Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a664ce31-e334-302c-8d63-6952d26499fb.roa
File:                     a664ce31-e334-302c-8d63-6952d26499fb.roa (raw, json)
Hash identifier:          GPBki5prMarjo3RIdtR59FNfAajJRtI3vZZBfLowCq0=
Subject key identifier:   10:E7:9A:57:40:B3:FF:FA:4F:36:87:40:DF:27:29:AD:0C:3A:F3:2B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584ACB411C2FC1B8F86FC5FD3C20
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a664ce31-e334-302c-8d63-6952d26499fb.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        172.69.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:41:1c:2f:c1:b8:f8:6f:c5:fd:3c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=c93595d2-d1b4-4d59-a615-b165301f0f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b6:8e:45:1d:18:b4:4f:36:a5:55:1a:71:9e:
                    7f:39:14:46:ff:d6:c2:bc:b3:a8:6e:a9:f1:9b:9e:
                    45:92:c6:57:82:d3:bc:d8:30:e8:e1:77:07:26:6f:
                    3c:03:1a:42:27:68:0a:f4:a0:33:f2:3d:fc:03:c9:
                    37:40:f0:73:78:7e:14:1e:63:19:81:37:e5:11:1d:
                    e5:ac:e9:a9:39:88:6f:64:40:67:65:43:88:dd:4a:
                    71:d2:4e:c4:ac:ff:93:0c:6e:57:de:3d:39:25:b2:
                    ac:7f:13:ce:7b:b8:68:3c:6a:a5:75:1c:d6:03:36:
                    49:ab:ca:99:e1:20:a3:fe:5f:6f:f1:9d:96:6e:d1:
                    9c:d6:2a:ce:f5:64:05:cb:6a:b5:c2:7e:81:e9:88:
                    b4:9b:e4:d0:5c:ff:5e:eb:b5:aa:69:1f:02:2c:c2:
                    82:4c:ab:32:a2:dd:02:f0:19:ad:2f:88:29:4f:8c:
                    20:cf:47:df:9c:f2:9c:8a:72:90:2f:13:27:69:d1:
                    14:fd:78:7d:35:15:bf:e2:b3:1c:08:a7:8e:4a:26:
                    97:dd:e7:35:ab:7f:86:77:aa:9d:69:20:83:6c:70:
                    de:a7:7d:e1:82:a1:e9:0c:fb:c0:c9:44:e5:5c:98:
                    cc:54:ad:51:8c:9e:d0:29:e9:c4:04:d4:f8:87:e9:
                    96:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E7:9A:57:40:B3:FF:FA:4F:36:87:40:DF:27:29:AD:0C:3A:F3:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a664ce31-e334-302c-8d63-6952d26499fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:08:21:42:f8:87:7b:82:2f:84:bf:06:24:ba:56:47:e6:02:
         a9:9b:da:c2:62:67:24:ff:68:78:79:b1:6d:8e:2d:ea:6d:5e:
         b2:42:be:d4:c7:42:cd:86:54:ca:36:bb:96:64:8e:88:2d:59:
         44:56:48:bb:a9:61:69:10:b0:e1:2e:c4:10:81:08:c2:fc:5d:
         27:ce:58:be:0e:7a:83:a2:d8:34:3e:a6:17:66:95:60:13:b0:
         31:73:79:72:ff:f6:0b:c5:cd:30:e9:e3:a7:a7:ef:c6:5b:e4:
         5d:4d:46:0e:f7:f0:87:d9:83:e8:65:3e:fa:be:36:de:73:40:
         d6:19:bb:12:9c:39:eb:9f:94:81:d6:df:44:2b:2f:ce:2f:49:
         ad:21:3d:03:47:ab:99:85:8c:2f:46:df:7c:f0:a7:6e:74:b2:
         74:5d:b1:86:8f:96:b3:93:7e:e6:3e:43:eb:04:ff:f6:e8:94:
         85:30:3c:9a:76:a8:f0:97:08:6e:b6:ff:a6:04:31:c7:71:54:
         19:ce:51:bd:68:ec:c4:c6:92:f7:ff:bc:3b:2c:5e:59:13:e3:
         21:36:98:f9:41:37:a0:b6:4b:ff:a1:d2:ed:f0:39:de:56:5c:
         e5:65:2c:98:1b:00:80:8b:2a:25:9c:e5:52:e4:27:21:27:d3:
         1a:2a:37:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:18:55 2025 by rpki-client