Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/edcf4ba5-9834-38e0-962c-efa04589eaa8.roa
File:                     edcf4ba5-9834-38e0-962c-efa04589eaa8.roa (raw, json)
Hash identifier:          e3OwQdeQGr5dxWAvh7jpyJThT+g7or3aaxhNEormoRI=
Subject key identifier:   A6:94:24:8F:6C:EC:2C:74:93:27:27:D6:C0:3D:9D:34:7B:B2:01:F4
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC71108D79DFD659C3F2B8800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/edcf4ba5-9834-38e0-962c-efa04589eaa8.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        172.70.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:08:d7:9d:fd:65:9c:3f:2b:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=5c5418fc-a474-436c-87b8-33a1b30afd24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a8:c3:fa:b9:fb:b2:16:78:66:d2:76:51:3c:
                    3c:cc:36:d6:19:d7:bf:44:4b:70:d9:d8:4a:62:5a:
                    5c:79:f5:b9:3e:33:95:8d:e6:dc:a3:da:db:b4:15:
                    62:d0:63:eb:e4:af:76:8f:98:98:05:5d:47:56:1f:
                    11:2a:05:ad:d8:52:90:7a:17:06:94:0f:97:7f:18:
                    e1:72:ba:d5:6f:fc:8e:c0:33:d8:f1:d6:54:0e:0b:
                    0b:1f:af:ca:e9:f1:b9:d7:59:d8:81:5b:d9:62:5f:
                    d3:74:1b:64:09:3d:90:3f:78:cd:a0:8f:5b:49:5e:
                    69:fd:63:aa:7b:28:01:fd:8c:0a:c0:60:90:0d:01:
                    c0:60:17:84:6f:c6:85:93:65:78:ff:8c:5d:96:f7:
                    68:06:38:a7:ea:4b:ff:4b:4f:64:ae:b6:eb:80:1f:
                    dc:36:e3:79:81:52:63:71:70:0a:76:70:90:a7:63:
                    87:ef:74:66:d2:bb:ab:cd:c7:86:b2:f9:72:41:23:
                    95:68:4f:f5:cc:70:31:4c:a6:47:14:85:9b:a3:1f:
                    0a:6b:0b:db:ab:a6:00:cb:24:42:1e:49:c4:e5:d5:
                    5a:34:99:12:54:f7:e9:0f:83:52:b7:19:69:00:d8:
                    ac:b2:35:c2:ae:b0:15:af:c9:ec:99:59:a7:42:e5:
                    20:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:94:24:8F:6C:EC:2C:74:93:27:27:D6:C0:3D:9D:34:7B:B2:01:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/edcf4ba5-9834-38e0-962c-efa04589eaa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:60:7b:3e:60:ac:dc:43:29:d8:39:78:25:34:f5:30:f8:73:
         25:08:66:86:72:1d:c8:15:a5:f8:4e:ac:ae:80:95:aa:0e:e9:
         cf:30:0e:22:68:26:ac:53:33:d8:51:54:9d:9b:d5:4c:73:8e:
         15:55:12:ae:ef:14:67:4a:07:73:e5:6c:91:3f:9a:58:c2:e7:
         cd:40:89:3f:1b:e8:13:e8:bf:09:7e:73:0d:9d:52:1c:90:47:
         c9:11:d8:21:74:9f:bf:0f:3a:9a:3e:6f:06:2d:6f:c9:e2:cb:
         50:0e:37:a6:97:0a:87:84:1e:fe:7a:d8:2c:5b:cf:79:9a:c0:
         46:23:61:f4:b9:e0:7a:f6:f5:f9:8f:75:58:c5:e6:7b:aa:7c:
         a6:a6:3b:02:eb:3b:e7:45:25:7f:b2:65:73:f9:31:71:88:c6:
         67:54:d6:7a:e3:27:5c:92:e1:88:3a:8e:3d:38:52:6a:21:f9:
         4b:95:4f:60:07:27:16:e3:dd:4e:8c:f8:b2:d1:b7:cd:a1:93:
         1d:c8:7e:fe:1d:95:23:08:fc:92:f2:f1:34:6a:b7:0d:60:57:
         91:3c:92:b2:f6:0a:94:3f:63:11:69:00:ca:26:d0:b6:77:b6:
         0d:21:a5:87:c4:d3:15:54:28:e4:1d:6a:3d:1e:8c:6f:98:a3:
         16:98:cd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:17:34 2025 by rpki-client