Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e441c69-be51-3b81-a88f-9254a15bff06.roa
File:                     9e441c69-be51-3b81-a88f-9254a15bff06.roa (raw, json)
Hash identifier:          m6Lpd/sKD3c+mXIvwREDTnme+LyjSeqxXuD8i1VNjm8=
Subject key identifier:   DA:78:61:72:6C:13:38:5A:4E:07:83:EB:59:47:32:24:B2:91:E1:A3
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC5AB9A3B61677D3881A09F80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e441c69-be51-3b81-a88f-9254a15bff06.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        172.64.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:9a:3b:61:67:7d:38:81:a0:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=350ca905-2c7e-41de-acd4-47c3bd14bd95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ab:6b:7b:2b:0a:9c:66:e4:bd:76:bc:c1:ba:
                    dd:a4:41:ff:a8:0e:ac:33:71:ea:9f:a0:3d:44:36:
                    98:75:d1:5a:28:bd:4c:89:9c:ed:b0:65:e6:f0:eb:
                    f9:62:1d:53:a5:ec:99:f5:77:7c:c0:81:e8:da:e1:
                    2d:89:5e:04:5e:31:d6:a2:fe:0d:d0:59:9c:41:be:
                    89:cc:13:ee:d2:cb:54:fb:86:0e:85:a3:43:3e:df:
                    9f:bd:ea:5a:e5:8b:e7:03:5f:dd:4b:30:56:52:4e:
                    eb:c5:f2:50:21:a5:61:41:3d:a5:bf:54:ff:48:80:
                    33:0e:f5:9e:fb:59:16:c1:c7:f8:1b:66:61:0f:d8:
                    79:16:94:02:11:b5:16:b2:d7:ee:46:77:48:29:5c:
                    9e:58:d2:11:01:93:af:2f:7a:be:aa:59:90:40:65:
                    86:73:6c:39:57:ed:08:ed:67:60:2b:26:6b:c8:ad:
                    d3:09:fe:70:cb:ef:b6:ed:7c:d0:1c:0d:b9:c6:fe:
                    d8:4d:93:e9:59:7e:56:c5:11:b8:28:bb:b3:73:25:
                    d4:cd:0d:fc:bb:3c:5c:2f:67:4c:2e:14:1b:d8:c0:
                    b6:d4:3f:4f:2c:b4:17:cd:db:92:dd:81:d6:9e:b0:
                    ee:55:34:30:3b:a7:ed:7c:02:c1:7c:fb:0c:57:97:
                    26:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:78:61:72:6C:13:38:5A:4E:07:83:EB:59:47:32:24:B2:91:E1:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e441c69-be51-3b81-a88f-9254a15bff06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:1e:bb:63:03:ba:d2:4a:8d:6b:9a:71:bc:80:fe:a4:80:ce:
         36:ab:fa:9c:3a:ae:ab:a0:17:ad:87:42:5f:bf:62:28:49:68:
         d9:7a:fa:b5:e8:eb:42:24:31:9b:4e:f5:04:f8:aa:0a:49:f8:
         ef:43:9a:68:78:e7:eb:0c:68:f8:64:cd:7f:8d:60:bb:2a:a1:
         62:10:5d:c7:e5:39:62:80:4b:16:3d:45:4e:ba:6c:0f:f1:c9:
         0a:1c:da:79:21:b2:b9:ad:6f:6e:0c:ab:28:37:7d:85:1e:2c:
         d8:c8:16:0d:52:80:e6:da:5c:20:c2:46:27:a5:25:af:5f:fe:
         18:8a:9c:eb:76:80:4a:bf:3e:6d:78:9e:c2:39:45:fe:4d:99:
         8a:09:f2:17:2a:1b:6d:4d:f7:f9:eb:e1:89:cd:2a:8c:6b:30:
         32:b3:33:c1:d1:cf:f0:9a:09:52:dd:6c:8d:9d:50:52:bb:98:
         d2:ef:f8:b5:b4:6b:c4:db:6d:0c:dc:e9:3a:ea:c6:c7:e6:24:
         54:7b:44:66:f0:91:77:9e:39:a2:60:14:67:dd:37:60:4c:3e:
         fe:9c:ff:86:97:6a:d6:d9:51:e0:ec:71:21:73:ed:50:d6:ff:
         c0:fd:cb:d5:e2:67:9e:26:ad:e8:81:d0:01:aa:a5:d7:9e:13:
         9b:49:09:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:58:40 2025 by rpki-client