Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/057bc937-2433-3d06-a207-fe4da722138b.roa
File:                     057bc937-2433-3d06-a207-fe4da722138b.roa (raw, json)
Hash identifier:          yjGyF1dESwBBDX/8qastnT/LOeh2ZchYPYCrjMHn73U=
Subject key identifier:   E6:CB:5F:0E:F3:A9:41:D3:F7:1C:A8:38:B2:68:E2:A9:B6:77:86:1F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AFF170A2291803E345D4F8380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/057bc937-2433-3d06-a207-fe4da722138b.roa
Signing time:             Wed 27 Aug 2025 14:38:19 +0000
ROA not before:           Wed 27 Aug 2025 14:38:19 +0000
ROA not after:            Tue 25 Nov 2025 15:38:19 +0000
asID:                     14789
IP address blocks:        172.68.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ff:17:0a:22:91:80:3e:34:5d:4f:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 27 14:38:19 2025 GMT
            Not After : Nov 25 15:38:19 2025 GMT
        Subject: CN=2676f0bd-a6a5-4f48-a0c5-634d978caf17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8b:fd:a1:13:22:13:df:ca:38:30:31:75:7e:
                    d5:44:86:66:e6:09:4d:54:4d:fe:e7:ac:bb:06:17:
                    70:3f:4a:00:75:11:1a:f2:42:91:e2:7f:13:a4:aa:
                    82:c7:a4:05:cc:8c:82:b5:5f:f2:61:f2:5d:9d:47:
                    2c:6a:00:4d:09:ca:b3:15:40:00:f6:27:58:c8:bd:
                    cc:fa:0a:06:5b:c7:18:4f:6d:a6:9f:c2:f8:cd:84:
                    39:0c:57:c9:a4:5b:57:38:f4:ca:94:87:ac:73:e7:
                    4a:73:ff:d2:5f:8c:7a:99:53:a7:b1:f1:d1:3d:07:
                    c3:ee:82:a9:a1:c2:ce:d7:d7:27:9c:98:ab:bd:43:
                    22:58:07:2a:fd:8c:db:65:df:ca:73:c1:b5:21:fe:
                    ea:a8:9c:6d:c5:63:89:24:b0:4b:19:42:93:d6:be:
                    07:98:f1:94:c3:a7:ff:7f:92:fd:f2:49:28:5d:24:
                    61:b5:65:63:ad:1b:50:c2:4d:2b:98:00:d0:f6:8b:
                    93:0b:bf:12:0a:f7:ef:6a:eb:22:11:e9:08:b3:c9:
                    7b:a7:b3:6b:c6:18:d2:70:ee:71:81:b2:1c:fe:6a:
                    fd:42:15:ba:ee:3e:50:70:5f:b3:b6:f0:ee:84:f0:
                    cd:58:01:59:b0:f7:7f:49:0a:84:3c:c3:0d:da:8a:
                    8e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CB:5F:0E:F3:A9:41:D3:F7:1C:A8:38:B2:68:E2:A9:B6:77:86:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/057bc937-2433-3d06-a207-fe4da722138b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:ac:64:33:60:8c:67:4d:84:17:0b:5a:12:e8:94:91:07:c4:
         8a:de:d5:12:0c:9b:a9:a9:37:5f:20:9f:94:63:15:94:de:56:
         92:bb:84:68:05:b4:40:b9:89:1d:d5:2c:37:cc:eb:db:7a:0f:
         ae:0b:67:f9:17:46:07:79:53:78:39:bf:f4:22:83:5f:9d:dd:
         8d:e4:1b:71:ee:b4:ea:b3:93:de:05:34:fa:3e:55:8f:f3:26:
         0d:1b:9b:c8:f5:3a:a4:f6:03:f5:b7:0c:bc:7c:cb:89:c8:46:
         8a:90:b5:9f:cd:d3:aa:6b:96:b9:cb:6b:71:3f:27:7c:85:2a:
         b4:da:dc:f5:3e:ce:08:b2:be:22:13:43:0b:3f:f9:ec:d7:87:
         5d:3e:64:1e:60:ae:20:33:7d:29:58:f3:f8:d5:c4:e8:e7:c3:
         a4:73:78:59:d9:6d:d3:f4:4c:d4:8f:ff:6a:55:53:98:57:53:
         da:2e:4a:16:88:ff:4d:e3:fe:4e:59:53:c6:26:a2:f5:0e:76:
         ae:91:b1:2a:b7:1d:22:f0:7f:89:23:10:a7:85:46:41:71:87:
         3c:66:e9:cd:f3:97:7e:f8:6e:93:46:ad:c0:a7:3b:e5:51:d2:
         2f:33:68:4c:5b:41:51:f0:89:cd:3b:b8:b9:96:9b:c7:d7:10:
         2d:67:48:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 20:44:03 2025 by rpki-client