Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ee2f816b-8b0e-3769-95ad-f4f5b4f514b0.roa
File:                     ee2f816b-8b0e-3769-95ad-f4f5b4f514b0.roa (raw, json)
Hash identifier:          1TAJBYEy39kmocm8ifmSzSQbL/JSwVVvURgZAeDBy1k=
Subject key identifier:   29:3E:C3:CE:59:C5:A5:63:31:2A:4E:06:8B:C5:99:06:E8:BE:90:A6
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BB1926E72BDBFA1DA0BDFCD40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ee2f816b-8b0e-3769-95ad-f4f5b4f514b0.roa
Signing time:             Thu 30 Oct 2025 13:00:38 +0000
ROA not before:           Thu 30 Oct 2025 13:00:38 +0000
ROA not after:            Wed 28 Jan 2026 14:00:38 +0000
asID:                     13335
IP address blocks:        172.71.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b1:92:6e:72:bd:bf:a1:da:0b:df:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 30 13:00:38 2025 GMT
            Not After : Jan 28 14:00:38 2026 GMT
        Subject: CN=9312e3b8-6057-4d28-a6d1-06d4864a4ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:80:33:7b:63:03:4e:90:0d:a7:fc:c7:5e:2f:
                    93:c7:23:c0:8e:83:9b:6c:09:0a:fb:a7:b4:b0:63:
                    e8:a1:35:d9:48:7a:36:cb:7e:ac:27:13:33:ee:39:
                    61:71:40:1b:1d:cd:46:56:76:62:d2:c9:72:c7:15:
                    96:15:ea:bd:16:f2:50:68:02:fe:ab:da:fb:49:61:
                    69:b7:2d:56:a7:84:a4:f9:e5:27:ff:5e:22:cc:e4:
                    2f:3f:93:fc:8b:e2:1a:d3:e5:73:24:38:3d:8d:b7:
                    83:3e:ac:1a:db:ee:52:2d:29:11:5f:4a:1f:82:34:
                    1d:ad:38:d7:cc:c4:38:80:32:a6:19:30:d2:3b:ae:
                    f5:03:c1:a7:35:aa:6f:3b:71:5b:9b:f2:ae:fc:6c:
                    19:c1:2d:1e:c7:f9:8d:db:fb:e8:ea:6e:1b:6a:b7:
                    1c:dc:32:20:99:78:f7:dc:a9:6f:5d:53:33:a7:01:
                    a3:c5:d0:3f:e0:86:0c:ea:50:b9:7b:c3:72:db:80:
                    5d:57:23:81:14:c1:49:ec:d9:cd:b1:ee:36:83:b2:
                    3d:9e:7a:f3:d9:10:ea:66:07:ad:47:bf:93:20:9e:
                    5e:f2:44:7b:fc:a3:a2:6d:98:9d:8a:c9:4d:2c:4b:
                    13:c7:20:f5:08:0e:16:fb:8d:08:46:f8:c4:c1:ff:
                    27:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3E:C3:CE:59:C5:A5:63:31:2A:4E:06:8B:C5:99:06:E8:BE:90:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ee2f816b-8b0e-3769-95ad-f4f5b4f514b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:44:e1:99:ed:52:7a:f8:bd:e2:de:dc:8f:c5:cc:7c:0f:7e:
         f1:97:7d:50:45:33:71:fc:00:ca:f8:33:41:cd:c7:b8:56:4c:
         5e:1d:28:1d:71:ce:75:fd:06:17:08:cc:39:89:65:52:97:33:
         69:50:a0:00:dc:8e:c4:c4:d9:a1:4f:f3:0e:2d:f6:14:b1:c3:
         74:20:d3:5b:ed:00:75:cc:76:54:8b:54:81:91:9d:4a:d0:3a:
         b4:bc:6b:99:76:83:19:c3:a0:c2:86:1c:23:57:fe:4e:39:8f:
         b3:52:09:b4:21:68:60:8c:b1:4d:97:42:94:4c:8f:3b:c3:38:
         5d:c1:58:fc:60:70:8d:2c:52:23:a2:5a:6e:38:df:2b:4a:ef:
         3b:24:9a:f1:57:0e:6b:dd:c2:35:a5:3d:62:a8:f7:59:aa:a2:
         35:9f:09:67:33:b8:aa:65:24:2a:b9:09:ee:dd:09:41:2e:e6:
         2e:11:02:17:db:22:1e:10:cc:3f:9d:61:e8:18:3c:15:4e:2d:
         67:4c:ac:e7:33:88:0b:e8:59:7b:37:db:72:54:b8:61:f3:eb:
         e2:92:17:35:0f:01:0b:3e:3c:1f:51:a2:c7:22:5c:e3:fc:ec:
         ff:5e:04:56:db:d6:56:fe:74:19:b0:58:55:74:61:34:f5:87:
         cc:e4:2f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 12:30:57 2025 by rpki-client