Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/81e30f51-62e3-3693-b941-3536fa854f85.roa
File:                     81e30f51-62e3-3693-b941-3536fa854f85.roa (raw, json)
Hash identifier:          njdIF0qKzjca4T3Qx4sdiaHHb8y56s/qy9v/dlzaUp8=
Subject key identifier:   D8:30:C6:66:CC:D0:3E:1F:E8:6B:DC:07:44:29:DD:13:84:AA:1B:7C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC71100CD40ED5A0BE47D3D00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/81e30f51-62e3-3693-b941-3536fa854f85.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        172.69.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:00:cd:40:ed:5a:0b:e4:7d:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=13f64b26-33bd-4cba-9f5b-dadfe519a6fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:75:b1:94:49:46:61:31:2e:0f:17:35:a7:9c:
                    09:27:9b:b7:a7:fb:c4:1f:ac:2b:15:55:1e:50:e7:
                    cc:1b:24:fb:ec:82:88:d6:37:a9:6f:d6:f3:0a:45:
                    51:0f:30:46:d8:84:c7:d9:28:93:9d:c1:56:a3:74:
                    5d:17:1b:67:28:bc:fe:a9:2a:54:59:e9:a5:c7:d5:
                    f3:a0:12:b2:fe:4d:35:0e:24:74:3b:15:ab:ba:12:
                    dd:1a:8f:33:0a:ff:61:9f:97:b8:b3:1a:03:2a:8d:
                    f7:6a:8d:4a:a5:73:21:a0:9f:69:77:64:ca:86:51:
                    09:4d:03:ba:82:ef:2d:8c:83:16:22:b9:98:2c:32:
                    d5:dd:fc:7b:ad:00:88:53:ec:4c:7c:b9:96:f9:a5:
                    a2:37:33:d6:d1:f0:a9:29:c4:cb:72:66:2d:fd:79:
                    ce:d3:96:cb:eb:79:f6:84:27:7e:60:ba:5a:42:eb:
                    e7:a0:26:86:e5:3c:00:83:77:b2:2b:40:b8:7a:52:
                    a6:46:92:dd:5c:51:67:e2:a4:0b:25:63:d2:e6:38:
                    d0:06:1a:02:9f:34:d3:0d:77:21:bc:2f:c7:69:3a:
                    83:00:e0:0d:71:b0:9f:12:d7:78:70:29:c2:db:97:
                    c9:06:e5:dd:dd:0c:49:2f:71:88:9d:63:b6:c7:44:
                    16:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:30:C6:66:CC:D0:3E:1F:E8:6B:DC:07:44:29:DD:13:84:AA:1B:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/81e30f51-62e3-3693-b941-3536fa854f85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:63:db:78:86:ec:56:99:1d:d9:c0:0a:aa:a4:c8:12:36:92:
         05:10:2f:b9:59:b0:f1:bc:47:f5:8a:28:d7:38:06:ad:1e:7c:
         1d:91:9f:9c:8f:5a:8f:43:49:d6:f3:8a:7e:7c:21:9d:3a:fb:
         c6:89:87:3c:d6:2f:f6:a6:d3:20:03:c8:15:72:a0:fe:5b:2e:
         35:00:d4:3b:e1:39:b6:6f:4b:39:f4:a8:35:1c:57:59:8f:14:
         4f:86:c7:dd:d6:40:85:d4:31:a4:6f:5a:fe:db:1c:20:36:39:
         83:e6:b0:00:8a:28:94:ca:bd:4c:5f:07:9c:7f:92:d0:d1:f1:
         a9:2b:61:1a:3a:72:b9:1a:77:dc:50:f0:a9:50:c0:b4:98:2e:
         f6:26:11:cc:42:0e:5b:6a:40:b0:e0:a8:a8:5e:3e:ab:f5:b1:
         9a:94:f8:e4:15:bd:fc:72:b6:cc:27:07:50:f3:0f:40:20:65:
         4b:0c:8a:33:c8:ce:e0:8f:3d:9b:ca:e2:fc:a6:46:cf:f2:fa:
         c6:b2:95:1d:b6:d5:52:a4:1a:3f:50:f3:ea:c2:a3:e0:75:97:
         8d:0c:2e:8f:4c:6c:19:09:77:1f:b3:21:5a:aa:21:4f:8a:26:
         a0:ae:82:83:8d:a2:f4:11:d6:78:49:83:38:6a:a1:21:4e:2e:
         72:b8:49:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:06:26 2025 by rpki-client