Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b6bff0c1-2c68-301a-9738-0d25090c6a37.roa
File:                     b6bff0c1-2c68-301a-9738-0d25090c6a37.roa (raw, json)
Hash identifier:          UvvAT2VybxbHV453JMQLIoMXlBGoRYYgjD1nHZtqDIc=
Subject key identifier:   E3:08:04:90:3A:35:57:90:F2:15:7D:F8:4A:A1:65:5A:EC:ED:99:8A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BABFD32D32618273DCCB0BF00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b6bff0c1-2c68-301a-9738-0d25090c6a37.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     13335
IP address blocks:        172.69.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:32:d3:26:18:27:3d:cc:b0:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=7671a053-4331-45ea-ba0d-d5fc4c183775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1d:5f:f1:6e:ce:65:74:26:54:51:2c:c3:c8:
                    d7:9c:b9:a5:11:fc:b4:a2:21:06:dc:44:0a:60:b7:
                    fb:f1:a5:7f:0e:ce:e5:ae:9b:ab:9a:34:2d:77:03:
                    3c:90:eb:6e:b9:18:14:3b:8d:dd:79:6c:2a:9d:45:
                    20:6b:29:ce:e9:af:ae:6b:33:c0:17:2b:5f:90:e6:
                    0b:cd:90:2c:af:0e:97:f8:f4:2b:60:ef:37:aa:5e:
                    b9:79:f2:92:bd:22:cc:eb:c6:86:41:40:61:74:8f:
                    52:ca:f2:06:b8:19:5d:ce:d5:fc:a9:de:7a:91:66:
                    8c:62:31:e1:7f:59:04:0d:7e:30:87:1a:ec:dd:62:
                    13:62:f2:b3:a6:d5:b0:71:47:b1:cf:9e:d6:7a:df:
                    f1:a4:fa:e4:7b:38:c8:14:0c:c7:74:6c:44:db:a6:
                    5c:f0:e0:c7:ce:06:fe:6a:77:1f:4b:40:2d:4f:5b:
                    78:c3:b0:a8:b0:9d:b7:c7:64:c7:70:13:5f:e2:de:
                    36:81:08:3d:f0:a1:12:a3:8d:80:13:4a:60:eb:1e:
                    23:89:20:70:16:8c:33:6b:9c:ed:1b:c6:93:51:cd:
                    65:df:d7:b2:92:0c:75:5d:a6:1a:8a:f9:1c:71:9e:
                    59:58:95:99:0c:ca:a9:5a:ba:f0:fa:0e:f4:b8:eb:
                    a9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:08:04:90:3A:35:57:90:F2:15:7D:F8:4A:A1:65:5A:EC:ED:99:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b6bff0c1-2c68-301a-9738-0d25090c6a37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:49:e6:06:d5:01:27:01:92:2f:7c:55:25:1c:55:88:d2:fc:
         20:fe:d4:a0:64:25:62:e3:0a:6f:70:07:20:36:92:43:37:1e:
         c6:0c:6c:b6:e7:e1:78:0e:02:75:c5:1f:b1:29:af:d4:8b:60:
         cb:78:fe:37:0a:9a:09:c2:48:84:79:86:47:2a:ce:85:1f:9a:
         88:c2:8d:17:59:88:85:65:f1:67:c8:aa:38:2d:fd:a1:7e:f8:
         f5:65:a2:fe:e3:d9:2e:ed:93:68:31:42:e7:c9:7a:00:10:b4:
         11:6d:b6:34:42:ea:49:1a:36:b1:ff:46:22:ad:09:e6:1d:e1:
         27:00:62:87:52:8d:8d:94:6f:58:cb:17:69:95:a8:c2:8a:dc:
         48:69:95:dd:31:87:c7:3e:03:6b:01:68:59:04:31:64:8c:f9:
         87:8e:e5:d0:46:d1:2a:97:38:74:e5:7e:6e:7f:8f:ba:03:13:
         69:18:cd:9f:fe:3c:a9:c6:0b:ea:42:3d:76:f8:dc:b6:cb:34:
         8c:8e:bf:e1:cc:01:9d:c6:e9:19:ef:de:41:2a:64:15:4d:31:
         8c:d5:01:b3:74:3c:54:04:13:aa:74:d4:e4:09:f5:da:0c:36:
         ec:e5:50:9c:bf:7f:50:37:cf:ac:2d:8e:7b:66:56:2b:92:06:
         c4:8c:7b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 12:37:10 2025 by rpki-client