Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5dcaeb10-b7cb-3505-8e13-e528c0587c0f.roa
File:                     5dcaeb10-b7cb-3505-8e13-e528c0587c0f.roa (raw, json)
Hash identifier:          Stkg8v4s1za6hIDdxGdIDL+bsnK2iirDJImqjphMQjg=
Subject key identifier:   08:95:A1:EF:37:59:72:B5:34:32:5C:7E:94:28:DE:BE:24:7B:44:F2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC87673D5EDA1F9C81AD1BCC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5dcaeb10-b7cb-3505-8e13-e528c0587c0f.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        172.64.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:73:d5:ed:a1:f9:c8:1a:d1:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=66998821-5252-4755-81ed-b53c86641836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d6:32:f8:80:3c:74:f9:30:f1:a7:d3:0d:7d:
                    d3:09:9a:d5:c5:97:45:e6:78:d3:30:d5:37:98:ab:
                    b1:ee:fa:9b:aa:9f:cf:9b:d0:3f:60:53:ce:21:c7:
                    a4:16:30:40:7c:9d:be:09:6c:74:4a:67:95:96:72:
                    96:ff:a5:b4:52:01:35:b9:f5:26:d6:9a:92:e2:68:
                    43:71:a1:55:85:bc:66:45:05:73:57:7d:ab:82:f7:
                    38:e2:3e:e2:9e:9b:09:8f:95:95:3b:70:d5:eb:11:
                    77:4b:60:28:1f:74:8d:5d:41:88:16:de:b3:ef:cd:
                    92:ef:c1:b1:a6:03:0d:b4:fc:6b:cc:1a:9e:5e:9b:
                    ba:2a:01:56:07:45:0c:3f:73:55:69:b0:eb:9b:15:
                    85:40:fd:02:19:f1:fc:6d:e8:1a:54:4c:33:90:71:
                    cd:98:e3:13:81:bc:3f:7d:79:23:4a:f7:4f:70:9f:
                    a1:e3:8a:ba:86:f2:4c:bf:1c:09:bc:fc:10:e6:11:
                    9a:0d:ce:d8:be:c0:a7:eb:70:29:37:b2:eb:4f:c3:
                    84:d2:42:ec:a1:75:58:d0:8b:12:05:4a:19:26:66:
                    e9:5b:ee:b9:26:cf:e5:f5:61:db:f8:fc:61:13:d3:
                    2e:02:a0:28:61:83:d1:84:ef:30:f1:07:90:11:9d:
                    74:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:95:A1:EF:37:59:72:B5:34:32:5C:7E:94:28:DE:BE:24:7B:44:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5dcaeb10-b7cb-3505-8e13-e528c0587c0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:2a:51:d5:22:c1:3f:40:e8:f2:49:5b:2f:c5:8c:2a:f9:13:
         f3:c3:8a:e9:63:6f:98:2a:89:1e:77:28:1e:14:f4:e1:86:eb:
         c3:ad:67:38:af:a3:ba:71:cb:94:1a:6a:10:4a:71:ff:dd:a0:
         1f:ab:25:d3:83:cf:87:65:68:c9:20:94:6c:0a:45:03:f1:1b:
         c7:24:48:0d:4d:4b:2f:6e:f5:1e:5d:0b:a3:9d:fa:20:9c:6d:
         0f:1e:b7:2c:df:a7:74:f9:e6:85:8c:0f:5f:3d:6c:fb:db:37:
         50:f7:db:73:b0:05:60:30:35:65:18:cd:68:f7:5c:73:30:6b:
         b9:c2:1f:48:03:4d:b0:6f:f5:05:e7:3d:8a:73:c0:2e:25:35:
         c5:5f:a6:5f:e6:c4:35:f7:8c:15:e9:a0:c6:24:fa:a9:3d:7a:
         71:e1:23:ad:7f:b3:9d:4f:d5:31:cc:d3:ae:4f:23:06:9a:37:
         b5:ea:e4:3c:7a:3f:67:b6:bd:9c:e6:de:02:26:03:a4:06:83:
         4c:4b:c6:5a:e4:2c:f2:0c:14:01:dc:90:89:00:ce:ce:50:01:
         81:aa:47:a7:b7:39:93:6e:10:3d:59:15:ba:62:3f:e4:4e:6d:
         1d:fd:d1:fa:98:38:09:4b:fd:3a:86:3c:78:87:c5:36:00:7e:
         86:15:78:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:11:23 2025 by rpki-client