Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/07008b7a-798c-3192-98ef-3d4f54c8e0f9.roa
File:                     07008b7a-798c-3192-98ef-3d4f54c8e0f9.roa (raw, json)
Hash identifier:          Eh7yfQd5o0kWf+VbWIldVlbsEqo0/PXm6i3bpCw+5Aw=
Subject key identifier:   AB:8A:DD:B3:68:67:DB:EE:35:3B:0A:13:85:99:EE:E4:97:AA:55:00
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584910E1706D9E5831B3F4612340
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/07008b7a-798c-3192-98ef-3d4f54c8e0f9.roa
Signing time:             Mon 03 Mar 2025 14:00:53 +0000
ROA not before:           Mon 03 Mar 2025 14:00:53 +0000
ROA not after:            Sun 01 Jun 2025 13:00:53 +0000
asID:                     13335
IP address blocks:        172.71.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:10:e1:70:6d:9e:58:31:b3:f4:61:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  3 14:00:53 2025 GMT
            Not After : Jun  1 13:00:53 2025 GMT
        Subject: CN=bc6f898f-9a60-4d2e-bc75-a0911c84a724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e7:3e:3a:8c:5a:dd:96:2d:fe:0a:e5:f3:6a:
                    1a:a3:e4:dd:35:e9:c8:d3:da:3b:3b:70:ad:87:d2:
                    cf:43:23:14:0c:51:52:8d:0a:b2:73:7d:ff:53:6b:
                    18:c0:c3:f9:37:5d:1b:43:3d:1b:89:c5:fe:3e:8a:
                    4f:64:96:6c:9a:86:a2:bf:c1:06:69:2a:c9:9f:c5:
                    15:82:0e:5e:46:25:18:cd:97:b6:df:2c:f5:f6:42:
                    c3:49:16:30:9d:7d:66:5f:b5:1c:7d:e0:13:c4:0d:
                    b3:24:4c:df:0b:45:56:ff:01:3f:d3:f8:fd:53:30:
                    6b:71:0d:03:92:3a:d8:27:0a:2c:7b:14:f4:f4:42:
                    83:8d:a4:89:1a:31:8f:28:92:65:18:fd:66:cd:6b:
                    64:ab:1b:d7:af:06:1d:cd:10:c5:4b:ea:ab:c1:5b:
                    5f:7f:26:52:c6:fa:13:9f:31:af:66:85:71:8d:11:
                    ed:1b:e0:14:40:b7:ea:93:a1:76:bd:05:8d:fb:0d:
                    d2:f8:f5:d5:ea:d6:14:fe:92:9a:82:e7:9e:6b:60:
                    26:c0:e3:7a:fc:a4:ec:f2:20:e8:d6:3a:79:51:cb:
                    47:b5:60:7c:03:80:0a:cb:ae:fc:5d:a0:ac:33:c3:
                    49:de:e3:c9:39:0b:99:58:a4:8e:b7:44:b5:4a:b2:
                    2c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8A:DD:B3:68:67:DB:EE:35:3B:0A:13:85:99:EE:E4:97:AA:55:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/07008b7a-798c-3192-98ef-3d4f54c8e0f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:01:4f:62:f9:de:c4:6b:d3:5d:54:48:78:72:56:a5:da:e8:
         53:56:23:6b:bb:8c:52:cf:73:3d:8c:24:83:67:a7:60:e0:62:
         f1:d5:51:fc:60:d2:ef:49:64:1e:ed:94:62:86:9a:39:38:9b:
         19:d5:1a:d3:8d:4a:08:71:3c:c2:32:30:b6:3e:80:e7:3f:a4:
         68:ac:ea:bd:50:9c:58:2c:a8:a3:2a:36:76:5c:d7:3c:0e:84:
         5e:47:a7:73:dd:a2:3f:0c:a4:95:9a:f5:35:b8:86:8a:7b:b7:
         5f:1e:f4:62:ba:23:ed:8e:50:f8:2b:16:85:a2:c8:a6:21:ff:
         6b:c2:19:d9:7d:ca:59:39:d0:c7:10:78:30:84:24:e0:ba:e2:
         fb:3d:65:79:c7:14:13:7a:ff:1e:3e:7d:ea:ec:74:27:5c:3e:
         38:a9:13:96:e2:1c:48:b4:34:4d:4c:ed:78:c7:31:a3:0c:a4:
         dc:76:a6:2d:bd:d9:ca:37:f3:f4:99:cc:54:07:c4:2f:99:85:
         eb:be:31:5a:8c:c4:03:78:02:22:3b:b6:4b:63:75:e4:2f:bf:
         a3:dd:91:10:46:12:4f:d5:d9:48:85:47:0a:6d:e9:33:7e:55:
         70:96:72:a4:09:4e:62:1d:1b:94:76:b8:c8:ed:61:4c:20:ac:
         0d:b8:e1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:51:41 2025 by rpki-client