Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c0c024e7-905c-315b-a441-b169bbd8b49f.roa
File:                     c0c024e7-905c-315b-a441-b169bbd8b49f.roa (raw, json)
Hash identifier:          +w3pW2wNxYJB+Uv/0zkLHHsGDSi2KtgQ0Q9i3oEI/vo=
Subject key identifier:   C5:54:1E:D7:D4:E9:2E:0A:EC:7D:CF:97:72:3B:3E:D2:49:4A:12:07
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584ACB411655F44CE241AEBB3A80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c0c024e7-905c-315b-a441-b169bbd8b49f.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        172.69.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:41:16:55:f4:4c:e2:41:ae:bb:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=20c5dc52-d1ed-434d-811a-3a0dcb841052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d4:7c:31:c7:97:62:24:94:dc:65:f5:7f:81:
                    3c:f8:85:06:df:43:48:ac:4d:a8:9b:3c:ab:2c:f3:
                    42:70:03:03:ca:ef:af:60:d2:14:e0:a4:94:ee:71:
                    66:95:ac:eb:ae:2b:f2:a5:c0:2b:a7:13:86:ce:e7:
                    c9:a0:6e:72:21:b1:29:f1:e4:90:4f:ef:2c:41:ac:
                    a0:19:45:35:ee:db:97:1a:f5:33:db:fb:fc:33:1a:
                    c1:11:5d:57:08:f7:94:ea:ec:45:77:d0:a1:d5:3b:
                    37:af:32:79:32:92:ec:b4:83:93:de:3e:e8:75:fc:
                    c4:71:de:1f:a4:4f:52:e1:9d:dc:9c:5f:f7:a1:f4:
                    0e:5a:bf:be:65:80:2c:af:bf:29:26:04:d6:cc:58:
                    be:ba:86:4e:dc:bf:5c:02:f9:cc:67:72:b7:e3:27:
                    73:49:a2:b1:7e:e4:6a:46:f0:46:f8:cd:25:29:3a:
                    6c:cb:80:63:f5:d0:1d:bb:5c:22:e8:05:6b:06:f4:
                    9b:64:32:f4:70:8c:4b:b1:8f:3c:90:e4:d9:8d:8e:
                    d4:23:c4:58:1d:81:df:34:a3:fc:27:9d:8e:b2:bd:
                    81:09:60:79:ca:99:df:f7:08:f0:27:8b:19:85:19:
                    3f:83:7c:18:08:07:18:d4:95:36:68:96:af:77:fd:
                    d2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:54:1E:D7:D4:E9:2E:0A:EC:7D:CF:97:72:3B:3E:D2:49:4A:12:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c0c024e7-905c-315b-a441-b169bbd8b49f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:7b:04:da:2f:92:ce:53:76:40:53:ce:75:70:28:40:b7:92:
         b5:c6:5e:df:7d:0a:47:9a:03:21:ca:8c:a5:4a:bb:42:b7:b4:
         c9:86:53:19:2c:ef:de:8d:61:c5:35:34:a1:c5:ff:5b:15:6a:
         60:70:b3:f4:e8:ed:8e:b6:99:d3:66:5e:57:0b:3c:29:10:b4:
         78:10:11:ec:cd:6e:57:a0:0c:a1:a8:e0:2d:2a:08:36:9d:5f:
         8d:a1:ac:df:d8:65:da:ed:5a:45:ef:6f:27:6b:4e:ec:c4:31:
         22:cb:c8:24:72:8f:9e:89:c6:88:1e:c2:c1:54:54:65:ee:7e:
         d4:9e:eb:71:85:c2:fb:50:7a:17:45:7c:ad:9c:e0:81:f3:e7:
         ca:7a:0b:80:8b:ab:3c:f0:24:5c:ba:33:ee:5d:ee:96:96:af:
         44:4a:aa:0e:e9:b7:cc:cb:3c:c2:93:8a:97:fe:e0:5f:12:1d:
         4f:31:3c:08:96:8a:28:71:f8:47:d0:4b:9c:10:ed:56:a3:98:
         fa:49:65:3d:9b:f6:f2:c1:d7:48:fa:72:cd:98:73:90:fa:70:
         bd:d9:ef:b7:ea:29:2f:a3:1c:4a:3e:80:bf:26:c6:8e:c9:75:
         b8:9e:6f:63:87:a6:a6:18:44:c1:07:e2:63:1a:f8:9e:7a:bb:
         7f:95:ff:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:53:16 2025 by rpki-client