Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c5f23253-4793-3aa6-bef3-3f8c0fc89adb.roa
File:                     c5f23253-4793-3aa6-bef3-3f8c0fc89adb.roa (raw, json)
Hash identifier:          HXki2e0GfSnIODjRgd4e+0ML+vu21N3zxdnH4kQfrnA=
Subject key identifier:   D2:89:59:A5:F6:7C:5D:2D:AD:B8:A2:F4:30:27:2C:1D:19:27:22:F0
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC8766148986920E934DD6200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c5f23253-4793-3aa6-bef3-3f8c0fc89adb.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        172.68.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:61:48:98:69:20:e9:34:dd:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=e31cd9f4-889b-4bf0-98d4-fc4c99fe41a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4d:8f:8a:a3:b8:e9:7c:68:f7:56:62:49:c1:
                    21:3a:dd:c6:40:90:93:c9:4f:8f:53:1c:c4:29:f2:
                    3d:98:fa:f1:7d:2f:0a:3b:7a:65:f7:b0:a9:43:14:
                    e1:bc:0e:d1:31:7f:da:d7:0b:47:0c:f8:79:ee:88:
                    d4:67:33:72:86:fe:5d:9b:e1:2e:58:06:2a:82:b1:
                    c5:5c:e5:d6:03:00:0f:a0:1f:6d:50:ab:3b:c8:86:
                    ea:ff:1e:6c:09:7d:56:48:c2:e7:42:20:72:2b:8f:
                    fd:2e:a5:a0:48:cf:d6:2a:17:76:6e:b8:a9:d7:fe:
                    5d:08:c3:7b:4b:98:f7:dc:b7:e9:32:c4:f2:d5:84:
                    29:c3:be:42:54:78:10:ca:27:1c:81:1e:a1:2c:6b:
                    01:22:d6:2e:27:89:6d:e3:c9:68:53:82:aa:50:6b:
                    d0:37:bf:11:b6:da:55:b4:ff:17:69:de:fc:58:5e:
                    b5:60:c1:32:43:24:7a:d6:9d:05:6e:60:f4:63:5b:
                    d0:8c:f5:43:8b:a6:29:59:bb:7d:84:ea:da:87:e9:
                    bd:8a:c4:94:b5:96:f2:fa:e0:dd:9f:0f:4a:97:32:
                    b9:31:a7:7a:f1:46:a1:01:0f:b0:aa:06:f9:69:47:
                    94:c7:6e:fc:1a:cd:4a:b4:51:f1:d1:01:d8:ba:ff:
                    35:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:89:59:A5:F6:7C:5D:2D:AD:B8:A2:F4:30:27:2C:1D:19:27:22:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c5f23253-4793-3aa6-bef3-3f8c0fc89adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:d5:c9:d3:6a:d7:20:3c:7a:51:e2:ba:9b:24:db:da:36:b2:
         b7:ca:45:54:51:2b:3a:0c:cc:4a:ba:7e:fc:ff:2d:87:54:bd:
         94:d8:82:76:48:81:e6:40:16:d3:32:37:0e:47:f4:66:34:5c:
         cd:43:09:be:b3:a3:ff:b6:a7:8f:e9:c4:d7:32:d0:90:51:30:
         2a:af:18:37:58:a8:25:1c:01:a1:11:21:0a:e9:8e:be:ff:bc:
         6d:26:8a:ae:53:23:b6:d7:41:81:f3:2a:07:f2:c3:58:ba:ff:
         1f:d0:9d:69:89:6d:c7:89:5b:1d:19:39:91:60:f9:e5:89:53:
         3e:1e:77:61:d8:da:28:b4:60:c8:47:74:b9:e1:17:f9:41:c9:
         39:2e:c1:3e:29:a4:1f:7e:12:63:cb:93:f9:56:d1:c6:21:c4:
         78:89:db:f2:47:d7:50:b2:30:8b:1a:a3:93:79:8f:80:53:ff:
         b5:c3:57:d8:01:4e:b9:36:a3:7b:28:e8:cd:a4:be:67:de:7f:
         64:3f:0a:8d:60:24:40:1c:6b:da:f6:25:67:69:9b:d0:a4:da:
         ad:09:0a:53:2e:e4:38:b6:d7:79:c3:96:2b:80:2a:ae:ac:b0:
         b1:15:2c:74:dd:5f:f0:f5:d3:c1:e7:da:cd:ce:b1:9f:92:99:
         0f:4d:df:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:01:15 2025 by rpki-client