Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/57650209-3a57-3e73-95ca-9740e635b106.roa
File:                     57650209-3a57-3e73-95ca-9740e635b106.roa (raw, json)
Hash identifier:          J8NLuN7xXIGPL4LwFuSinki9C20ebWqzGEVKLLHQWsI=
Subject key identifier:   01:24:7A:A9:AB:96:14:72:36:20:24:3F:0D:DB:81:44:E0:8C:F6:96
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BABFD20091B5DC2D52BD8C580
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/57650209-3a57-3e73-95ca-9740e635b106.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     13335
IP address blocks:        172.69.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:20:09:1b:5d:c2:d5:2b:d8:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=bb592996-0c18-4503-b90a-a8e0b9d7fe63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c8:a2:d4:e4:d3:d9:e7:f5:55:6e:b5:e5:c7:
                    4b:67:85:cf:3d:d8:5d:ca:21:69:d6:8e:9d:30:a5:
                    6c:e6:a0:fe:2c:0e:57:aa:d9:ff:51:61:ac:a5:80:
                    10:d3:6f:8e:f3:d3:c3:70:03:57:01:0a:e8:28:8f:
                    8b:0a:88:bd:78:82:01:de:c0:b2:10:66:c3:f2:b1:
                    0c:91:23:c6:4a:95:72:10:32:be:03:90:8d:ec:88:
                    e4:3e:10:cd:cb:7a:90:4a:ec:ae:5d:0b:b7:75:2f:
                    ad:7d:25:80:15:bc:4c:8f:c2:95:4c:80:c8:bd:bf:
                    52:66:3b:7c:7b:31:dc:a2:5e:84:8e:d1:68:3c:87:
                    eb:98:db:6c:33:59:e6:1f:2e:c5:f7:60:b2:c2:c0:
                    e6:60:17:fe:8c:1c:ba:af:e1:93:0a:c6:86:f6:f3:
                    b2:80:0b:bb:e5:23:5d:09:85:91:2f:58:b6:47:df:
                    71:99:25:cd:72:d2:7d:2a:4e:2e:7f:66:c0:94:30:
                    78:58:84:7d:ab:5d:cc:5a:de:ce:a5:6d:a5:1d:54:
                    6f:f4:ae:6e:bb:f4:e0:70:0d:c5:50:79:08:2e:15:
                    4f:09:12:fc:71:4e:2e:3d:19:02:3f:d3:08:19:a7:
                    57:49:dc:5d:38:63:3d:81:04:36:bc:95:73:7b:23:
                    4d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:24:7A:A9:AB:96:14:72:36:20:24:3F:0D:DB:81:44:E0:8C:F6:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/57650209-3a57-3e73-95ca-9740e635b106.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:e1:ad:69:03:a7:22:4b:17:1e:0e:74:c9:56:4b:8b:74:0e:
         db:15:0c:b6:c8:40:0b:87:15:c1:52:e0:b5:c5:9a:1f:b0:77:
         be:9c:14:00:db:54:39:a1:4a:d0:8a:2d:20:a8:dc:c6:c5:3b:
         57:52:34:d4:a8:e2:0f:96:be:2e:9e:e5:d3:ed:63:eb:d4:56:
         35:12:8d:eb:14:18:43:c4:f8:f2:b5:d0:92:85:fc:0e:53:15:
         63:d5:42:62:8f:66:c0:17:f8:60:13:03:07:d6:6a:a5:75:24:
         7a:22:f3:35:ba:09:ac:15:04:5a:d1:12:03:4d:d8:9a:8e:2b:
         20:1f:03:ce:5d:55:9b:ac:48:ee:bc:97:4f:a9:a4:af:25:78:
         fa:77:bc:23:d6:78:34:52:f3:5b:7d:4a:24:b7:f8:a8:6c:57:
         d8:69:ec:d7:50:49:05:2e:bc:5d:8a:df:11:9b:20:23:ec:00:
         96:ac:76:8a:00:71:ad:b5:45:43:d1:c4:99:28:ac:4b:cc:5f:
         f1:2a:fa:d8:0a:25:c3:b1:4e:9b:36:b0:e5:b5:7b:b4:ad:0d:
         a8:80:7d:00:1e:f9:4c:6d:40:1a:02:82:cd:98:6d:3c:fa:f5:
         f5:58:b4:15:d0:3c:9a:93:11:44:63:67:21:78:24:a4:fb:ad:
         0e:1c:1c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:11:39 2025 by rpki-client