Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/372505a5-ec57-3f8d-8500-b6bed4ddccf4.roa
File:                     372505a5-ec57-3f8d-8500-b6bed4ddccf4.roa (raw, json)
Hash identifier:          2JFVGG0znPjSUVm4lQuDcfshrzg+d169JN5Z/+gQZZk=
Subject key identifier:   9C:53:87:6A:91:DC:E9:4C:97:28:31:EC:AF:87:3A:1E:F7:CC:EC:BF
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AD7D14EF112D1326A72D76100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/372505a5-ec57-3f8d-8500-b6bed4ddccf4.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     202623
IP address blocks:        172.71.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:4e:f1:12:d1:32:6a:72:d7:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=2f92bb2f-daca-416b-bc14-9e79dfad0ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:46:f1:ae:93:9e:72:e7:ce:40:62:f6:49:44:
                    db:e4:89:35:34:6e:95:12:da:19:80:6e:9e:05:2d:
                    e8:25:aa:b4:ab:fa:35:e0:c4:56:f2:3a:d1:d1:f2:
                    f7:a3:a4:d6:e9:bb:2b:51:f1:a4:87:32:db:68:0b:
                    27:34:f8:8c:09:bb:69:f9:17:9d:86:20:be:4a:cb:
                    08:b0:ff:c1:30:0e:27:13:7b:10:da:1b:0b:b5:16:
                    c4:ec:db:9d:42:35:71:ef:b4:bc:c5:ff:b2:61:82:
                    af:7d:4e:f8:59:c3:6a:9e:39:98:92:b1:f9:17:3c:
                    f4:03:03:91:e0:9c:db:ab:58:8a:dd:76:85:f0:51:
                    34:47:af:53:e1:a3:18:74:5d:66:26:f7:2a:55:20:
                    1e:fc:1a:6b:0b:6f:15:74:ce:4a:85:09:7b:23:98:
                    b1:4a:72:eb:d2:cf:cc:0b:74:ee:a5:d0:45:77:78:
                    52:98:d1:3f:09:a2:db:e9:8a:3e:01:68:f0:e3:03:
                    b5:60:d3:26:2a:46:52:95:78:25:9a:3a:14:44:0d:
                    1a:37:b0:a8:5f:33:bc:f7:1a:d8:10:bb:92:16:c4:
                    6c:d8:d9:9c:34:4d:bd:b4:6d:e3:01:fd:2d:ec:ba:
                    20:c0:e1:f1:94:f8:10:05:8d:55:fb:5f:aa:2f:07:
                    77:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:53:87:6A:91:DC:E9:4C:97:28:31:EC:AF:87:3A:1E:F7:CC:EC:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/372505a5-ec57-3f8d-8500-b6bed4ddccf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:10:18:ec:b1:f6:e7:6c:ee:ba:d0:1b:f2:04:a4:85:1e:c5:
         b6:3d:6f:e9:40:e3:8c:b3:e0:c6:12:d2:82:c8:db:3d:72:e9:
         c9:da:af:c0:ad:fc:09:41:34:09:09:db:d4:f7:43:c6:09:b3:
         01:30:0d:7c:cd:f9:86:a3:20:fe:9f:23:49:55:e0:5c:02:d1:
         76:9e:b9:75:f7:b9:b0:69:4d:0c:7f:5d:42:41:c5:5b:cb:fc:
         8f:1a:4b:64:44:c3:fc:24:be:d6:8c:af:6f:37:a4:a4:0b:ca:
         59:eb:b1:28:f0:5c:99:1f:a9:e2:bf:c9:bf:0e:9d:17:3f:ae:
         6b:29:ea:1f:62:fa:ab:e6:47:a1:d9:84:a3:fb:5a:37:45:16:
         b1:98:07:8f:ee:08:b6:a9:88:4b:b9:1d:51:8d:c7:bc:ff:77:
         fb:4c:e4:82:74:49:7d:d7:37:22:e4:47:9d:2e:15:ab:ed:2c:
         02:8f:f2:b4:34:5b:66:f0:fb:da:b4:d1:9c:e3:d4:46:e5:f1:
         ca:48:90:fb:1d:8d:c9:e9:57:67:e8:88:e8:03:77:24:27:ff:
         f8:97:15:39:e5:39:e6:03:03:1c:f1:10:37:05:66:84:df:f8:
         11:7e:50:8b:0c:4a:d8:9b:42:61:14:02:af:a6:18:89:2c:15:
         a8:ea:88:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:26:43 2025 by rpki-client