Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5130b2fb-8c38-345e-856b-12dd5ca7a4d9.roa
File:                     5130b2fb-8c38-345e-856b-12dd5ca7a4d9.roa (raw, json)
Hash identifier:          Yx2aPNoN3HUxIH2N9NkT+58VSu5WN8Q00SGxw3aPNXg=
Subject key identifier:   9B:E3:F1:77:CA:46:27:EF:CC:2F:53:5E:AF:80:DB:50:BB:49:BA:76
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BABFD325086FE23037C7D4A80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5130b2fb-8c38-345e-856b-12dd5ca7a4d9.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     13335
IP address blocks:        172.69.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:32:50:86:fe:23:03:7c:7d:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=f1f5704e-690e-4cc8-8329-88214a03a863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f0:3e:ff:65:21:45:75:99:14:7d:c0:00:77:
                    ac:03:76:56:63:29:39:99:7f:71:b8:5c:e8:f8:c2:
                    ca:47:26:8a:36:1f:11:bd:45:99:98:82:77:da:fb:
                    3f:4f:dc:f3:79:c9:25:b5:9c:b2:db:7c:9c:b6:bc:
                    5d:3e:89:8b:95:60:77:cf:43:f5:55:b1:99:53:3b:
                    78:65:b2:da:58:7c:ff:c8:15:7f:64:b5:16:66:55:
                    5c:21:9a:a3:a9:64:e8:ee:86:c1:25:b4:d8:54:9b:
                    b0:64:d5:2f:4e:d6:c3:4f:61:2c:90:50:12:e6:49:
                    8e:d4:8c:a5:67:b8:e4:33:17:28:80:0f:d0:a1:73:
                    a5:e0:35:fa:5c:76:22:f4:a0:20:4c:17:f6:6c:e7:
                    bd:72:61:22:77:b4:cd:73:32:40:0f:28:a0:ec:69:
                    67:d3:92:b3:00:dc:5e:63:64:a0:81:06:8e:ec:38:
                    02:7f:62:61:2b:fc:dc:ce:30:01:87:b7:15:5e:dd:
                    d9:39:40:51:e5:95:ee:28:fa:71:62:d3:63:86:4f:
                    f8:a1:33:7e:91:8c:28:80:4c:ac:e8:86:ba:ae:fb:
                    fd:82:0e:c7:f6:a5:57:87:88:65:d2:fa:d2:3c:6a:
                    03:71:30:3a:1e:9d:c4:e5:2a:f1:54:bd:64:c7:b6:
                    cb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E3:F1:77:CA:46:27:EF:CC:2F:53:5E:AF:80:DB:50:BB:49:BA:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5130b2fb-8c38-345e-856b-12dd5ca7a4d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:e7:2b:7d:33:4f:79:76:53:f3:ed:f3:11:42:1d:ce:5b:70:
         60:40:d7:9f:73:33:fd:01:d0:c7:dd:12:98:55:b6:0f:86:33:
         2e:07:e5:3d:32:81:80:93:e1:b5:9d:10:dc:4e:4c:a5:a8:1f:
         3d:67:9e:c2:6d:15:3d:55:a3:69:1e:a0:da:40:84:70:54:1d:
         38:97:9b:22:88:82:90:35:10:4d:35:dc:f3:35:d3:a9:c2:dc:
         47:99:33:d0:c7:6e:19:ec:7d:8b:e7:86:08:ca:18:03:ab:5b:
         e3:7d:c6:18:bb:4d:93:9e:31:92:36:d6:a5:b3:98:ba:14:20:
         98:b7:46:b1:a9:9d:21:82:41:65:14:cd:bb:b6:e3:b5:a8:a3:
         7c:8b:e3:39:f6:d9:61:81:fe:83:4b:7d:10:28:2e:9f:0c:a8:
         b4:56:6c:9f:ea:9d:3a:2a:f1:8b:9d:78:84:ef:e1:2b:55:5c:
         3e:a5:99:ef:6f:cb:ed:80:75:4d:ba:92:fd:74:c1:89:c0:99:
         47:ac:8e:48:86:8f:87:0b:da:6b:a6:af:ea:e3:cc:2b:61:61:
         2f:83:88:4a:a6:ed:06:c6:a3:af:bc:8a:60:23:98:b8:21:08:
         4a:76:cd:35:d6:94:1f:8e:d8:fa:39:59:c5:46:3f:71:69:a7:
         81:9a:a5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 12:31:11 2025 by rpki-client