Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/07008b7a-798c-3192-98ef-3d4f54c8e0f9.roa
File:                     07008b7a-798c-3192-98ef-3d4f54c8e0f9.roa (raw, json)
Hash identifier:          3trhjKSqeWdqO1Mz5jN1iJ19fFJ9tSvw/I7mt4AXNS4=
Subject key identifier:   21:37:6B:7F:C1:25:86:E4:79:B6:F6:4A:A6:EC:AE:5F:17:E7:B8:4A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849F01A8AF71D1B27B5C4272B30
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/07008b7a-798c-3192-98ef-3d4f54c8e0f9.roa
Signing time:             Thu 22 May 2025 13:01:05 +0000
ROA not before:           Thu 22 May 2025 13:01:05 +0000
ROA not after:            Wed 20 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.71.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:1a:8a:f7:1d:1b:27:b5:c4:27:2b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 22 13:01:05 2025 GMT
            Not After : Aug 20 13:01:05 2025 GMT
        Subject: CN=e2a859db-64f9-4488-b3fb-6a235bd6228b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:63:dd:ee:4f:00:ac:66:d6:5e:ac:f9:60:e4:
                    8e:23:35:15:6d:35:76:39:c3:81:be:51:40:61:c9:
                    9a:b5:84:2f:b0:47:21:65:a2:b4:fc:58:89:e6:07:
                    88:4e:c4:70:7e:a6:1f:f7:40:a6:0c:b5:5d:fd:0f:
                    e8:d5:f0:b2:a4:62:eb:94:1a:76:d3:3b:c6:d9:4c:
                    d5:73:68:2a:cd:9e:8e:0e:0e:79:49:e9:a7:91:cf:
                    0f:2f:8a:c8:17:eb:ee:41:5f:de:f0:15:b4:19:eb:
                    b5:0c:db:9d:78:ba:56:f0:6d:6a:b8:18:e0:82:48:
                    7f:8f:d6:a8:62:f3:fc:7f:3e:5b:ef:de:5f:85:63:
                    50:38:50:d4:31:61:a2:55:3f:d5:b5:0f:43:e8:39:
                    5a:e9:c3:ee:e1:7b:48:a7:eb:dc:7e:4a:f5:9c:76:
                    39:ce:70:9b:81:b7:43:91:51:95:61:35:f1:73:6c:
                    3a:62:2d:b6:22:d4:2c:f2:7e:0e:b7:4e:21:55:ab:
                    1b:47:a3:8c:c2:18:a2:b5:e2:43:bc:f9:16:d7:d1:
                    90:00:50:a2:4e:20:cc:63:f4:5d:da:1a:87:7a:ab:
                    53:34:22:ea:97:75:75:69:29:19:fe:8e:c2:d3:f7:
                    7c:2f:81:94:22:26:34:ab:eb:d5:22:a4:40:38:16:
                    a2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:37:6B:7F:C1:25:86:E4:79:B6:F6:4A:A6:EC:AE:5F:17:E7:B8:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/07008b7a-798c-3192-98ef-3d4f54c8e0f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:f9:14:d8:c5:6f:6f:87:bd:1a:8a:43:0b:79:bf:8d:40:c4:
         1a:8f:ae:80:30:49:39:c1:df:1d:98:ba:ed:a5:68:4c:1f:9b:
         de:75:4c:d8:01:6c:e5:6f:d4:3d:88:ec:be:63:ef:9a:74:4e:
         e2:f7:f2:89:71:0f:16:08:53:aa:45:b1:38:5e:e4:b7:08:b8:
         e5:9c:8b:38:a5:42:1e:1b:97:98:2f:68:64:bd:5d:4d:ba:34:
         cd:01:6b:85:07:83:28:44:27:f0:c1:29:91:b7:c2:2e:63:ec:
         a9:92:ab:f6:c3:16:11:e0:83:41:46:d9:db:e1:a5:78:e7:9c:
         df:e9:1d:1e:c8:2c:b6:20:2d:09:86:32:d0:32:21:ee:0e:ed:
         25:23:c0:6a:e3:e9:f4:16:80:ac:68:81:bb:97:ee:2a:11:f1:
         01:ab:63:d5:c9:ae:74:3b:fa:ec:cd:46:f1:b3:3b:32:9d:cd:
         d5:42:4e:1d:a4:75:dd:26:d4:e7:48:0a:ef:51:6f:30:f8:54:
         0b:30:06:56:71:3c:21:5b:db:a2:5e:85:a5:6a:a7:bc:6b:82:
         bf:ba:fb:8c:72:ba:de:b3:99:d4:7b:60:de:e3:65:f0:de:08:
         9a:fb:f9:aa:f4:8d:10:50:2d:3b:e7:2d:4f:23:08:6c:3a:f9:
         d7:06:72:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:06:13 2025 by rpki-client