Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7fad9b23-4779-30e6-a138-18cb124dd0c3.roa
File:                     7fad9b23-4779-30e6-a138-18cb124dd0c3.roa (raw, json)
Hash identifier:          ZLAZCf2YVUvJNm+VGFZZFBHNtC6eL+wHvIrvZurkE7M=
Subject key identifier:   AC:D8:56:78:DF:CB:15:C7:76:AC:16:E2:3E:BB:11:BE:4A:43:B4:0D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC8765E7E1F738B4F311C7B00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7fad9b23-4779-30e6-a138-18cb124dd0c3.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        172.70.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:5e:7e:1f:73:8b:4f:31:1c:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=e216abc1-279f-4452-92d1-325280174855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d5:51:37:de:ce:eb:e7:e8:6a:d2:fb:b1:be:
                    19:cc:04:35:85:40:f6:35:0d:c3:33:ee:01:13:13:
                    75:48:b4:2d:0d:3e:79:1d:ec:06:e2:2c:30:05:31:
                    2f:eb:c6:e5:e5:6a:b8:20:a7:38:10:5b:a8:f5:19:
                    6d:4e:d7:90:31:ec:84:3c:cf:d7:1c:36:dc:c4:46:
                    ad:fe:d5:52:cd:1a:41:b8:0e:bb:d3:d7:9d:35:85:
                    7e:45:5c:d9:14:9d:12:51:3c:b4:22:86:3f:28:53:
                    0b:4b:4a:a0:bf:29:da:7e:6b:4d:74:86:61:c0:1b:
                    7e:b2:58:9f:4e:f8:c1:8a:85:6c:86:59:8e:23:46:
                    58:17:c3:f6:45:5e:f6:04:96:00:8a:32:33:d9:34:
                    08:9f:cd:5d:40:7b:39:ce:c9:74:68:b0:61:9c:03:
                    6c:b2:df:c6:ca:d8:71:c8:64:0a:61:d8:d4:13:76:
                    ef:d3:f1:c6:24:a4:88:e6:3d:1a:64:dc:34:35:29:
                    c2:9b:d2:90:4b:3e:be:8b:d4:73:89:4f:2f:1c:17:
                    3b:7f:34:be:d0:73:b0:ef:ed:77:f5:9a:51:7e:a9:
                    65:6d:3e:55:e8:51:d6:5b:df:a2:b6:1c:2a:04:cc:
                    5b:78:04:fc:54:d1:bf:c0:bd:5d:59:1f:d6:4f:d3:
                    15:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D8:56:78:DF:CB:15:C7:76:AC:16:E2:3E:BB:11:BE:4A:43:B4:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7fad9b23-4779-30e6-a138-18cb124dd0c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:44:29:44:f8:44:de:bc:17:ce:5a:2c:a7:22:3a:b8:cc:f1:
         2e:7f:cc:94:59:74:03:df:24:e1:95:d6:19:02:d0:66:15:12:
         f3:7b:06:d3:69:2f:b5:b3:ab:4b:7c:c8:f4:f0:c4:6c:1f:42:
         ed:dc:94:31:25:33:64:5a:86:21:81:72:8d:9b:f8:1d:c1:0f:
         c7:f6:ae:2a:6e:c4:6d:8b:81:9b:5b:fa:b0:24:fa:a9:b9:2b:
         3f:97:df:38:2b:bf:99:91:e1:4e:c8:28:2f:b9:7a:dc:22:4f:
         98:f7:aa:9c:59:3b:97:34:7d:b7:7f:2b:a1:90:c4:e1:ef:fc:
         13:7c:fd:b2:cd:25:68:11:d6:37:e4:90:44:c1:ed:01:e9:cf:
         e9:30:2a:26:11:37:7d:ed:bd:dc:d7:a7:ab:24:81:b9:bf:64:
         4b:6c:cd:82:6b:a6:8e:59:28:4c:63:4b:ca:7e:e5:03:da:14:
         db:39:c5:b8:df:30:fa:08:66:aa:e6:4d:28:5a:f2:da:53:8c:
         2d:75:d8:13:d0:b4:f5:2f:a9:e7:9a:14:e8:69:48:13:eb:dc:
         8f:74:59:b4:db:4f:6a:8c:d4:b9:2e:28:ec:d1:ce:79:c8:da:
         ea:07:0b:ab:aa:f9:0f:ab:f8:63:f6:a5:5b:9b:2e:9a:28:46:
         88:08:5c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:19:08 2025 by rpki-client