Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/13b81e0c-b9fd-3c6d-8214-becdb3df2f47.roa
File:                     13b81e0c-b9fd-3c6d-8214-becdb3df2f47.roa (raw, json)
Hash identifier:          XUzloPKlBNYIS613HB/B1vZKmPr3/dnf7vLoDqTYJFo=
Subject key identifier:   B6:47:03:D3:A7:E8:EA:DD:96:CC:9C:40:B3:A1:09:E9:5C:72:BA:AF
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849071BFAE8EC2BFE7E2B611300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/13b81e0c-b9fd-3c6d-8214-becdb3df2f47.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        172.64.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:fa:e8:ec:2b:fe:7e:2b:61:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=dfec538c-0f96-441c-b7e9-57d7620ab468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:61:0f:54:03:05:6c:dd:c4:41:5d:c1:be:c6:
                    c5:03:47:2d:c7:28:20:a9:4f:d1:a7:b8:86:98:fa:
                    f8:e7:de:a8:49:6d:b3:c9:b5:1f:c1:89:e4:d6:8b:
                    fd:c3:c8:09:7b:5e:af:8f:03:55:cf:39:b0:33:9b:
                    35:b5:79:ba:be:f1:ad:90:ec:11:a4:f8:9d:ae:53:
                    f1:18:b3:02:c9:c9:65:12:7c:3c:df:f0:39:30:11:
                    d0:79:ec:8f:e4:1f:1b:ad:78:63:f0:b5:94:4e:57:
                    92:1e:26:54:db:19:98:d6:ee:f5:4f:26:c8:b9:73:
                    66:f7:2d:46:bc:ad:b7:ac:70:20:50:f5:a7:be:5a:
                    53:6e:89:b7:7a:05:1d:89:c1:d6:84:92:95:e5:ea:
                    65:2d:af:90:61:be:d4:95:d3:b8:0b:03:49:76:99:
                    18:0e:8d:56:df:aa:3c:0c:f8:88:b1:75:a3:81:6b:
                    98:90:b5:e3:fd:0b:17:29:2c:46:4a:11:e5:ef:09:
                    37:00:3c:95:e1:ea:e5:2e:4e:0e:b3:74:14:8e:ec:
                    12:16:b9:d7:93:21:71:38:aa:a1:94:9a:e0:91:df:
                    f8:50:05:c7:ba:6f:6a:52:da:e5:98:38:83:0f:1e:
                    c9:ec:c2:0a:17:fe:f1:df:51:a0:31:b5:b7:7a:bd:
                    fa:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:47:03:D3:A7:E8:EA:DD:96:CC:9C:40:B3:A1:09:E9:5C:72:BA:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/13b81e0c-b9fd-3c6d-8214-becdb3df2f47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:a0:00:48:52:23:ce:6d:f1:dc:ff:fe:ae:e0:8e:22:53:42:
         e0:16:a6:18:77:1d:13:a8:75:9a:ac:cf:22:de:91:ad:06:1f:
         57:b0:46:9c:d5:bc:6c:c5:bc:42:e3:d5:25:5c:75:fe:ec:8b:
         a7:02:78:cc:af:79:ef:29:9f:cb:12:8f:00:2f:97:df:a1:d6:
         3a:35:16:7e:ca:e7:c4:e2:52:30:ad:50:3f:27:2c:59:81:1a:
         47:1a:8b:e2:73:92:82:6d:65:ac:b6:e8:22:68:3a:44:ad:8d:
         34:31:8d:37:3b:1b:e3:26:24:b7:df:52:cf:29:a4:93:7a:3f:
         2e:11:69:76:6b:b4:ed:43:0c:19:19:51:6c:3d:54:37:db:73:
         44:e1:98:46:59:29:40:96:da:ad:32:52:2f:9d:2e:d8:16:09:
         e1:4e:e6:2f:08:60:fc:90:81:02:8b:a2:78:7b:67:df:1e:9a:
         48:73:ec:62:db:24:d5:6d:92:3c:42:6e:df:01:24:a2:99:2b:
         22:a8:ea:b4:13:2e:ae:ad:55:f7:7b:16:e1:41:26:7a:d3:1c:
         92:32:47:79:5e:04:9b:fb:d3:37:88:88:e3:3b:61:96:1d:ff:
         b4:7b:e7:4d:fa:ae:95:17:f9:c3:7a:d9:01:46:e1:44:06:30:
         96:c6:02:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:51:38 2025 by rpki-client