Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb1f7903-831f-300d-9177-2fc29a8f01d6.roa
File:                     eb1f7903-831f-300d-9177-2fc29a8f01d6.roa (raw, json)
Hash identifier:          CYL57e74+eGSliSvkJwQF0GtRdRYd66j8IbChquvZac=
Subject key identifier:   B8:29:04:B3:2C:1D:5A:4C:DE:70:1C:18:E8:92:14:54:C6:81:A9:16
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584B3556DE45DA6FC611BBBAA4E0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb1f7903-831f-300d-9177-2fc29a8f01d6.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        172.64.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:56:de:45:da:6f:c6:11:bb:ba:a4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=34d3ec9f-a418-498c-83a3-0427334a5596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:57:f9:42:6a:b1:2d:2f:2e:3a:d7:f1:19:0e:
                    a6:f9:bb:41:e1:c7:f2:a6:38:fc:2c:c0:6d:69:44:
                    6a:72:fe:99:e9:8f:a3:60:c7:0b:13:d4:e1:fe:04:
                    d3:26:2c:b0:06:72:df:aa:23:c6:d0:3c:74:36:0a:
                    8a:1f:43:bf:ce:63:09:39:d6:79:bd:ad:e5:dc:30:
                    57:52:74:2e:78:5f:a9:78:57:a5:47:8b:e0:31:53:
                    47:a3:95:a0:fe:dd:34:0e:1f:d1:29:1c:4c:ef:fb:
                    28:a8:ad:7a:3e:a2:f0:11:9d:29:17:be:7e:02:71:
                    7b:30:31:68:d3:77:30:b8:15:f2:f5:94:22:d2:b3:
                    d9:86:ab:a2:42:25:d2:55:ab:0c:91:4a:87:71:9f:
                    f4:52:05:09:25:b0:a1:9a:ac:18:6e:ea:c7:a1:b9:
                    76:0d:1e:16:3d:ba:38:80:fe:81:f6:46:b3:ea:d1:
                    eb:bc:c1:79:e2:8d:84:10:b7:68:24:63:c7:40:7b:
                    25:67:01:66:7a:a7:30:aa:06:06:69:cc:de:29:3f:
                    f7:8e:f6:0f:b5:2c:e8:41:f0:75:00:22:32:10:b5:
                    cb:a8:71:7a:fc:15:9d:aa:dd:a5:eb:f4:7e:88:8f:
                    8d:d9:db:14:15:7a:14:30:9a:a3:ad:86:23:62:ba:
                    db:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:29:04:B3:2C:1D:5A:4C:DE:70:1C:18:E8:92:14:54:C6:81:A9:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb1f7903-831f-300d-9177-2fc29a8f01d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:38:bf:88:f2:7d:6b:91:1b:8a:37:cb:27:b3:f5:94:bd:a9:
         a7:54:cf:b3:04:55:e4:85:d0:8c:e5:44:b5:e6:36:81:d1:6a:
         1c:4d:eb:cf:56:64:1e:7f:08:52:01:4e:3e:47:11:55:08:7a:
         88:13:c7:f4:93:c2:aa:a2:89:8c:ca:fb:d5:5e:80:d2:cf:71:
         a3:7c:25:87:3b:af:df:43:a5:0a:73:79:e0:55:eb:d4:b5:b8:
         50:85:12:2b:43:a2:f5:55:bc:dd:93:d5:f0:66:2f:52:ef:0e:
         5a:be:31:62:e5:ae:c6:ee:d2:46:ff:58:55:e2:38:db:c1:7a:
         0e:76:97:33:9d:9a:21:8c:cc:6b:e5:97:93:67:04:4b:28:b4:
         8c:0f:c1:ef:3a:c4:a5:f3:eb:4d:7f:49:60:31:5a:8f:9e:90:
         5a:1b:68:28:08:c7:ee:38:45:78:90:ea:00:fb:d6:f3:1c:da:
         3e:73:49:05:54:42:06:d9:62:d3:df:cf:8d:d0:13:26:3f:73:
         4a:21:ae:b7:0d:13:9f:9b:80:3c:dd:22:4d:80:91:60:78:77:
         41:31:e9:63:5b:8b:65:5b:73:1f:4e:2d:63:67:b0:ee:53:5d:
         cb:6a:67:23:3f:ec:bd:f4:2f:88:b7:ea:03:d9:e8:53:78:79:
         4a:88:c2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:53:29 2025 by rpki-client