Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1dbcfc8e-8f4b-38ff-afcd-88bb11ab0a49.roa
File:                     1dbcfc8e-8f4b-38ff-afcd-88bb11ab0a49.roa (raw, json)
Hash identifier:          OB9tSUoI9WDvn8wtQ6ukWqfeaff7aPgcFopbf8pTkSU=
Subject key identifier:   CD:8D:09:F0:DB:B8:ED:E1:93:AD:C1:80:78:1B:6D:85:AE:8A:36:07
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BA9327B0FED0CA5A6E1409280
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1dbcfc8e-8f4b-38ff-afcd-88bb11ab0a49.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     13335
IP address blocks:        172.71.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:7b:0f:ed:0c:a5:a6:e1:40:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=0425ca0c-9314-4ab3-a0e9-9f7d39fcd56b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0b:d7:f6:c8:fb:30:a6:97:79:0c:06:0c:bf:
                    a8:d1:93:6d:f3:0e:6b:21:0b:69:96:ea:ef:be:6b:
                    5b:f9:9b:05:b5:4d:24:3b:fd:55:53:37:85:be:08:
                    10:28:49:4c:ed:c4:db:56:6b:86:4b:3c:41:09:21:
                    0b:a2:be:e1:7b:68:7e:cc:06:46:5b:f0:06:60:87:
                    5b:f4:b0:ea:5a:12:71:f2:30:70:ad:c5:90:37:82:
                    51:16:07:5a:0f:67:5f:02:eb:d5:88:b4:67:e4:a8:
                    eb:f7:3b:00:bf:c0:77:c3:52:0b:03:00:38:05:59:
                    c3:ef:b7:2b:14:7f:0b:5c:ec:a7:c4:67:25:83:79:
                    ff:e2:04:6a:29:76:f2:9f:e6:6e:47:3e:87:e0:ec:
                    dc:30:3f:bb:f5:15:c1:5e:ed:d7:2a:43:e2:7b:de:
                    58:71:29:25:d7:12:e4:c9:18:23:05:aa:ef:d3:b7:
                    64:72:a5:2a:38:5d:6e:ba:1e:e4:d3:b9:67:9b:8d:
                    3f:05:2c:ae:21:98:9e:36:85:bd:ef:aa:0c:db:47:
                    ce:c0:ab:ec:ed:b0:4d:4f:22:3b:84:31:06:6d:d4:
                    b4:67:d7:a5:3b:81:98:44:76:3f:23:be:89:b1:ed:
                    31:e5:bd:a4:78:4e:c0:4a:0f:18:9d:47:90:c9:f1:
                    d3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8D:09:F0:DB:B8:ED:E1:93:AD:C1:80:78:1B:6D:85:AE:8A:36:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1dbcfc8e-8f4b-38ff-afcd-88bb11ab0a49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:dd:6b:9b:de:db:6f:90:cc:ff:95:8f:e9:8a:36:56:69:18:
         af:fe:3c:94:7c:62:be:7a:69:dd:2a:d3:70:49:39:98:2a:c7:
         d5:94:2a:fb:a8:7c:2f:09:1f:c4:56:3b:ee:cc:ba:3e:2a:07:
         e3:02:45:d4:e2:d2:c8:42:e7:84:74:ac:af:bc:a6:af:5c:4c:
         c2:95:2e:a6:5d:2e:52:f6:71:e3:b8:cb:9d:75:e4:82:f9:ae:
         7f:7a:5e:68:76:fe:fe:c6:5a:21:b3:b7:44:01:53:89:4b:07:
         32:d6:cf:00:68:95:16:ee:94:e0:37:0a:e8:e1:69:9e:e5:3c:
         dd:0b:f9:e5:e8:55:a5:ed:ef:6c:00:59:1c:b5:a3:10:2d:d7:
         46:74:1b:07:f5:2b:1c:59:8c:92:56:d7:82:58:0f:25:79:c2:
         dd:67:af:e1:ea:a3:17:d7:ee:0e:df:ef:1e:1e:78:03:69:68:
         19:d2:ea:ea:ef:b1:0e:d0:b1:bc:7a:40:ba:66:39:1b:18:fb:
         90:e6:ff:98:4e:bb:21:fe:45:3f:30:b2:81:02:43:5b:bb:53:
         1f:fd:79:0f:35:9c:70:4a:81:4a:7c:be:ef:f5:a8:29:b0:79:
         56:40:b5:47:12:7e:27:16:c1:75:39:8e:e4:15:ba:c6:ab:b4:
         e6:b0:99:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 15:23:40 2025 by rpki-client