Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/11b89bd0-db2d-35b1-82f1-0bc39d3ff2f6.roa
File:                     11b89bd0-db2d-35b1-82f1-0bc39d3ff2f6.roa (raw, json)
Hash identifier:          FxC2xc6a3XYF8MRQBfnb5tW14YgO2AHWQRdZgFNQFrI=
Subject key identifier:   B1:6B:FA:EF:16:A7:50:C0:B5:43:00:BA:BD:8D:BA:05:15:8E:28:94
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E7BA930A0942DBEF5C6BAE80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/11b89bd0-db2d-35b1-82f1-0bc39d3ff2f6.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        172.64.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:93:0a:09:42:db:ef:5c:6b:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=8e0446a2-c6ab-4cc0-8c7d-53b73868485e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ca:8a:92:46:67:05:9d:dc:94:1f:9a:61:c4:
                    8c:08:94:4f:2f:21:51:77:a0:c2:f0:89:70:58:07:
                    9b:27:fd:f7:f5:e5:6f:bc:95:5d:69:3f:ad:a8:2b:
                    4a:7f:20:8d:72:e2:65:35:41:7d:d7:f5:bd:3c:80:
                    c8:e9:80:16:a0:e5:3f:df:51:f0:94:95:01:bc:bd:
                    ff:01:6a:cb:dc:b6:8c:1d:e7:3d:ca:62:f9:79:a1:
                    5e:4d:2b:bb:5c:b2:9a:88:11:b7:99:ef:5a:58:be:
                    10:6f:cb:37:96:da:66:ce:08:e5:46:06:5d:f9:7a:
                    a9:21:db:e7:72:41:96:79:ce:2f:6e:0d:6f:6b:57:
                    0f:64:17:fc:d7:61:88:e4:34:4f:da:1f:4e:b1:56:
                    36:2c:7b:18:68:84:08:e9:41:7b:d6:43:4e:08:b2:
                    c8:8f:c4:b1:11:ba:d4:45:c2:ff:ea:fb:af:04:73:
                    ce:e3:2c:6c:a6:38:9d:bc:80:a0:da:a3:f8:42:78:
                    cb:05:d3:e9:2e:4e:bd:06:7c:6a:cc:52:5e:1a:cb:
                    51:20:7a:50:65:f2:6d:d6:86:a1:f2:c8:9b:bb:64:
                    ce:30:f4:95:42:be:ce:35:7e:f7:dd:a4:aa:37:34:
                    5d:fc:99:2d:69:70:74:b5:58:41:bb:0b:0f:5b:6f:
                    5f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6B:FA:EF:16:A7:50:C0:B5:43:00:BA:BD:8D:BA:05:15:8E:28:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/11b89bd0-db2d-35b1-82f1-0bc39d3ff2f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:6f:cf:3f:52:c8:d2:45:af:fe:09:2d:56:1e:84:c3:09:22:
         cb:92:05:86:22:69:44:ce:a3:a0:07:e1:b5:1c:d5:8d:52:27:
         4b:db:f8:3c:d2:38:13:71:ae:e3:33:be:c4:6e:12:86:20:96:
         73:78:34:ce:f1:1a:34:2e:e1:99:83:b0:79:ef:4d:9c:44:88:
         f8:27:c3:c5:99:25:e4:9c:2d:08:76:ff:86:ac:73:3e:28:bf:
         91:f2:fd:cd:2f:52:b5:b3:d3:73:96:c8:92:80:de:27:8d:6e:
         fa:52:d0:fa:11:c0:47:ec:b5:e7:f7:ba:34:19:03:f4:d6:21:
         a7:d4:80:96:b8:59:58:07:d7:06:1a:79:a2:72:50:63:e8:69:
         2d:aa:3e:ee:8d:71:90:e6:ea:da:12:01:b8:30:ff:a1:50:38:
         09:04:17:f1:74:62:18:d7:24:17:95:fe:e2:55:ef:e1:38:b2:
         3d:20:f4:48:b9:38:32:24:b4:b4:cd:d3:50:4b:cc:88:0d:66:
         f1:b1:dc:c2:35:6c:1e:31:39:11:0e:66:18:b3:07:72:6c:ef:
         09:d2:4f:08:b7:2d:72:b5:38:67:e4:2f:06:dc:e9:f3:4f:10:
         88:57:d1:7b:1d:88:ce:e9:62:7d:ae:da:4d:2b:08:d3:e2:87:
         25:7f:20:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:25:12 2025 by rpki-client