Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ce692489-16bd-3110-9ea1-fc66f9641029.roa
File:                     ce692489-16bd-3110-9ea1-fc66f9641029.roa (raw, json)
Hash identifier:          GuJ7396qoPfUof2TMIPjHwcpbR9yPEKA0Hy1ZI6EJcc=
Subject key identifier:   FD:F7:BD:1E:EC:1A:E9:06:07:E2:B8:E9:5E:15:16:79:F3:FE:F7:08
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BABFD227658385577A7540540
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ce692489-16bd-3110-9ea1-fc66f9641029.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     13335
IP address blocks:        172.69.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:22:76:58:38:55:77:a7:54:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=293dc935-c61d-4127-b018-e8252f6e1578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d9:77:fa:c7:cb:10:c4:1c:26:f0:58:18:50:
                    d6:2f:0f:b6:5a:89:63:ea:0a:bc:f6:b0:3f:34:8f:
                    43:9b:34:43:05:3b:0c:cf:c1:dd:9f:d5:61:96:c0:
                    3f:81:ff:8c:96:45:94:62:b9:dc:91:75:34:dd:f1:
                    d2:1e:a3:ad:7e:c5:08:d1:cb:c0:4e:c2:3a:13:c6:
                    6f:e1:f3:2d:ab:45:18:f4:d7:de:ea:e0:a1:73:96:
                    de:1a:c9:f8:15:f8:4e:4e:2b:e6:cc:d0:61:17:83:
                    de:0c:45:0e:05:63:9d:11:94:81:8f:03:cc:70:1f:
                    a7:20:ae:2f:a8:98:4c:41:84:f9:f7:db:f0:fb:21:
                    e2:ac:49:83:db:fc:76:ae:0c:e5:50:81:ce:51:f0:
                    f5:18:74:9a:23:92:be:84:cb:18:60:63:83:6d:93:
                    59:7c:68:5d:4d:e9:9e:52:14:11:7c:b5:d2:4a:39:
                    be:6c:9c:40:fd:8b:81:29:1f:3c:07:72:b6:dd:8b:
                    8d:ec:a5:08:bc:a7:ff:4c:8a:42:37:ff:e6:f2:c4:
                    19:d2:2c:ee:73:e9:5c:22:d4:5f:6f:16:1c:42:44:
                    ed:ef:64:d1:0d:5a:3c:31:d0:89:86:57:da:c9:2d:
                    1d:37:0b:01:98:84:b2:e8:06:f8:a7:a5:2e:13:45:
                    8e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F7:BD:1E:EC:1A:E9:06:07:E2:B8:E9:5E:15:16:79:F3:FE:F7:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ce692489-16bd-3110-9ea1-fc66f9641029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:97:cc:b8:a9:0f:e1:ae:90:47:22:d7:90:50:ce:a2:ac:06:
         66:44:14:86:6b:b4:d9:6e:62:4b:f4:5c:21:15:d6:06:68:5a:
         09:2e:d0:fa:b4:72:24:42:f5:39:a2:4b:d5:38:63:d2:7f:f8:
         ed:07:e3:ee:4c:b7:bd:86:3a:73:e3:f5:2e:2b:d5:91:0d:7d:
         b5:6a:1a:b9:4a:28:80:f6:50:6f:1a:15:4f:3d:d7:b6:86:f0:
         8a:45:fe:c6:93:e6:d3:fd:d4:d3:31:03:d5:03:f7:8b:d0:51:
         72:a4:c6:81:d3:fc:2f:a5:ad:72:3e:f7:04:92:83:dd:4f:2a:
         9b:39:f2:bd:3e:3b:20:c7:c5:a4:48:1a:f3:35:8a:b0:3e:ef:
         17:24:8d:29:01:18:82:bc:5e:91:23:7b:02:27:b2:0e:e2:77:
         a5:2a:c5:e4:8e:c7:bf:2b:ca:8f:b7:ea:b6:5a:f9:61:2f:d1:
         94:b2:4d:d7:ce:00:58:e5:6f:a5:a2:47:8a:60:92:4f:54:4b:
         84:27:12:fb:3f:05:e1:77:ee:83:56:63:8a:8a:95:d0:2a:fd:
         e2:ba:fc:dc:e4:7f:2d:29:2d:89:ab:66:86:21:13:3b:15:bf:
         7d:1f:fa:25:7a:eb:17:f3:9f:8e:04:2b:02:9b:07:1a:31:d8:
         63:40:70:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 10:01:33 2025 by rpki-client