Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75c7d92d-e49e-388b-9fb6-0577ca864b05.roa
File:                     75c7d92d-e49e-388b-9fb6-0577ca864b05.roa (raw, json)
Hash identifier:          xz2Np2QXEQIecVXH0NPy9Uw0QMYxkEOuxMA8YGsoFIQ=
Subject key identifier:   5C:6C:B2:F6:8A:F6:CA:7B:F6:D2:6C:A2:F0:1D:8C:46:30:E4:E8:8C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC8766E98C2E51ED5387AD640
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75c7d92d-e49e-388b-9fb6-0577ca864b05.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        172.68.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:6e:98:c2:e5:1e:d5:38:7a:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=d542a818-219d-4396-9b53-77a95d48a781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ba:a9:9a:33:a9:e0:18:17:73:a6:8b:42:f0:
                    77:f6:4e:1e:c2:30:5e:6e:e0:c1:4c:32:f0:ce:e1:
                    27:f6:9a:8e:9c:33:22:50:95:22:b9:19:20:ca:c1:
                    26:9e:f8:46:1f:20:9a:44:d1:f9:f8:0e:98:a9:8c:
                    ac:ea:bb:b9:b6:b9:bb:d9:73:5e:b3:13:af:3d:90:
                    6a:51:83:6a:cc:9e:34:37:f3:dd:3b:54:68:75:31:
                    cd:f3:bd:f7:ac:d6:f2:96:79:fe:f3:44:9d:8f:6d:
                    5c:66:60:17:4e:b6:55:5e:da:9a:ea:22:7d:0b:b8:
                    0a:7c:b5:86:f1:98:9a:75:cc:96:ed:b8:00:87:1c:
                    1f:a7:15:48:f0:16:b1:71:f7:77:6b:c6:8d:4e:1c:
                    d2:bf:12:dc:f0:3a:ba:ae:57:a5:e5:fb:58:a4:16:
                    44:26:70:11:8e:42:36:f6:90:32:f5:68:f2:85:92:
                    91:30:9f:d0:d3:be:2b:83:9c:f2:e1:10:b3:3b:12:
                    a8:4d:32:98:0c:dc:ec:49:2d:65:d2:00:37:ce:8e:
                    9b:4f:93:4e:42:ae:5e:f8:a9:c2:a8:39:22:d3:73:
                    1d:23:3d:33:64:a5:92:2c:d4:10:18:40:d7:c9:48:
                    90:b5:60:f8:d2:16:03:be:cc:8a:7f:02:4b:32:78:
                    2b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:6C:B2:F6:8A:F6:CA:7B:F6:D2:6C:A2:F0:1D:8C:46:30:E4:E8:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75c7d92d-e49e-388b-9fb6-0577ca864b05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:13:8f:81:65:68:fe:fc:67:e0:bc:66:cf:0e:6f:1b:f1:40:
         33:65:7a:17:da:11:fe:35:4e:2f:8f:b4:a7:98:e4:5d:cf:d7:
         11:b7:b9:0a:d1:44:12:e5:d8:d1:55:94:1f:0f:86:f7:29:6e:
         b9:15:63:52:32:05:06:af:8e:6f:b6:d8:c4:66:f9:04:8e:83:
         8f:50:57:63:43:a7:4c:61:1e:56:1f:38:a6:91:27:47:1d:41:
         fa:cb:6a:5d:f2:dc:fa:7b:e1:fe:89:05:31:85:dc:4f:f0:88:
         6c:0c:e0:20:37:39:42:4f:b5:5f:7d:57:e2:3f:3b:5a:7c:78:
         14:bb:3d:ff:cb:e0:ed:5e:62:7f:d5:f4:9f:18:86:5f:33:5f:
         5d:32:f7:15:62:5d:21:ee:be:74:76:98:3f:b5:00:a2:df:6c:
         9b:83:92:ce:f5:da:6c:d0:54:dd:44:61:5a:bf:b7:ef:1d:69:
         3f:65:05:bd:01:c3:f5:61:73:89:85:44:c9:b1:01:82:37:26:
         b2:7b:e3:ea:fa:14:e8:31:50:38:84:33:b6:c9:17:e8:50:4e:
         05:f5:9e:d5:93:0b:0d:28:b4:93:18:fe:53:e9:9b:5c:e9:ff:
         82:ad:97:10:99:02:18:61:5c:65:4d:c4:94:06:f0:18:65:ef:
         24:71:c3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:31:14 2025 by rpki-client