Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7f7cfc6b-9b38-399b-991f-6e7d6a2fcf55.roa
File:                     7f7cfc6b-9b38-399b-991f-6e7d6a2fcf55.roa (raw, json)
Hash identifier:          3dvBUTBG3BCdipYU7Hz1HbUinq+cDsNJkRqSCqtAkU0=
Subject key identifier:   E9:AA:FA:82:90:6E:1C:11:5C:E2:BB:AC:DF:75:B3:7C:77:C9:B1:C1
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AD0D64F75DB9F202E32291760
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7f7cfc6b-9b38-399b-991f-6e7d6a2fcf55.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     13335
IP address blocks:        172.71.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:4f:75:db:9f:20:2e:32:29:17:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=68ce0c72-976e-4382-a729-e1acefb10ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:92:52:58:42:95:06:37:6d:fe:fa:f7:59:73:
                    f9:23:06:84:17:72:90:f0:8c:f6:8b:f5:f4:83:01:
                    e5:94:9a:c7:f1:fb:14:0e:32:2b:51:8c:f0:d9:55:
                    88:f9:1b:93:01:cb:df:0e:68:c1:31:a0:d8:67:4b:
                    85:1d:a7:d9:f5:ef:0c:1b:88:96:cb:a4:01:be:bc:
                    18:e5:c5:18:5a:f8:74:42:f4:77:4f:3f:58:64:1d:
                    41:55:e6:f9:67:d4:3e:99:9c:c4:b9:e9:ed:3e:e3:
                    91:60:43:72:57:4f:94:d9:69:b6:69:48:ca:d1:09:
                    02:b1:94:ae:28:21:6f:8f:90:a6:9b:46:9f:4a:36:
                    c2:1b:94:d5:f2:54:95:d8:95:5c:58:68:69:e3:cb:
                    29:87:36:d9:16:6f:b5:aa:2e:ef:da:9f:6b:6c:db:
                    ee:8c:2f:6e:ce:35:6f:5f:3a:ca:b1:d2:27:2e:88:
                    c5:a8:26:dc:91:8b:82:e3:5f:3e:99:26:62:ef:d8:
                    7c:50:d6:bc:90:3d:02:c6:d8:33:51:4f:3a:78:19:
                    9e:57:2c:66:c2:5e:06:e1:02:31:c1:ee:b7:f7:c7:
                    f0:d0:68:58:40:d4:aa:b8:b4:dd:d9:b5:9d:5b:20:
                    13:f7:1b:01:78:9d:06:0b:1e:6c:32:b9:8b:14:d3:
                    fe:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AA:FA:82:90:6E:1C:11:5C:E2:BB:AC:DF:75:B3:7C:77:C9:B1:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7f7cfc6b-9b38-399b-991f-6e7d6a2fcf55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:97:5e:3b:b8:ef:23:2a:6f:a6:15:db:68:8a:31:df:08:33:
         19:f5:2b:50:11:f8:61:ff:59:b6:93:77:a4:bc:68:05:e2:0d:
         b0:ac:65:31:7d:38:de:f6:f3:f7:35:8d:b0:73:20:f0:1f:cf:
         f4:a6:6f:75:bb:30:1a:84:e0:6b:e9:dd:5a:67:d2:3e:bd:c3:
         39:3c:11:25:fa:f4:99:6d:6c:34:18:03:11:74:f5:5e:82:51:
         3e:32:1d:5c:06:f8:5c:e8:44:b9:35:d4:eb:e5:2f:25:5c:c3:
         b1:7a:b4:1b:4e:11:1f:43:4c:31:54:2d:99:2c:58:96:21:b9:
         17:8b:d7:44:3d:63:2b:a3:93:29:c6:99:81:8d:c3:d6:44:99:
         a5:e5:84:f3:cc:03:86:fe:f6:9b:61:08:ff:69:a8:04:38:49:
         eb:4b:ec:a3:b3:19:5c:42:3e:53:b9:ac:fd:c6:fb:05:df:85:
         d1:7b:54:43:32:61:10:4e:5f:01:bb:75:a2:cd:e3:de:06:8e:
         ec:20:4a:ec:b9:96:74:2a:b8:05:67:10:7a:d9:46:35:91:51:
         27:93:f7:9a:e3:50:bf:75:1b:0c:bc:bc:a7:b2:c6:58:3f:72:
         43:d5:12:56:f2:84:c7:8b:01:a7:72:43:70:e8:07:2c:e9:f7:
         25:c8:28:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:14:05 2025 by rpki-client