Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f179579-663e-3891-9e2c-531b67f9b20c.roa
File:                     1f179579-663e-3891-9e2c-531b67f9b20c.roa (raw, json)
Hash identifier:          slmHxmJHYteN9nTD9p5wnH8aRooJrEpZmNbyCsCmysA=
Subject key identifier:   13:29:F8:0E:63:4F:DD:CE:22:0E:BC:A9:3F:AB:D7:B1:80:96:75:9F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E91FAD4527DB7219C7AB6BC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f179579-663e-3891-9e2c-531b67f9b20c.roa
Signing time:             Tue 20 May 2025 01:00:49 +0000
ROA not before:           Tue 20 May 2025 01:00:49 +0000
ROA not after:            Mon 18 Aug 2025 01:00:49 +0000
asID:                     13335
IP address blocks:        172.68.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e9:1f:ad:45:27:db:72:19:c7:ab:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 20 01:00:49 2025 GMT
            Not After : Aug 18 01:00:49 2025 GMT
        Subject: CN=9ca167b0-f038-4f67-b1b0-1a1eab491d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7d:55:9e:59:bd:6d:a8:38:b3:36:f3:f4:55:
                    f3:ee:53:4e:37:89:75:1d:77:16:c3:9e:99:9e:c0:
                    7e:1e:59:e5:17:05:a9:33:b4:aa:66:cb:16:ef:45:
                    75:7f:4a:b4:04:db:55:fc:0e:d6:43:80:33:f2:f0:
                    e8:be:84:a7:2e:6b:d9:95:8d:5d:ba:bc:3f:61:d7:
                    bb:08:85:ac:87:54:09:a0:a9:3d:5d:37:55:6c:01:
                    87:4c:23:59:86:e5:74:7d:98:3a:b7:7c:34:2d:1b:
                    6b:8a:e1:81:9a:7a:9b:9a:c1:ac:2f:4f:16:ac:40:
                    05:22:d2:5f:7f:74:0b:1a:a2:b1:f8:e4:90:10:92:
                    48:b8:f1:97:7b:d6:2d:c0:fb:66:16:47:ee:b4:65:
                    5e:ef:cf:b2:31:10:1d:40:ca:53:45:e5:78:73:08:
                    3e:f8:65:45:31:b2:63:08:27:3f:d1:2f:a6:22:aa:
                    39:95:73:b1:0a:e9:5f:bb:86:57:5e:b6:66:d5:51:
                    ce:b0:97:ab:54:52:91:9e:f0:08:ff:9d:96:a4:a8:
                    68:f6:4c:47:f6:35:8e:48:89:1d:43:73:a4:5b:07:
                    b2:cd:b0:0d:4b:c2:84:53:d4:50:a7:f4:77:b9:b9:
                    98:06:09:a8:57:e9:e0:20:30:ee:75:0c:9e:9c:13:
                    aa:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:29:F8:0E:63:4F:DD:CE:22:0E:BC:A9:3F:AB:D7:B1:80:96:75:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f179579-663e-3891-9e2c-531b67f9b20c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:df:d9:90:bc:91:8a:a1:19:8a:a5:67:2c:14:42:27:a7:96:
         3b:42:51:44:4e:0b:b8:e1:6b:2b:35:8f:7e:51:56:fc:d9:88:
         05:87:04:e2:0c:50:fe:da:dd:58:52:ec:93:5d:d0:09:17:c5:
         08:7d:14:ed:61:5c:60:fc:77:48:f2:d8:f3:8d:6c:e4:33:44:
         d6:13:9e:55:2a:01:c3:e4:9b:48:dc:7d:db:a2:0e:e0:d7:3e:
         ae:04:5a:e7:a1:18:e0:5d:3a:8b:25:5f:85:b2:a6:6b:8f:e6:
         64:1a:72:4e:8c:33:9d:3c:d8:e4:4f:7a:eb:98:69:10:36:1b:
         97:3d:fb:00:e2:72:00:cd:d4:bb:f5:d5:90:da:a2:40:d0:ba:
         af:9a:fc:45:9a:71:d4:75:b7:8e:40:2a:30:ec:9e:d5:98:c8:
         72:7d:90:b1:d3:38:60:28:e5:e9:7e:a7:04:62:68:36:c3:99:
         59:01:37:0b:25:2f:1c:3f:ab:02:d4:f4:0d:7e:8e:f3:5c:21:
         72:38:dd:61:1b:8b:4a:00:3c:b7:f6:39:87:6c:7a:a2:4a:40:
         37:b7:3a:bb:b8:f7:3f:66:9e:6f:d2:d0:8a:a6:2f:bc:69:bd:
         05:43:0b:bf:ed:f9:10:d8:b0:c8:77:f6:c1:8e:cf:f5:e0:73:
         68:2b:14:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:53:58 2025 by rpki-client