Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e7f245f0-8935-3bc6-96be-241e14571b39.roa
File:                     e7f245f0-8935-3bc6-96be-241e14571b39.roa (raw, json)
Hash identifier:          m3xsOzv2d3n3RzKwyDZF04D061tqthuP+KSOL3H2UcM=
Subject key identifier:   DB:8C:98:00:D3:6F:2E:90:FF:6D:0B:42:2B:A9:3C:48:E0:01:B8:92
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AD0D64D39F02E39A8A60FA640
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e7f245f0-8935-3bc6-96be-241e14571b39.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     13335
IP address blocks:        172.70.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:4d:39:f0:2e:39:a8:a6:0f:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=ee90e741-eec5-41e3-bfdb-062a28d40ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:84:39:96:67:79:a4:30:88:3d:29:83:25:9e:
                    cd:80:2e:44:d5:74:e8:15:09:5a:19:a6:06:e0:02:
                    a0:f9:5e:c7:d1:04:55:6c:23:83:27:32:43:f6:1d:
                    b1:87:f7:54:c6:be:e1:e9:98:4d:f0:ad:ae:68:97:
                    f3:e2:b0:28:6a:f5:bf:79:c4:4b:cf:95:db:5e:af:
                    30:5c:95:0c:da:fd:cf:1a:2b:a2:a6:b3:32:5c:cd:
                    78:c8:c1:59:25:e4:cc:43:79:67:b9:a3:3f:20:73:
                    29:9e:24:c1:59:ab:be:32:c2:6f:37:8a:22:7f:d4:
                    2e:33:32:42:0c:ba:31:7f:56:17:0d:ed:8a:b6:f2:
                    53:70:d0:71:a5:ef:5e:f9:29:dd:84:7c:44:7f:a3:
                    78:a2:11:83:25:71:6a:4f:48:fe:0c:2f:f9:87:3c:
                    8f:1d:73:3e:5d:d0:72:10:28:11:4a:55:3c:bf:a2:
                    59:f4:88:58:b3:e5:00:d6:0d:0b:96:2b:bf:c2:ac:
                    fe:cf:d1:f0:d1:9e:03:1a:03:b7:15:6e:94:c0:30:
                    8f:7c:e6:dc:b8:ee:cb:e5:e3:d3:12:bc:34:38:f1:
                    28:af:de:10:79:c8:ac:97:52:51:fb:d4:37:73:9a:
                    f2:69:a2:8d:e9:31:bf:a0:9b:41:51:3a:78:77:20:
                    11:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8C:98:00:D3:6F:2E:90:FF:6D:0B:42:2B:A9:3C:48:E0:01:B8:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e7f245f0-8935-3bc6-96be-241e14571b39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:61:bd:3d:2e:5a:f5:d0:c4:6f:73:05:74:09:8d:ac:e9:94:
         3c:d1:12:bd:91:78:3e:b2:7e:5d:15:0c:5a:73:9e:8e:c4:a8:
         60:26:fe:c3:20:ad:81:07:60:34:0c:24:36:a0:67:3a:b0:1c:
         d1:32:82:81:b0:98:55:fa:dd:99:46:c2:ef:b3:aa:40:17:3a:
         64:a8:7a:eb:aa:a3:1d:dd:15:26:18:ec:6b:f2:11:2c:6d:29:
         53:df:22:37:ef:fd:53:ad:23:18:1f:1a:a5:cc:3e:d6:56:6c:
         7a:70:fc:91:d5:b0:9c:60:8b:a9:22:35:cc:af:6f:cb:0b:30:
         e0:16:53:35:ef:67:36:59:ee:b6:89:1d:ff:d2:c2:fd:b7:ef:
         b5:0a:2a:b7:38:8c:f9:cf:c4:51:60:55:62:d4:74:0c:df:ab:
         d9:15:08:df:8f:c4:ec:ba:01:b2:16:ae:3c:19:b9:9e:8b:fb:
         30:09:56:ad:51:81:82:a4:96:cc:9b:83:ff:61:5c:69:a2:f1:
         79:5c:3d:e7:8f:84:21:b8:46:2a:1a:87:10:39:01:4c:0b:95:
         57:d5:2b:e6:fd:41:a4:f2:ac:6f:09:b3:84:a3:d3:5d:b2:ed:
         93:1e:97:c1:c7:f8:95:01:b9:f8:45:0b:67:df:79:14:42:c7:
         c8:a3:32:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:11:17 2025 by rpki-client