Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0a692b3-54f0-3f79-9859-a0084e1ab35c.roa
File:                     a0a692b3-54f0-3f79-9859-a0084e1ab35c.roa (raw, json)
Hash identifier:          WD1dEsd5Jjjeouw2GUS7i3AUmO5Mua9tDmmHjEph2kE=
Subject key identifier:   DF:08:D2:FB:81:B3:28:15:51:CD:9C:2A:49:0C:F9:69:DA:AF:EB:1D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584ACB40FD5B5871D41678E5FA80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0a692b3-54f0-3f79-9859-a0084e1ab35c.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        172.69.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:fd:5b:58:71:d4:16:78:e5:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=aaaa7576-fc64-40ab-9b4f-a2e712fde678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0c:68:e4:df:4f:5a:27:bd:a3:a1:2a:ba:b1:
                    40:4d:00:57:99:0d:24:50:68:9d:61:11:f7:a9:51:
                    41:d2:d5:d6:4d:73:6c:ff:2d:4b:4c:db:11:a0:c8:
                    ba:10:b1:bf:ae:4d:f3:8e:4a:50:07:df:8a:76:3a:
                    f6:a2:57:65:41:82:56:c6:a1:6e:24:2a:8c:8b:1a:
                    7c:ac:ee:6f:9d:48:bc:59:be:5e:b4:93:a6:a1:ac:
                    bb:40:3d:0c:30:a3:bf:80:15:6e:8d:c3:83:4a:73:
                    1c:57:58:21:d4:fe:72:3b:20:4f:c7:b9:de:b3:32:
                    db:25:12:4a:81:f9:15:55:38:b8:ef:8e:80:e3:43:
                    84:46:ff:46:8d:d1:0a:ce:6d:ae:43:cd:6e:2b:e2:
                    f3:1a:7a:37:d5:53:3a:7b:d4:78:d2:4f:f2:37:bd:
                    2d:3d:72:6d:66:43:b3:8a:f8:28:ca:ad:e5:da:23:
                    ef:ce:74:91:ca:1e:3c:74:c5:de:4a:de:40:74:3a:
                    9c:67:cb:7e:39:f7:7b:50:2b:d4:34:a0:32:6e:04:
                    ab:ed:cb:c1:d8:59:ce:7d:3f:a7:89:92:6b:46:29:
                    27:3a:99:cc:62:43:7e:da:83:2d:8d:03:ab:32:2d:
                    df:ba:0b:99:8c:f5:25:0a:90:5f:b2:c7:20:1e:37:
                    c2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:08:D2:FB:81:B3:28:15:51:CD:9C:2A:49:0C:F9:69:DA:AF:EB:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0a692b3-54f0-3f79-9859-a0084e1ab35c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:88:65:00:c0:ef:3e:db:49:e5:95:e9:f6:d8:d2:b3:65:56:
         e0:86:16:6e:bf:f3:82:a9:d6:e1:dc:c4:e7:3c:1b:8b:26:d9:
         be:30:71:56:48:dd:57:19:f2:78:1a:03:31:fa:1b:0e:d4:89:
         f6:37:c4:60:41:35:e4:54:48:6f:82:42:9c:b1:5c:cc:a7:85:
         66:36:5c:3b:38:c5:dd:b1:d5:d9:db:c3:23:8f:8d:bb:e7:cb:
         a2:80:a8:7e:b3:82:71:7c:bb:46:34:f7:66:8c:03:c4:91:57:
         7f:cc:64:ab:ad:84:7e:d0:2d:76:18:cb:6d:8a:d7:52:c3:fc:
         6d:6f:72:5b:7d:31:9a:fb:0e:5a:3d:6b:5c:7a:9b:2e:41:aa:
         e2:1f:f8:54:6d:f3:35:27:c7:e5:d0:0e:00:ff:ab:c7:77:fc:
         f0:16:60:11:64:2b:79:c4:da:91:fb:f4:a7:45:82:2c:74:3d:
         7d:d0:9b:32:73:6f:67:73:30:ea:27:c5:a8:82:37:fb:6f:91:
         32:6a:f9:fa:5c:99:46:c2:e7:fa:45:86:c8:e4:ed:75:27:66:
         94:16:b9:11:3f:f9:48:fa:ec:d1:87:90:ab:95:1f:15:0c:0e:
         e7:a6:55:cf:10:d3:94:65:cf:28:a2:6e:b4:46:e1:6b:c1:90:
         9f:04:68:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:03:02 2025 by rpki-client