Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c40e1b1-34de-3761-ab73-fcdd775485c7.roa
File:                     1c40e1b1-34de-3761-ab73-fcdd775485c7.roa (raw, json)
Hash identifier:          p+yK3egM38PquxbDarnwYWsFEK8JADbEntvaKQY2Zbk=
Subject key identifier:   95:13:9C:30:61:CE:CA:FD:60:00:3C:50:15:9B:B1:4E:5E:BA:0C:1B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E6550C8090C6E8E1E91CCBC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c40e1b1-34de-3761-ab73-fcdd775485c7.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     13335
IP address blocks:        172.69.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:55:0c:80:90:c6:e8:e1:e9:1c:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=76c5e66a-9333-4ffb-a7e5-fd6526af0982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:85:23:ed:30:e0:b0:42:57:ae:db:05:f5:27:
                    28:91:1d:17:4c:9b:98:5f:ea:60:84:47:e9:28:88:
                    0a:45:61:6c:8b:64:c0:3e:a4:6e:11:14:c8:4e:ba:
                    3f:c5:e0:9e:b1:59:9a:ed:93:2d:d0:b4:b9:66:78:
                    fb:cc:74:75:5b:94:fd:36:2e:b0:64:f6:33:39:65:
                    e4:c8:58:dd:4c:64:c0:02:97:ad:7a:f5:81:2d:f1:
                    0b:73:d9:f6:50:ab:7b:13:44:8d:db:3e:33:70:e1:
                    a4:fd:aa:1b:42:c3:b5:b4:ba:84:87:b3:6b:42:33:
                    5e:7c:02:2d:48:66:21:ac:54:20:2d:ba:ea:2b:43:
                    b7:9b:b0:bb:ee:2e:60:2d:4c:5f:d7:af:ed:67:bb:
                    e9:1b:d1:4e:d4:d5:a7:a0:20:d9:5d:c2:c1:29:c6:
                    03:18:32:f2:e7:92:51:29:64:18:86:57:3d:5c:ff:
                    a6:ea:64:a8:f5:30:87:1d:0f:c7:1a:e6:75:1d:48:
                    95:cc:e8:22:58:f8:66:d0:94:cc:52:1c:c6:76:53:
                    85:8b:36:e4:d7:6b:70:0d:ca:4c:e4:6b:0d:95:14:
                    4a:33:8d:a6:3f:e8:97:71:e6:3c:8f:ba:cb:02:c0:
                    75:90:b3:2a:0f:d0:64:5b:b4:5b:87:63:68:2d:42:
                    44:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:13:9C:30:61:CE:CA:FD:60:00:3C:50:15:9B:B1:4E:5E:BA:0C:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c40e1b1-34de-3761-ab73-fcdd775485c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:86:9d:64:ae:f4:72:27:ca:19:0d:c8:fc:20:42:b7:f5:24:
         ff:aa:b4:3b:50:a6:e6:56:36:08:ef:df:df:9a:28:0d:06:6f:
         01:4a:13:27:f6:6f:bb:01:48:a7:57:80:fe:4b:be:6f:36:18:
         a2:55:38:ea:c5:d4:3e:7c:b7:1e:95:38:97:9b:b0:3d:57:ec:
         1d:6b:ed:91:06:11:7f:ba:c3:13:7c:13:17:06:fb:75:0f:3c:
         d9:c3:54:36:68:d9:27:95:1a:08:f4:62:05:39:dd:55:16:6e:
         05:fd:7a:4b:51:8e:56:be:a6:22:62:38:2b:af:86:da:78:9f:
         ca:97:b7:bf:3c:9e:a7:17:80:18:28:ec:b7:fa:16:cb:65:f3:
         ca:84:0f:33:ea:59:01:7f:68:ca:9e:65:c7:97:f2:b5:20:12:
         27:88:29:3b:c2:98:53:58:b1:aa:59:fb:a7:a4:27:7e:37:0d:
         3e:1e:26:ba:b3:43:b6:09:0a:fe:4b:19:2e:69:30:b8:e2:60:
         b0:b0:42:87:0b:48:fe:7a:96:f7:93:a8:b3:30:30:00:9a:1c:
         d1:20:c5:bf:d2:f2:32:1d:e5:c6:b1:9c:81:e9:f8:76:e1:75:
         e1:a8:c2:e5:b3:c4:10:07:3d:5e:b4:ad:ab:c1:01:ce:32:98:
         73:5a:e1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:16:58 2025 by rpki-client