Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/453647a4-ccfc-32e4-85bf-b97ed763a038.roa
File:                     453647a4-ccfc-32e4-85bf-b97ed763a038.roa (raw, json)
Hash identifier:          4XJNshymSi6Gk+kf8rJtfOCYOyjwW89KyG7PEWEp6G4=
Subject key identifier:   49:63:38:0A:4E:4E:37:79:AC:65:63:62:CD:31:15:A8:23:74:90:B2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584B86492B0CA0A3402BD1A11400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/453647a4-ccfc-32e4-85bf-b97ed763a038.roa
Signing time:             Wed 15 Oct 2025 00:53:27 +0000
ROA not before:           Wed 15 Oct 2025 00:53:27 +0000
ROA not after:            Tue 13 Jan 2026 01:53:27 +0000
asID:                     13335
IP address blocks:        172.68.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:86:49:2b:0c:a0:a3:40:2b:d1:a1:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 15 00:53:27 2025 GMT
            Not After : Jan 13 01:53:27 2026 GMT
        Subject: CN=b7441103-58a3-41aa-83c6-991f4d538975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3f:f5:c8:91:ff:26:a0:9a:b4:3c:31:5f:da:
                    0f:48:1f:56:bb:a5:01:1b:09:e9:e4:cf:f7:e9:41:
                    df:f3:31:b2:66:eb:79:83:ff:55:0d:ab:a9:d0:07:
                    67:4d:d2:b6:e8:7f:33:81:57:86:0f:e6:6d:15:6a:
                    25:20:a8:3b:c4:8b:b1:40:19:8e:a0:9e:74:c2:dd:
                    09:6a:30:4a:fa:de:df:8a:ab:85:93:fd:f7:29:c5:
                    7a:e9:76:00:83:99:1e:51:c8:e6:db:59:66:a4:a1:
                    37:4f:dc:6b:39:58:a9:e7:7b:df:73:55:5e:65:0f:
                    65:56:77:9c:a2:8f:c3:ac:2c:f5:52:de:c7:1d:db:
                    b1:4f:a2:0d:4a:46:8e:a1:5a:a2:91:c9:0a:ec:0c:
                    86:86:db:23:74:91:e3:0d:d2:ea:63:b7:87:e2:23:
                    18:7d:0a:a8:2b:12:bc:3d:91:0a:9d:02:25:10:86:
                    b7:8a:07:ab:40:51:0c:f0:3e:8c:a6:97:e2:5a:e6:
                    d4:80:d5:04:5a:d2:f6:7b:e3:79:a2:66:1f:a4:f6:
                    8d:3e:69:2b:06:ae:a8:ed:7e:c7:25:98:91:98:f1:
                    80:23:5c:e4:e8:cb:14:f9:13:69:fa:03:72:e5:89:
                    b1:2b:1e:d6:6a:a4:28:b5:b6:2c:da:1d:96:f1:d1:
                    8f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:63:38:0A:4E:4E:37:79:AC:65:63:62:CD:31:15:A8:23:74:90:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/453647a4-ccfc-32e4-85bf-b97ed763a038.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d2:58:37:8f:27:e6:ae:fa:b7:2f:c6:56:8d:2f:07:c1:0e:
         e7:bb:a4:f3:18:7d:15:e0:48:80:d2:18:c5:4f:bd:af:5f:91:
         e6:34:91:fa:3e:3e:20:5a:32:80:a3:84:9a:bd:dc:c2:c7:31:
         38:f0:c6:13:3e:53:90:fe:c7:81:dc:17:fb:12:66:22:e3:18:
         08:28:ca:7d:4c:ef:62:0f:28:05:1e:f9:54:f2:5f:eb:9c:eb:
         05:32:bd:b5:ea:7b:2b:e9:5e:fa:02:e7:4b:99:8e:a9:7c:06:
         37:ba:b6:f2:44:c6:88:09:2f:3f:e9:e4:7d:b1:63:a2:44:b3:
         8d:f7:b6:71:cd:f2:6c:86:9f:8f:e7:02:b9:31:8c:26:32:71:
         a2:05:ae:84:2d:e5:23:c8:17:d0:8f:cc:ac:9d:31:1b:29:1d:
         9b:6d:b8:d9:73:31:52:ab:8f:8e:d7:53:49:8c:45:b5:7b:e4:
         f0:df:ad:9b:7c:c7:8d:d8:17:12:7f:7b:80:a9:f4:6e:41:af:
         07:6f:f2:48:0b:06:fc:80:4a:d4:bb:6f:e8:3b:91:30:4b:8c:
         a7:3d:9b:64:eb:e3:6d:d1:38:f6:f3:26:f6:0f:e1:2d:ad:c5:
         70:b4:1d:8c:15:f3:60:7e:f1:07:88:22:6e:f7:04:27:6c:b2:
         95:99:d7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:26 2025 by rpki-client