Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f6074414-f9ff-3c9b-a364-683163bd465e.roa
File:                     f6074414-f9ff-3c9b-a364-683163bd465e.roa (raw, json)
Hash identifier:          yFtIrtkc5docuuU+mwxVJGs1HCOVG7Irh2aevZ/af6Q=
Subject key identifier:   8B:16:25:E0:67:CF:57:74:81:9F:36:47:DD:A4:8C:1E:01:10:0E:A3
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC5ABA5FFD8B41E2D41499E80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f6074414-f9ff-3c9b-a364-683163bd465e.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        172.64.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:a5:ff:d8:b4:1e:2d:41:49:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=8046326c-a0b5-49bd-ae78-cac0f5dc43f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b4:e9:be:ac:41:d6:38:1f:43:fd:19:0b:96:
                    1a:68:d5:fa:c0:43:0c:9d:52:b6:10:d2:4c:7f:a8:
                    52:bb:3a:98:56:f0:75:1e:93:f0:04:bb:ce:07:87:
                    d9:12:77:82:13:e6:b2:1c:71:31:7d:4a:0f:23:8e:
                    c4:28:b3:28:e1:0d:e7:a9:b1:dc:aa:07:91:40:02:
                    3e:98:b9:ed:18:ab:ca:9b:a1:93:b7:93:7c:a0:85:
                    19:ef:61:a0:19:b8:e6:ca:75:76:de:9d:40:2d:cd:
                    a6:5f:15:b3:11:96:84:c7:80:50:44:b0:09:8e:60:
                    67:fa:1e:8e:f2:6e:27:e2:c7:56:57:05:4e:67:a4:
                    04:67:ef:88:bd:dc:34:4a:69:a5:0e:05:fb:94:86:
                    15:58:62:8c:70:6c:9d:a0:9f:53:58:14:bb:86:49:
                    50:59:02:c7:30:09:78:12:0a:d3:95:40:0e:27:6d:
                    5d:fa:6b:e1:d5:22:59:79:64:5b:1d:3e:04:bc:77:
                    ff:2f:0f:0d:b8:5d:13:48:76:3c:62:72:17:a7:1e:
                    c9:de:ec:8b:8f:c5:eb:49:14:19:a7:17:d7:bb:e5:
                    6d:d3:9d:72:2f:c9:96:20:8c:5f:7e:63:dd:45:8a:
                    7d:b9:da:da:a7:19:fa:df:3d:05:35:e4:b2:96:01:
                    8d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:16:25:E0:67:CF:57:74:81:9F:36:47:DD:A4:8C:1E:01:10:0E:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f6074414-f9ff-3c9b-a364-683163bd465e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:0d:21:6c:cb:22:2f:0d:64:ce:3f:b0:54:b6:70:37:34:36:
         5d:97:f3:ce:68:13:17:d2:72:4a:72:15:4e:e4:97:7b:c6:20:
         5d:10:81:b9:0e:da:ae:70:52:14:2f:7c:4a:a2:30:80:c0:a8:
         e3:c3:37:d0:85:ad:5e:6f:4c:9b:54:37:6f:d1:d3:4e:7b:b9:
         b8:f1:9b:61:8c:ee:2b:8c:d4:ca:3c:03:e7:74:1c:82:41:08:
         cb:be:28:d7:f9:df:bb:12:f6:ed:8d:c5:53:bd:09:d9:f2:1b:
         54:c2:fd:24:51:6c:31:d0:43:c1:eb:2b:cc:50:2f:f2:5a:cd:
         d9:5b:37:77:ea:1f:7d:81:e3:f2:00:38:8b:ce:55:f5:fe:ed:
         3e:f9:b3:c7:09:00:70:8a:2f:60:94:1f:a1:17:f8:a0:2c:cf:
         a8:61:98:bf:f0:0f:a3:4a:ad:d3:27:bf:21:5a:ea:a5:46:fd:
         9a:59:0d:73:56:35:e3:07:92:a0:a6:be:90:1a:e6:b3:63:77:
         a6:ce:e3:f5:77:4e:96:61:6f:74:bd:b4:f8:dc:8b:c9:ab:d9:
         be:bd:e2:0d:3d:3a:97:d4:2b:00:17:34:20:71:b3:05:1c:32:
         30:1b:ea:30:a0:25:7d:0f:95:04:f4:0b:89:4a:d5:3e:09:92:
         fd:b8:8e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:11:51 2025 by rpki-client