Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/989129ce-efbf-32bf-af20-d252442c0b18.roa
File:                     989129ce-efbf-32bf-af20-d252442c0b18.roa (raw, json)
Hash identifier:          V20M4OjnZczAR18MxDA69vuYVRKxyYsQlV+f2mc2Co4=
Subject key identifier:   5A:02:DC:AD:A8:45:A9:B9:83:86:B8:A8:47:11:86:C6:0F:97:56:E9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AD0D65E5ECAC0897862DC8B20
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/989129ce-efbf-32bf-af20-d252442c0b18.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     13335
IP address blocks:        172.71.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:5e:5e:ca:c0:89:78:62:dc:8b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=888919a7-882f-4a7a-9ba3-1d372d153052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:82:8c:ff:a3:e5:e8:48:1d:de:02:0d:c0:d2:
                    29:35:d2:ea:23:e9:ab:d3:14:bc:d6:cd:ae:a3:44:
                    88:f3:ce:f6:68:b6:fc:8d:fc:a9:f7:11:c9:97:bb:
                    60:3f:db:06:95:c9:3b:16:a0:eb:29:a3:bf:38:fe:
                    c9:90:5d:a3:34:03:b9:6a:d9:84:3f:ec:db:47:12:
                    3f:16:cb:d8:e3:de:2b:53:7c:20:aa:f7:59:cc:ef:
                    1c:31:a8:da:c8:b3:0a:9b:3c:3e:cf:52:9c:e4:e5:
                    e7:31:5f:3f:88:32:e6:2c:c8:79:41:5a:06:ac:4c:
                    08:a0:ed:c9:c0:21:c9:6d:1b:87:56:8b:d5:bb:7a:
                    6a:b4:2d:9a:a3:44:19:cc:47:0f:e6:78:96:ef:b5:
                    31:74:a3:fd:c7:fc:6b:99:47:c0:56:fb:b9:c4:38:
                    ec:32:0a:42:a3:d3:ce:01:14:d9:e5:c8:da:e0:a7:
                    eb:46:29:2f:a9:07:24:1d:19:15:45:9b:1d:2a:bb:
                    13:8d:d7:ef:13:9e:cb:fd:4b:17:e7:86:81:ec:dd:
                    08:71:8a:b9:59:1c:2d:c6:57:d2:e1:ae:ae:e9:e7:
                    ef:48:68:ed:a9:09:d3:3f:7b:66:e1:4b:41:76:81:
                    a9:ab:7e:ce:fc:68:b9:6f:d5:cb:2f:56:fe:c2:ed:
                    68:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:02:DC:AD:A8:45:A9:B9:83:86:B8:A8:47:11:86:C6:0F:97:56:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/989129ce-efbf-32bf-af20-d252442c0b18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:65:2a:de:d4:31:52:cd:81:90:62:b5:c5:0b:fa:0d:6a:89:
         cb:25:63:80:78:f2:4c:5d:67:c0:59:0d:da:50:9c:05:f2:40:
         f2:a2:59:d4:23:9f:6b:5c:78:a8:e2:be:59:b8:0b:f7:a5:0e:
         df:d6:99:27:2c:28:11:63:a1:f9:5a:78:41:ad:78:d6:df:ca:
         d6:8b:ed:a9:27:9e:a0:8e:b8:5f:4d:7a:be:b8:b4:89:68:3f:
         0e:c0:06:d0:87:4a:ec:ef:6d:a5:2e:f0:fd:77:7c:4b:25:f0:
         e6:e3:7a:ca:a5:8c:23:26:2c:9f:9a:38:c4:04:d8:2a:65:4b:
         d5:2f:ae:6a:76:59:c7:a4:b2:28:87:0c:49:1d:63:1c:67:99:
         16:81:77:f6:d2:87:8e:63:27:fa:8c:4e:4b:e8:a3:8a:97:47:
         c6:3c:49:1a:d6:b3:62:8a:17:7b:af:e5:f0:4c:27:a8:1c:66:
         7f:5a:ae:2b:9d:53:12:d1:3a:99:57:4f:7e:08:79:90:b8:6e:
         56:e5:4c:f0:85:b4:3f:0a:68:67:09:87:b4:e3:4a:1d:30:59:
         2b:97:a1:cf:ec:ac:57:58:47:e7:8b:7c:48:32:54:5d:5c:e0:
         45:d1:cd:6f:ee:57:a2:c8:6a:89:a6:c0:3f:80:51:70:b1:9c:
         97:6f:48:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:18:47 2025 by rpki-client