Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9121c790-ea02-3ebc-956b-8cd0087f0914.roa
File:                     9121c790-ea02-3ebc-956b-8cd0087f0914.roa (raw, json)
Hash identifier:          ts0uDI/Buaa06Yw1ZymxzOCA205sysoBuDM88DXUnNM=
Subject key identifier:   88:72:CE:80:5E:59:97:69:D0:70:15:23:3B:30:06:5D:2F:8F:F6:37
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584ACF71089D31CC0601F8090D60
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9121c790-ea02-3ebc-956b-8cd0087f0914.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     13335
IP address blocks:        172.70.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:08:9d:31:cc:06:01:f8:09:0d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=5b704257-eab6-4f13-af96-38f697a6aa44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:31:7a:39:60:64:27:95:fe:8c:4e:3a:e5:db:
                    c5:ac:e6:5b:a8:7f:63:43:29:35:0b:57:09:b3:9a:
                    ff:78:48:0a:6b:ec:eb:23:c1:fb:6e:25:6f:f1:09:
                    9e:9d:66:2b:56:71:02:37:70:25:72:97:26:e7:8b:
                    66:d9:7c:47:b3:39:71:ba:40:f5:93:f9:1e:fb:f2:
                    b2:d7:b5:73:62:97:fe:44:bc:ab:e2:65:3c:5f:e1:
                    5b:df:52:3c:77:0d:01:5f:b3:b2:24:d5:3d:bf:7e:
                    6a:10:8c:af:33:02:66:6a:cc:d5:4d:ff:5a:40:3d:
                    cc:1a:62:04:dd:bd:97:6a:0e:a3:67:c5:bb:1f:2d:
                    84:91:f8:23:ab:d5:4f:88:28:b7:44:81:89:77:b6:
                    f8:f3:26:5f:d0:78:b0:f4:3e:00:1f:46:bc:e9:02:
                    4f:ba:98:4d:dc:a2:5f:79:1d:b6:65:8e:01:d3:0d:
                    69:7e:6c:52:b5:05:99:52:65:f3:2b:b2:15:0d:06:
                    77:3a:19:73:54:6c:f6:5a:ea:e7:08:cd:4e:80:02:
                    c1:5f:cc:6a:a8:3e:56:24:11:5d:e4:8a:2a:89:b6:
                    db:92:dd:79:72:96:d9:1d:73:99:37:ad:4b:96:2d:
                    0d:51:5e:35:d7:1f:aa:11:85:3a:3c:81:1a:6f:82:
                    1e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:72:CE:80:5E:59:97:69:D0:70:15:23:3B:30:06:5D:2F:8F:F6:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9121c790-ea02-3ebc-956b-8cd0087f0914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:0e:f7:04:a9:0a:cc:7d:3f:d3:63:98:cc:83:53:15:e2:0a:
         41:75:f4:98:de:6a:7e:81:02:56:c0:f4:e8:e6:c2:82:48:d4:
         13:6c:34:e0:57:e5:2d:2d:c1:19:30:ab:04:9a:97:f0:6b:0d:
         4a:5f:d4:c0:cb:54:a8:d3:57:42:20:c6:18:db:d6:be:0f:05:
         21:61:9e:4f:c1:54:bd:9e:09:e5:7b:34:4f:cd:1e:95:12:8a:
         0d:aa:8a:8c:6f:01:b4:d6:f6:a5:cb:93:22:dd:e1:b7:d2:b1:
         4f:f3:9c:b4:9c:dc:61:3b:a2:1d:51:8f:35:19:29:7b:d6:d2:
         49:dd:0c:38:22:03:cf:9b:cf:85:e3:e9:f7:e5:ec:c5:7c:dc:
         95:63:9c:e5:99:50:c0:06:d8:23:ec:00:52:dd:dc:54:8d:47:
         17:c1:7b:b5:16:fc:25:2b:cb:ad:ee:97:b8:7d:31:e4:92:ea:
         1c:4d:37:e6:d9:e5:9f:e1:d5:9d:d8:d6:12:99:3a:6a:cb:61:
         32:4e:e6:13:4b:99:80:4f:2b:1a:db:b6:bf:8c:f5:ab:99:cf:
         71:11:4c:73:83:e5:9d:66:fa:6d:5e:6e:c0:25:df:9f:91:d0:
         f3:a4:5e:32:98:80:b8:f3:93:79:77:d7:9f:55:5b:bc:45:87:
         13:f5:fd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:10:43 2025 by rpki-client