Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/797dc0f9-8fa9-347e-ab47-5a2d9cdc8fb7.roa
File:                     797dc0f9-8fa9-347e-ab47-5a2d9cdc8fb7.roa (raw, json)
Hash identifier:          EKE7/8dqGUYwA0+NwKwG5Zqcrl0wwZG7yJ+8B6eKMgQ=
Subject key identifier:   B1:4C:F1:CD:ED:C6:E9:D9:1A:5E:54:EA:8C:14:03:22:9D:5A:08:6D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584ACB41193C1807FFF80F673680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/797dc0f9-8fa9-347e-ab47-5a2d9cdc8fb7.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        172.69.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:41:19:3c:18:07:ff:f8:0f:67:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=c10d9c5a-eea4-4c4d-a86d-295506355029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ed:ba:71:45:6b:d4:7b:89:30:04:da:dd:51:
                    46:56:2c:a1:7c:d5:03:85:73:df:60:73:b2:87:ed:
                    82:b1:f9:08:13:64:1b:1f:6b:7e:cd:60:3b:6e:97:
                    cf:c1:71:60:e5:64:82:b5:3b:8b:7f:c2:fd:77:db:
                    20:5e:4e:16:7e:3a:eb:6f:29:9c:3e:7f:a6:aa:c0:
                    4c:88:fc:f6:7a:77:e6:f3:9a:96:cd:55:cf:04:2f:
                    4b:df:4f:0a:17:85:d9:33:99:cf:7e:b1:3c:e1:f3:
                    92:2d:26:2e:d3:16:c7:39:d1:6f:54:e3:9d:1a:6c:
                    81:5a:8e:50:13:94:7d:fa:5c:8c:22:d2:d3:00:b3:
                    20:f2:e1:a4:d5:70:17:89:90:f8:78:7c:3c:e7:f7:
                    46:9c:41:d6:2c:c4:a4:7a:9f:ff:33:e5:6b:9f:66:
                    ca:38:62:19:5f:2e:cf:c2:cc:4d:54:ff:c2:81:8f:
                    2c:ba:7c:98:22:02:e9:c1:da:0f:cc:53:af:09:7c:
                    b0:b1:82:98:b3:91:e7:a7:41:3a:55:2d:2d:d7:76:
                    ef:e0:10:6f:78:73:e4:73:96:f7:a6:f2:9c:b0:86:
                    91:c3:ce:aa:0c:d4:61:68:c7:17:df:bc:ac:32:fb:
                    dd:40:34:5e:6b:74:1e:33:fe:87:e4:e5:5c:09:f6:
                    3e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4C:F1:CD:ED:C6:E9:D9:1A:5E:54:EA:8C:14:03:22:9D:5A:08:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/797dc0f9-8fa9-347e-ab47-5a2d9cdc8fb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:18:08:13:4b:34:d4:2a:22:dc:7f:e5:b1:5a:3d:e5:d0:de:
         13:d4:44:8b:56:df:67:80:e4:ca:9c:bc:3d:4a:27:c9:17:82:
         8d:76:2a:a8:6f:9a:31:f5:05:8d:e2:db:b3:8e:ce:2d:20:62:
         b1:39:67:b8:50:8a:6d:e9:be:f2:42:83:ab:ec:31:e3:49:68:
         6f:29:1c:9d:1e:b4:df:71:db:f5:f3:fb:5e:ae:2c:c3:e3:ab:
         21:86:dc:b8:e1:d7:a0:bc:86:6a:67:67:4d:56:5d:44:fd:66:
         1a:32:65:7f:1b:e5:c3:56:7d:16:ca:68:a8:9f:d6:77:a0:37:
         3a:66:b4:b5:39:31:26:b3:89:97:77:10:28:64:a7:6f:87:aa:
         6e:ad:30:27:cd:1e:9d:9c:4b:17:e0:ff:48:1a:2b:94:cf:bf:
         17:72:e7:9f:e2:aa:f3:d5:36:70:ab:f0:e1:56:8c:a8:f5:84:
         4f:51:20:f1:5a:98:94:02:ea:75:bd:fa:6d:72:69:3b:17:a5:
         c3:58:67:a6:d5:b8:fd:d5:88:9d:31:06:d2:3a:bd:df:a1:88:
         6f:58:24:ab:9b:89:c8:ae:a0:09:7b:37:3f:7d:94:cd:3a:6b:
         9d:f6:42:00:74:99:71:ac:50:9f:32:2e:4e:06:45:bd:77:82:
         0a:2f:6a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:11:22 2025 by rpki-client