Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/315803d8-bc39-37dc-9b70-fedde19373fd.roa
File:                     315803d8-bc39-37dc-9b70-fedde19373fd.roa (raw, json)
Hash identifier:          e+AhWZ0bGgNuTHwHZNQ5yDUPiQtaQewBbhtQTMTCfPM=
Subject key identifier:   27:D4:ED:74:26:B7:C8:53:D0:EC:76:AF:36:5A:C8:03:57:B0:77:AD
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584ACF710B62D1F4EC5C5F6C9140
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/315803d8-bc39-37dc-9b70-fedde19373fd.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     13335
IP address blocks:        172.69.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:0b:62:d1:f4:ec:5c:5f:6c:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=d61f3ba7-a3d9-4e3f-875c-cbfed0dd75db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f8:0f:e3:69:e1:2a:0b:50:b0:41:92:83:f5:
                    c1:25:58:36:d3:2a:1c:5d:53:30:35:b3:cf:ba:b0:
                    85:a0:10:3b:36:62:83:72:ad:ac:46:05:ff:35:f0:
                    b7:ba:f7:72:0a:24:f1:dc:00:94:88:21:10:64:22:
                    40:f9:68:c0:14:0c:5a:64:86:4d:6c:e4:c6:93:51:
                    25:d9:64:68:e2:d4:07:1f:e8:7f:b8:3c:e8:ae:75:
                    6f:07:b7:37:e5:ee:b8:a0:7d:5b:76:f3:f7:bc:9e:
                    c0:39:4f:75:38:d1:ef:d4:ad:08:8c:18:1c:97:fa:
                    37:b9:62:67:76:21:d9:82:80:0b:93:7a:3c:9a:9f:
                    88:6f:41:09:fc:3d:46:84:ef:1f:bc:e1:fe:52:45:
                    11:e3:0a:b7:60:b0:84:30:fc:e5:5a:a4:56:16:93:
                    e1:21:1f:9b:c2:ba:5c:bd:87:54:de:bd:64:e0:40:
                    0a:b3:ba:32:25:12:fb:3c:61:ab:f5:07:52:d6:f7:
                    9f:5a:6d:f2:e9:a2:3c:1d:54:43:59:8a:24:4b:99:
                    98:3a:0c:97:f0:0c:4e:20:01:74:f7:62:1d:99:1e:
                    3c:a6:d5:47:a0:9f:c6:cb:4b:bc:8b:03:7e:99:33:
                    f4:1d:21:e3:7a:db:bc:bf:a0:75:2f:1c:6e:25:e9:
                    fe:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D4:ED:74:26:B7:C8:53:D0:EC:76:AF:36:5A:C8:03:57:B0:77:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/315803d8-bc39-37dc-9b70-fedde19373fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:83:b6:69:56:fd:b9:a1:e3:8a:9b:30:24:eb:fd:34:75:94:
         d6:97:2d:cd:65:b6:8a:f1:0b:77:fd:25:eb:60:9a:50:c3:95:
         e4:40:c0:9e:53:e2:d3:da:70:e8:2e:44:6f:60:99:a3:6b:ae:
         9f:c0:74:c0:0e:76:b3:85:12:e0:ed:d7:24:52:54:1b:16:0b:
         1b:7a:b0:04:2f:78:e0:31:09:1c:57:91:4c:86:a2:bd:85:4d:
         45:88:dc:16:c8:e1:58:b6:02:72:81:de:75:82:81:dd:2c:03:
         37:64:86:0b:3f:47:cc:84:dc:b8:52:c6:42:f5:d5:d2:5b:ff:
         77:cf:de:82:8b:b1:ef:44:ef:6c:81:36:0f:be:f5:11:ce:c6:
         ad:b1:4f:a5:37:4f:a6:ea:be:c1:97:c0:66:0e:ae:b1:a5:f6:
         75:b2:69:6b:21:c4:8f:06:8c:20:9f:fe:b1:85:ef:19:4d:94:
         31:49:03:6b:ce:64:8d:53:20:1d:a0:12:d1:f8:c7:93:a6:3d:
         4d:bb:55:76:d3:27:95:d8:0c:7a:5c:9c:db:a9:4f:93:a4:82:
         e4:84:62:ac:69:90:56:43:9e:59:ee:2c:2d:01:5d:b3:7d:78:
         2c:d2:9a:a4:a7:ee:a6:49:42:0d:0b:e9:b1:8a:48:e7:63:6c:
         55:08:73:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQti0fTsXF9skUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk
ZDYxZjNiYTctYTNkOS00ZTNmLTg3NWMtY2JmZWQwZGQ3NWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivgP42nhKgtQsEGSg/XBJVg20yocXVMwNbPP
urCFoBA7NmKDcq2sRgX/NfC3uvdyCiTx3ACUiCEQZCJA+WjAFAxaZIZNbOTGk1El
2WRo4tQHH+h/uDzornVvB7c35e64oH1bdvP3vJ7AOU91ONHv1K0IjBgcl/o3uWJn
diHZgoALk3o8mp+Ib0EJ/D1GhO8fvOH+UkUR4wq3YLCEMPzlWqRWFpPhIR+bwrpc
vYdU3r1k4EAKs7oyJRL7PGGr9QdS1vefWm3y6aI8HVRDWYokS5mYOgyX8AxOIAF0
92IdmR48ptVHoJ/Gy0u8iwN+mTP0HSHjetu8v6B1LxxuJen+7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCfU7XQmt8hT0Ox2rzZayANXsHetMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzE1ODAzZDgtYmMzOS0z
N2RjLTliNzAtZmVkZGUxOTM3M2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEX2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADyDtmlW/bmh44qbMCTr/TR1lNaXLc1ltorxC3f9JetgmlDDleRAwJ5T
4tPacOguRG9gmaNrrp/AdMAOdrOFEuDt1yRSVBsWCxt6sAQveOAxCRxXkUyGor2F
TUWI3BbI4Vi2AnKB3nWCgd0sAzdkhgs/R8yE3LhSxkL11dJb/3fP3oKLse9E72yB
Ng++9RHOxq2xT6U3T6bqvsGXwGYOrrGl9nWyaWshxI8GjCCf/rGF7xlNlDFJA2vO
ZI1TIB2gEtH4x5OmPU27VXbTJ5XYDHpcnNupT5OkguSEYqxpkFZDnlnuLC0BXbN9
eCzSmqSn7qZJQg0L6bGKSOdjbFUIc2c=
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:16:04 2025 by rpki-client