Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/711d3150-ef01-3ed9-8b82-ac03a4dcb50d.roa
File:                     711d3150-ef01-3ed9-8b82-ac03a4dcb50d.roa (raw, json)
Hash identifier:          PGAtTdFlf+mVxoFqp/PxlAepwBxCyiiXMGGrxBR78PY=
Subject key identifier:   62:D8:5A:0D:08:6D:5A:6A:12:16:71:F7:02:86:0E:ED:C4:C5:F9:8B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584B72A0DBB8AB7B8B692B227480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/711d3150-ef01-3ed9-8b82-ac03a4dcb50d.roa
Signing time:             Tue 07 Oct 2025 23:53:58 +0000
ROA not before:           Tue 07 Oct 2025 23:53:58 +0000
ROA not after:            Tue 06 Jan 2026 00:53:58 +0000
asID:                     14789
IP address blocks:        172.69.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:72:a0:db:b8:ab:7b:8b:69:2b:22:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct  7 23:53:58 2025 GMT
            Not After : Jan  6 00:53:58 2026 GMT
        Subject: CN=287c19a9-0a8e-4ac5-97f3-00b3363acd87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ec:75:56:8c:71:67:2b:17:23:2e:2b:ff:f9:
                    4d:e7:94:93:c7:df:c9:47:87:0a:42:82:d4:f1:85:
                    d4:df:57:65:e7:cd:f7:e7:b8:e5:46:b0:4d:fb:cc:
                    35:9e:db:46:87:08:a9:ad:f6:f8:b5:00:04:4e:dc:
                    88:1c:9b:13:8f:87:c8:62:0e:2e:71:61:2a:c9:5a:
                    c1:b2:13:31:66:33:a9:0e:d8:ce:aa:b0:11:9c:06:
                    6d:ce:ba:80:8b:6c:96:82:cd:4b:6b:93:dc:9a:19:
                    80:6e:c6:70:de:14:90:ae:7d:00:24:c2:ef:c4:d9:
                    e0:13:f8:34:b6:ed:73:1e:96:5a:23:85:78:f9:a0:
                    13:86:77:d6:dc:a6:a7:9c:a2:45:44:37:81:e2:7d:
                    d3:d5:d0:0e:6e:bd:76:87:2c:3b:86:76:ac:c1:67:
                    bf:0d:39:7e:39:a4:19:80:2d:e2:18:7b:69:c5:0b:
                    30:bc:88:e3:2f:3a:81:16:6a:9e:c7:54:d8:31:af:
                    fe:b5:69:c3:5e:66:b8:90:d2:8d:d8:0f:1c:4f:7e:
                    7e:bb:56:29:4a:e3:88:f4:de:fd:d2:6b:46:d4:a1:
                    ee:0c:99:22:ce:a3:e9:06:b0:99:71:d5:78:96:01:
                    e2:69:98:02:27:e5:22:50:d0:b4:a1:e4:e1:2b:2d:
                    2c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D8:5A:0D:08:6D:5A:6A:12:16:71:F7:02:86:0E:ED:C4:C5:F9:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/711d3150-ef01-3ed9-8b82-ac03a4dcb50d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:6d:d2:e6:30:de:1b:92:1b:4b:67:c8:93:6a:52:8c:d4:46:
         dd:40:71:0c:6a:07:e3:d4:f5:f5:23:55:fc:50:01:d8:5b:0e:
         19:93:c3:d1:37:04:1f:8a:e1:a1:67:a3:3f:22:07:b2:06:e3:
         2d:81:72:c6:fd:37:20:50:b3:cb:c4:50:d9:84:1b:e7:58:b1:
         bd:02:b4:76:e8:40:d4:fb:43:eb:13:23:ee:94:8a:9a:ba:9f:
         89:08:99:5b:b0:6e:5f:81:a6:91:42:a6:a3:37:e3:44:cc:9b:
         c2:46:9d:f5:9d:af:0c:3a:61:15:cb:23:1d:51:60:ab:51:92:
         1f:4f:1d:14:e7:ef:b1:40:13:1b:8f:30:59:49:91:1d:74:fe:
         92:c5:15:26:23:6e:0f:c3:6f:b2:97:70:f7:df:95:06:9d:52:
         4b:0b:16:53:d9:66:07:cd:14:76:9e:38:33:d5:68:8a:79:05:
         bf:48:58:ac:24:9a:1c:40:3c:7c:b2:31:e5:16:4e:6b:a3:de:
         a1:8e:85:24:a8:86:53:0e:ef:4b:44:8f:37:92:cd:fc:a1:6f:
         97:86:01:38:df:98:25:99:87:d4:f7:be:65:ce:51:65:d6:e2:
         ac:53:2f:58:d6:a6:6e:54:89:bb:a6:4c:a6:51:1e:3a:d2:f2:
         2c:a3:7d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:08:44 2025 by rpki-client