Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91ac9abd-7837-3808-bb76-86a2c5560257.roa
File:                     91ac9abd-7837-3808-bb76-86a2c5560257.roa (raw, json)
Hash identifier:          3JnQGzArTpVESEWu/LreLskbSBb/mN4L97nrK+IZxXo=
Subject key identifier:   3C:2A:97:D7:8B:5E:70:B8:F2:68:0C:4A:0B:24:9C:1A:7F:E2:C3:AD
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BA7CCF933FE251C0587206C80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91ac9abd-7837-3808-bb76-86a2c5560257.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     13335
IP address blocks:        172.71.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cc:f9:33:fe:25:1c:05:87:20:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=68d23cdc-9690-49a5-b027-df37df9ed443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:11:b0:ee:a5:54:4b:ac:bb:79:53:b6:c9:e9:
                    92:56:8b:29:97:47:2d:09:9d:45:a3:49:70:5e:6c:
                    cd:bb:3f:22:7d:bf:a3:ac:31:6d:f2:df:db:47:7f:
                    57:ae:aa:08:7b:2a:79:b5:0a:a4:f4:8e:13:2c:0a:
                    6c:2a:c2:9e:26:3c:52:a2:e8:bf:72:98:10:48:b0:
                    51:73:7d:49:14:97:2b:d1:87:75:9a:cf:95:1c:88:
                    81:6b:e9:f9:e3:32:bd:dd:37:ea:3b:e0:b4:2a:cf:
                    a8:ea:21:ad:3c:1e:88:18:6d:7a:fc:b8:70:4b:38:
                    f5:5e:12:dd:e3:02:5d:52:51:6b:4f:db:48:73:bf:
                    0c:01:18:9c:50:c2:b0:d2:ac:1f:66:50:dc:4f:68:
                    b8:17:7c:f5:39:f1:02:a9:4b:6c:ff:66:25:72:35:
                    b6:3b:3e:f7:22:14:66:fa:fc:09:b3:87:4e:d5:c9:
                    22:2d:2e:a5:88:c1:53:eb:b2:03:09:40:fe:ee:fd:
                    3d:d5:5c:1c:f6:cb:cb:fa:dc:fe:13:56:03:44:eb:
                    0f:3a:fe:9f:9a:b8:d7:52:a8:ba:63:bc:99:52:21:
                    1e:5a:19:77:4f:5a:01:a2:68:5a:44:2c:39:0f:e9:
                    64:3f:b8:03:69:4e:8d:72:4b:62:74:08:76:f9:75:
                    58:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2A:97:D7:8B:5E:70:B8:F2:68:0C:4A:0B:24:9C:1A:7F:E2:C3:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91ac9abd-7837-3808-bb76-86a2c5560257.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:94:dd:b7:d9:7c:5b:af:73:c2:f3:a0:d0:29:4d:b6:dd:fa:
         b6:54:38:4e:85:50:ea:f1:e8:3a:b3:62:e1:61:1b:db:e6:20:
         ad:90:29:6b:83:fc:8c:89:7a:a1:95:1f:da:8e:ff:6c:15:a6:
         bd:08:2d:1a:ed:a3:f2:d6:a5:7e:ba:72:bc:e1:95:ad:3e:e5:
         06:0f:25:73:d1:19:98:01:d4:ae:79:e0:18:3f:44:64:52:0a:
         64:19:cc:6a:da:17:bf:50:c7:c3:15:0f:41:e8:d3:10:bc:24:
         fb:b8:a9:75:3a:1e:b3:e1:c5:dd:fd:e0:33:42:95:2b:e6:2d:
         a0:a0:de:dc:33:bd:3d:44:e6:b7:fa:a9:35:41:44:da:f4:65:
         e2:c0:d7:68:dd:e9:84:c0:af:61:01:c9:cd:29:7f:47:04:a6:
         b2:51:16:3e:ab:21:9b:1c:a0:89:9f:5a:e1:b9:12:14:0c:92:
         1c:af:8d:0f:18:e9:07:8a:3a:12:40:82:a4:53:ab:5f:f3:0c:
         00:c5:f7:84:f7:e2:a3:3b:6c:a0:23:47:6f:c5:7c:e8:98:22:
         a3:91:57:73:7c:fe:ae:98:a5:3d:59:d4:71:b5:d9:ea:c0:d4:
         64:a5:98:43:41:4f:a9:9a:18:91:0c:2a:83:d2:4c:95:a7:1b:
         e1:6b:04:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 10:01:41 2025 by rpki-client