Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe215c2f-7b08-3ec4-83cc-86d420fde465.roa
File:                     fe215c2f-7b08-3ec4-83cc-86d420fde465.roa (raw, json)
Hash identifier:          5ZWHh5Ow0dzFPeZ48t+pWQww8SF8m3F6f6Gnk8MlSgs=
Subject key identifier:   E2:99:DD:C5:7C:3F:EC:46:25:79:16:F3:BD:F9:3B:DF:7B:01:B9:D3
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC710FFB83981539E468A7A40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe215c2f-7b08-3ec4-83cc-86d420fde465.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        172.71.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:10:ff:b8:39:81:53:9e:46:8a:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=39d345ba-7324-4554-9f58-ca1291ab3cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3f:0c:31:7f:26:d7:41:7e:2d:c6:81:34:45:
                    b4:a9:d9:c2:2b:df:0a:c3:8b:bd:79:6c:ac:1e:65:
                    33:d2:84:1c:de:97:5f:0c:f0:bc:b2:bf:a9:1a:09:
                    b0:83:38:15:29:c2:6e:a6:0e:a6:65:a3:60:8d:8c:
                    59:7b:21:39:1d:69:9e:84:04:41:d9:76:82:a0:54:
                    d1:ae:b9:95:bc:21:d4:65:2e:7e:62:89:f6:34:d1:
                    ab:ab:2d:fb:97:b1:0f:92:50:7e:da:8f:35:6e:92:
                    83:37:08:cc:24:94:a5:ec:78:67:bc:6f:31:33:5b:
                    69:52:0c:76:ce:ec:cc:ef:28:c9:48:cc:76:86:d6:
                    9f:61:bc:20:96:fe:f7:b5:1a:7c:0a:5a:3f:2c:eb:
                    9e:42:b5:41:8b:f9:9b:6b:f4:d6:95:ab:41:7f:1d:
                    1d:8c:b1:dc:09:e4:17:8b:0f:b8:3f:a1:4b:2b:6d:
                    04:45:f9:ac:e2:87:70:2e:c8:56:f1:8a:53:fa:77:
                    f1:ee:31:39:1a:3c:77:f4:e9:f9:ce:dd:9f:f0:9e:
                    9e:71:8d:7f:ad:6a:8b:88:a2:13:82:46:7b:e8:ff:
                    5f:98:c7:0b:40:94:2c:79:b1:16:3e:ce:c3:8f:9d:
                    79:1a:ad:fe:80:99:bf:d3:59:ab:ae:ae:69:30:67:
                    e9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:99:DD:C5:7C:3F:EC:46:25:79:16:F3:BD:F9:3B:DF:7B:01:B9:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe215c2f-7b08-3ec4-83cc-86d420fde465.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:11:f1:a7:3f:39:c7:0e:35:ea:72:78:2c:cd:7c:d0:8f:b1:
         1e:ba:e2:06:5d:ab:46:8e:8e:a3:50:df:d2:f9:23:88:a6:2a:
         14:d1:77:9b:a1:e0:bb:2a:a2:69:e5:89:06:ce:aa:ad:1c:8d:
         1b:56:c8:80:03:8a:96:ca:73:39:60:31:1a:89:0a:fa:55:d3:
         62:7f:98:05:bc:0a:b2:32:23:4f:5d:6d:32:59:89:76:a9:ec:
         ef:60:1f:da:21:1c:30:53:5b:1d:3d:27:b1:c9:5a:eb:36:07:
         25:1e:41:d4:f8:ce:a8:bb:2b:e5:9f:bf:25:98:22:b7:b7:28:
         b7:f7:90:ca:59:50:e7:f8:2a:74:3f:b0:9d:6c:17:2b:d7:43:
         eb:ab:3e:0b:c2:cd:f4:3a:cd:96:03:1b:71:09:20:ce:3f:85:
         bb:0c:f2:0c:6d:59:9b:ba:57:8e:e9:7d:eb:76:cd:27:90:3a:
         fd:88:47:3a:33:f1:0a:85:56:1c:50:96:cc:f4:eb:03:17:df:
         c7:2a:63:91:3e:36:06:8f:a5:2f:78:cf:49:ba:fc:1b:42:9b:
         8a:06:5c:07:53:ee:44:8e:8c:2d:78:70:d1:41:99:f8:7f:ea:
         af:10:25:e9:2b:8d:23:e0:46:fa:9f:f4:89:95:f4:0f:99:38:
         34:39:8f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:00:58 2025 by rpki-client