Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c1d0986b-e9a5-3029-888e-96d2bb06b44e.roa
File:                     c1d0986b-e9a5-3029-888e-96d2bb06b44e.roa (raw, json)
Hash identifier:          XLSzUuBYcSwQpr7lmeGRCjO908zc4ShVFc6hOiJHxGM=
Subject key identifier:   45:5C:15:8A:67:62:84:A1:BA:81:79:48:95:67:E6:F7:88:41:D9:67
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BA7CD0BB813C42017B26A0150
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c1d0986b-e9a5-3029-888e-96d2bb06b44e.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     13335
IP address blocks:        172.71.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cd:0b:b8:13:c4:20:17:b2:6a:01:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=e77dbf37-3207-4ac7-bef6-c34abfa8a5cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:23:9f:38:e4:3f:c3:48:36:f3:a9:30:7f:38:
                    3a:b3:e9:44:29:e4:24:b2:af:08:d3:67:d0:30:89:
                    26:69:f4:43:33:23:9b:2d:76:fa:d6:82:d4:36:43:
                    37:e0:7d:a7:bd:ad:8f:99:92:4d:b3:f9:89:0a:cf:
                    c9:b2:5d:01:bb:c3:a3:2b:ce:3a:a9:5f:15:f7:07:
                    09:cb:e0:59:52:95:13:ee:6a:07:9c:ea:69:9c:01:
                    5c:2c:77:18:f7:3b:3e:84:94:e1:27:a7:e2:22:ea:
                    d9:66:af:a3:6e:89:6d:7e:a5:fb:a9:b2:76:f1:c6:
                    c0:eb:6e:36:82:e9:e6:03:97:eb:de:d5:ba:09:c9:
                    5b:3d:6b:8d:1b:ba:07:cf:d2:ff:d1:a4:4a:a3:06:
                    b6:03:e3:fb:33:51:a7:b7:80:36:49:0d:35:d7:a4:
                    d7:28:35:05:22:e7:0a:80:1b:f9:0c:99:b6:e6:b9:
                    03:4a:c6:b1:4a:10:d0:2a:27:b7:d4:36:66:6b:9e:
                    bc:32:e4:75:fa:dd:86:03:d1:2f:53:1d:d8:fe:9b:
                    17:0f:01:cc:e4:4b:e4:bc:47:da:a3:b6:ff:c1:ea:
                    e0:94:f4:fc:b6:53:ff:f0:fc:ab:1e:b2:f4:d0:9b:
                    96:d8:33:be:9a:07:3c:4f:37:df:b7:bb:6a:34:19:
                    ab:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5C:15:8A:67:62:84:A1:BA:81:79:48:95:67:E6:F7:88:41:D9:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c1d0986b-e9a5-3029-888e-96d2bb06b44e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:94:08:65:ae:d2:ce:d5:88:be:b7:ad:a9:d1:cd:f3:3e:fb:
         b2:af:82:b4:1e:33:f1:83:e9:75:da:91:e0:9b:ab:84:c7:32:
         7b:df:d7:56:d0:18:44:fe:4b:0f:53:49:37:e7:e4:04:50:12:
         6f:d5:77:2d:8c:af:3d:82:8f:47:a9:f7:2d:eb:2d:ca:c2:db:
         f6:28:2a:0c:ce:be:75:88:c2:6a:2c:36:cb:3f:df:79:ad:9d:
         c2:3e:f1:9b:fc:aa:0e:3e:c7:a2:ae:ea:a5:4e:51:4c:5b:26:
         c4:38:74:f8:91:46:a9:28:d6:1f:d9:82:9e:f8:e5:c7:56:53:
         07:9e:69:bb:6d:c9:21:7c:14:71:05:eb:1f:b4:2f:af:ab:6d:
         e7:18:48:d1:cf:e4:4c:2b:b5:bc:55:61:9f:af:c6:55:91:40:
         4d:5c:0b:c1:69:3d:ee:e2:aa:da:ff:3c:82:db:50:e4:82:ae:
         7e:5e:a2:bb:31:55:16:2a:4f:72:49:e5:ef:80:5e:96:5f:89:
         09:a9:75:52:fa:8b:97:dc:76:17:24:89:b8:ab:9b:0e:c8:55:
         c5:12:da:23:e3:47:a3:66:4b:73:18:21:68:d1:ac:b2:8c:fc:
         03:56:dd:5d:cf:a1:64:a6:75:b3:12:4f:b5:e4:b2:1a:42:85:
         92:f9:36:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 12:31:04 2025 by rpki-client