3d:b4:35:b9:e0:6c:23:ff:19:
                    94:e8:b4:f9:0c:b5:c1:b8:e4:e7:70:d4:de:8a:15:
                    54:cb:42:5d:e2:83:b8:94:61:0c:ae:1f:c8:07:bb:
                    f6:27:89:4c:ba:15:29:5c:b9:5a:53:01:a8:35:2a:
                    94:2d:54:a3:06:1b:de:43:8c:d9:7e:78:1d:14:47:
                    ca:ef:b8:c9:5e:61:c1:8b:96:65:0f:dc:c0:8f:fa:
                    c4:ce:c2:fe:ec:8d:68:4f:96:b2:e4:b2:6a:89:63:
                    90:3d:22:45:ae:90:37:84:df:a2:35:19:e7:a6:91:
                    09:bf:9b:5f:5e:9e:78:6d:30:e1:28:7c:74:9a:46:
                    9e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9E:8C:CD:69:78:4F:D4:A8:4A:86:54:0D:57:EB:4C:13:B8:44:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e3bb9b7-08a6-3b5c-abe4-0b229b052350.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:d6:09:7b:f5:ff:d0:1e:31:bf:ee:61:7c:cc:d2:6e:57:3e:
         87:dd:5a:da:3b:16:01:2f:86:0c:9c:00:7b:91:e2:30:81:80:
         f1:89:09:ba:c3:76:93:1c:35:f0:b1:54:03:f4:2f:9f:05:e5:
         b8:57:b4:c2:b5:01:25:48:b3:87:ca:35:68:2d:11:b9:b0:8a:
         ed:bd:0f:ba:39:d8:06:2d:68:e9:bf:b1:79:76:31:7d:5b:70:
         fb:20:fd:cb:bf:1f:7f:85:e7:20:6a:4a:89:68:f0:36:78:23:
         1c:27:3f:ec:15:d7:86:26:5e:7e:85:28:65:64:05:09:58:6a:
         0c:b8:73:93:3e:15:59:fb:a4:fb:64:5d:0e:6b:0f:6a:9a:67:
         7b:46:0e:61:13:4a:fd:8c:c6:39:52:d9:9d:af:68:c2:a0:a1:
         8c:4f:4e:9d:d0:b3:c0:ec:15:1d:1e:e3:28:54:45:eb:f9:56:
         ac:17:e9:fa:a6:58:be:78:2b:3d:87:7e:d9:4a:25:b2:4b:0e:
         a1:a4:bd:0b:ff:80:ca:0b:d2:40:8f:80:1f:47:67:9e:81:ac:
         6c:89:e3:90:4f:10:30:7e:25:33:49:5e:d6:ee:e2:fb:7e:d5:
         e1:5b:fa:9a:6c:5e:f5:f3:6e:45:ad:58:ac:19:88:60:a3:69:
         b0:11:4f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:03:23 2025 by rpki-client