Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b54c4b20-7183-31d2-a4fd-28277a791adf.roa
File:                     b54c4b20-7183-31d2-a4fd-28277a791adf.roa (raw, json)
Hash identifier:          Jn9lFpmgpbap1rTEDpM0gdNnEYwgHyIhPTk7aGpu0VQ=
Subject key identifier:   59:AB:A7:5F:0D:28:B9:81:57:0F:8C:6C:DD:20:D5:7A:62:90:53:2A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC5ABAEFBF5E06A6AB7ECAEC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b54c4b20-7183-31d2-a4fd-28277a791adf.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        172.71.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:ae:fb:f5:e0:6a:6a:b7:ec:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=f9f261e9-246c-49d2-9a59-9550a61de5cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:31:0d:ec:33:07:05:93:fe:f4:ac:a2:19:43:
                    32:1a:30:2c:2e:a6:d9:f6:64:fd:df:d8:d2:94:c6:
                    70:dd:a1:e3:c7:de:e8:3c:79:5b:3b:89:28:2e:9f:
                    fb:09:3f:df:db:c0:b8:fb:69:0f:a3:e6:42:05:34:
                    cc:2e:0c:e4:36:18:2b:2d:62:ad:4c:6c:d7:e6:25:
                    4c:17:9b:3d:38:0b:92:af:20:13:01:a6:46:74:63:
                    5a:0f:11:4d:d7:8d:69:28:0e:02:65:2d:5a:81:0c:
                    99:b1:be:d5:c7:d6:5b:c2:2d:42:ca:56:a1:67:c8:
                    20:a1:e7:68:65:99:7c:43:9d:c0:c5:37:15:e6:04:
                    c2:17:79:89:69:b4:e6:21:92:96:b9:a3:26:f6:22:
                    8b:9a:84:96:ef:91:8f:dd:8a:df:98:88:c4:48:52:
                    22:47:47:3b:c2:3c:55:0f:69:bd:00:1c:00:54:4e:
                    96:fc:0f:36:62:b0:91:77:a6:4f:18:21:94:43:e9:
                    f0:0c:d7:05:2e:c1:1e:64:b1:33:dc:65:d7:ae:6c:
                    ae:18:be:78:c6:ed:bb:24:e3:8c:99:9a:38:75:aa:
                    1f:65:94:bd:56:05:00:e2:f3:c3:ed:98:60:9c:18:
                    39:ac:3c:71:ab:0f:d6:56:ae:02:5f:9d:d1:2a:cd:
                    7c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AB:A7:5F:0D:28:B9:81:57:0F:8C:6C:DD:20:D5:7A:62:90:53:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b54c4b20-7183-31d2-a4fd-28277a791adf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:be:d0:ce:ac:36:c9:3b:b9:37:16:a0:aa:e6:0d:31:0e:0b:
         93:83:ad:d9:c0:b1:6e:9b:bc:64:05:e0:0f:62:7b:13:18:de:
         8f:30:a6:06:f3:cc:40:a4:32:aa:f9:9e:26:f8:0c:a3:8b:60:
         c5:f7:63:84:54:35:4f:80:70:e1:da:46:8d:93:96:26:ee:25:
         9c:92:d5:1d:f0:89:79:27:62:5f:8f:47:7b:e5:00:75:b9:9f:
         2d:58:95:3c:4a:86:f6:8f:db:f6:87:a6:31:24:6a:6e:7c:80:
         72:90:a0:63:b4:0c:f3:da:de:70:81:42:1e:18:4c:c8:a9:df:
         d3:23:f4:1c:27:15:27:39:49:5e:79:e7:89:50:24:76:ae:33:
         a3:b2:b9:27:aa:30:26:c2:17:49:57:fd:69:1d:3f:19:f3:b8:
         47:c0:61:23:db:94:5d:13:31:fb:bf:2c:52:ea:d0:02:e7:23:
         20:d9:39:b2:30:60:c8:a7:ba:5c:7e:43:c6:6b:c5:f2:9b:6e:
         9d:86:05:92:15:94:89:7d:96:73:d2:79:c5:33:98:ae:6c:ef:
         69:d2:2d:fc:a0:e6:5c:ef:93:91:26:33:5e:4e:24:b8:17:d7:
         1a:5d:be:05:e5:dc:5c:a2:98:7a:34:d4:c9:5d:04:d3:a1:68:
         44:33:4f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:12:32 2025 by rpki-client