Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08a5e222-b8df-3765-a0fd-4cd50f05e90a.roa
File:                     08a5e222-b8df-3765-a0fd-4cd50f05e90a.roa (raw, json)
Hash identifier:          5V8Fqfke1j9H8PhoniDsc5NMfmj9o+tBvV7fH6jMZDU=
Subject key identifier:   35:61:11:6E:35:3A:58:4B:97:EF:57:0B:7F:C8:F9:B9:10:F0:FE:8D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849EA8536259E5E513B24C5B900
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08a5e222-b8df-3765-a0fd-4cd50f05e90a.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.69.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:36:25:9e:5e:51:3b:24:c5:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=49aee144-43f6-4981-83b2-e365bc34ca55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:da:e3:3f:81:b8:39:f2:09:37:08:88:0e:fe:
                    e6:94:98:73:8a:f2:2e:3b:ed:7f:e0:7c:cd:b6:b2:
                    cc:95:55:75:2a:66:9b:f1:53:d8:2b:f0:d5:9a:d6:
                    d7:0c:ad:f9:97:c8:db:e1:5a:fe:9c:d1:d1:b0:16:
                    d2:8c:7f:85:c1:a4:d4:62:11:aa:ff:30:84:0f:26:
                    85:51:53:ba:6f:a0:ee:d6:4e:70:61:d0:77:76:2d:
                    b3:a3:8b:c8:d5:db:8c:0b:a9:f2:9a:3f:55:61:e0:
                    1e:bd:1a:3e:18:22:e5:57:1d:03:65:10:6e:d0:c0:
                    20:1c:ba:ce:ea:45:e0:60:3d:b0:34:d8:aa:10:39:
                    c6:d0:bc:37:5c:bc:75:10:e8:23:df:fe:82:cb:ca:
                    43:5d:70:c1:5a:ef:c6:f7:9d:c5:34:14:5e:68:e0:
                    92:1e:5b:3c:50:7c:43:5e:43:b8:6c:f0:f9:8a:75:
                    cf:7e:cb:45:07:d3:09:e5:38:96:df:ea:70:c7:b2:
                    df:bc:b2:6e:bd:8d:ef:c0:da:99:31:f5:03:e2:3e:
                    5c:a0:75:77:a8:6e:2a:85:51:07:02:cc:55:eb:c1:
                    79:b5:ee:5c:a8:ee:01:5f:7b:bb:d5:92:b3:4f:68:
                    99:98:a2:01:d9:56:64:3f:3d:51:64:55:1e:4c:3a:
                    2d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:61:11:6E:35:3A:58:4B:97:EF:57:0B:7F:C8:F9:B9:10:F0:FE:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08a5e222-b8df-3765-a0fd-4cd50f05e90a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:38:d8:c3:72:de:13:63:9c:0b:8d:21:3b:3c:4d:ce:a2:a3:
         9a:09:ea:e2:86:0b:46:aa:42:22:c5:cf:c2:71:31:ad:39:7a:
         d7:87:e4:6f:0e:7b:ef:fd:04:42:44:2e:95:84:89:40:9b:3a:
         30:a4:e0:5c:a4:c5:c6:5c:fb:bb:ea:70:a9:76:3a:b8:6a:6d:
         1e:ed:9a:0f:18:1d:18:eb:ae:78:2e:c3:f1:2c:d6:3d:18:b2:
         f9:db:58:8c:92:a9:a5:c8:8e:cd:e3:a8:00:11:f2:27:0c:0d:
         13:ee:a9:42:17:73:df:70:49:f1:92:af:d9:df:4b:65:bb:10:
         1c:9e:16:70:8f:f6:8c:a5:aa:f7:0d:71:0b:60:35:00:1f:36:
         b0:ee:13:e5:6d:cc:f2:46:2e:cd:14:c0:30:89:b9:7b:29:70:
         94:a4:fe:ae:99:ec:d2:32:18:1a:94:7b:36:b2:c2:ec:9a:d8:
         68:93:15:3e:f8:32:8d:7b:fe:5e:8d:ce:a5:0f:73:45:af:fa:
         be:af:89:58:b8:22:66:89:78:c5:e1:26:91:68:36:b6:c0:de:
         18:09:eb:f1:9b:2f:6d:6b:e1:ce:01:14:43:3f:06:7f:3e:a1:
         94:38:4a:3a:52:c6:91:e3:81:01:d7:cc:92:a1:22:00:5d:ce:
         d1:08:20:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhTYlnl5ROyTFuQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk
NDlhZWUxNDQtNDNmNi00OTgxLTgzYjItZTM2NWJjMzRjYTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNrjP4G4OfIJNwiIDv7mlJhzivIuO+1/4HzN
trLMlVV1Kmab8VPYK/DVmtbXDK35l8jb4Vr+nNHRsBbSjH+FwaTUYhGq/zCEDyaF
UVO6b6Du1k5wYdB3di2zo4vI1duMC6nymj9VYeAevRo+GCLlVx0DZRBu0MAgHLrO
6kXgYD2wNNiqEDnG0Lw3XLx1EOgj3/6Cy8pDXXDBWu/G953FNBReaOCSHls8UHxD
XkO4bPD5inXPfstFB9MJ5TiW3+pwx7LfvLJuvY3vwNqZMfUD4j5coHV3qG4qhVEH
AsxV68F5te5cqO4BX3u71ZKzT2iZmKIB2VZkPz1RZFUeTDotbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDVhEW41OlhLl+9XC3/I+bkQ8P6NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDhhNWUyMjItYjhkZi0z
NzY1LWEwZmQtNGNkNTBmMDVlOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGE42MNy3hNjnAuNITs8Tc6io5oJ6uKGC0aqQiLFz8JxMa05eteH5G8O
e+/9BEJELpWEiUCbOjCk4FykxcZc+7vqcKl2OrhqbR7tmg8YHRjrrnguw/Es1j0Y
svnbWIySqaXIjs3jqAAR8icMDRPuqUIXc99wSfGSr9nfS2W7EByeFnCP9oylqvcN
cQtgNQAfNrDuE+VtzPJGLs0UwDCJuXspcJSk/q6Z7NIyGBqUezaywuya2GiTFT74
Mo17/l6NzqUPc0Wv+r6viVi4ImaJeMXhJpFoNrbA3hgJ6/GbL21r4c4BFEM/Bn8+
oZQ4SjpSxpHjgQHXzJKhIgBdztEIILs=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:37:32 2025 by rpki-client