Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/93dda1db-7582-367f-ad23-f3d4942085de.roa
File:                     93dda1db-7582-367f-ad23-f3d4942085de.roa (raw, json)
Hash identifier:          93hNeg/Wwr6hKvRpzaxRnjgVl0hgfe7BrFX/s40+E/g=
Subject key identifier:   9C:06:FF:99:F7:C4:B3:18:DD:A0:18:64:F7:49:57:87:74:E9:A6:2E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AD0D65D67A0CB4D5BFDCD2A80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/93dda1db-7582-367f-ad23-f3d4942085de.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     13335
IP address blocks:        172.70.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:5d:67:a0:cb:4d:5b:fd:cd:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=f01638e4-994a-47ec-b7a1-1333fbe5f4ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0e:23:d3:5a:14:4c:e7:00:b8:6a:65:ec:2c:
                    fd:c5:60:4e:62:04:be:23:1f:3f:07:20:aa:d1:c0:
                    a2:7d:86:88:07:ec:32:65:2f:5b:89:e8:58:55:a1:
                    3c:ad:6f:ac:60:bf:2b:4b:98:50:db:00:7a:da:e9:
                    9b:68:68:8f:97:b4:97:5b:7d:1e:e8:39:6d:23:a5:
                    a6:13:9a:ee:a9:32:62:a9:1e:36:f0:bb:0c:7d:07:
                    d5:af:0b:52:dc:e7:c3:a4:fa:40:4e:98:f0:ed:8f:
                    bd:59:43:c6:79:6d:87:dd:d5:d5:4c:19:5e:e3:d3:
                    cc:a9:fa:1b:aa:09:ae:6f:3c:4f:86:33:06:1e:9b:
                    02:1e:13:be:e6:b5:5f:1d:e2:3e:a9:92:31:c3:05:
                    61:d8:10:2e:62:ef:8f:cb:07:3f:cf:4f:10:c2:cd:
                    3a:01:b2:3d:54:5d:96:09:32:c6:18:cb:9a:3a:62:
                    02:99:e4:c1:67:5a:9c:75:09:35:ba:92:e7:06:38:
                    a6:94:cd:8a:d8:c8:70:30:15:7f:8e:3a:39:e5:1a:
                    54:ff:83:82:e5:ee:aa:d7:2f:f4:62:c3:e6:98:36:
                    cb:f4:15:02:13:9d:a9:a4:57:24:47:d1:69:8f:91:
                    30:19:97:85:e7:ba:aa:98:69:0a:9d:56:b1:7f:08:
                    df:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:06:FF:99:F7:C4:B3:18:DD:A0:18:64:F7:49:57:87:74:E9:A6:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/93dda1db-7582-367f-ad23-f3d4942085de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:d9:f0:0d:53:3f:f6:95:3e:f1:6e:d5:d0:f3:42:dd:4e:58:
         ce:9b:ee:f4:d5:17:ed:4c:1e:85:37:a1:1a:64:35:27:3b:e0:
         9a:e4:18:52:6f:4c:f4:67:f9:d6:b5:c8:ac:bd:7e:88:1e:68:
         10:09:5b:fb:0b:f8:88:43:b7:d5:f7:a6:0d:6c:d6:0d:58:2b:
         00:a3:6d:7a:95:ac:09:2c:96:3c:3b:5a:ed:03:61:47:ff:3f:
         ae:82:13:2a:69:7f:cd:33:a1:33:51:dc:94:35:d8:07:81:8f:
         39:26:00:ca:dd:ca:bd:5d:4d:09:9f:03:f8:e1:e8:bd:28:81:
         e8:07:3e:d3:0a:e3:e1:3f:46:84:13:6e:65:23:52:a5:ab:04:
         1f:65:e1:02:d5:ff:8e:0d:39:e2:9a:44:24:9a:52:d2:7c:5f:
         0f:f7:21:7e:77:7f:de:7e:91:7a:c4:63:23:17:a8:2a:f7:14:
         f2:db:be:83:77:55:a8:d3:d8:b4:22:20:81:07:44:29:4c:66:
         9b:77:48:e6:15:87:e6:a4:48:30:01:29:7b:ad:0f:fa:55:87:
         84:08:80:e4:d8:5d:75:83:1c:c5:00:32:eb:8f:a0:aa:0e:ee:
         2b:d9:e7:13:af:89:9a:61:e0:9e:2e:10:0e:95:91:61:28:35:
         7c:6b:92:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:49:37 2025 by rpki-client