Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/262c4e39-0ba4-3591-828f-eeaac7cdc897.roa
File:                     262c4e39-0ba4-3591-828f-eeaac7cdc897.roa (raw, json)
Hash identifier:          l/XYT3LlKKcxT/C+sel1D/5Gy2N5OCijifJ5fUsKOFo=
Subject key identifier:   55:55:7F:86:35:87:97:56:2A:E5:F7:7F:88:90:3F:24:BB:E9:DF:58
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849EA8534DD16A8BF3D44A72540
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/262c4e39-0ba4-3591-828f-eeaac7cdc897.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.69.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:34:dd:16:a8:bf:3d:44:a7:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=4e90f39f-0f22-4d93-8e31-d874f7c9fc28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:55:99:9f:b3:4a:3d:f5:68:71:08:ce:4b:
                    2e:a5:97:cd:95:8b:61:41:71:2b:42:4a:6a:7c:26:
                    a1:f7:c1:0e:0a:cb:b9:e2:a9:d7:87:f0:f1:1e:92:
                    bf:87:71:ad:4c:76:e2:fc:3f:c3:ac:cf:39:4c:f3:
                    1c:fb:a7:f4:5c:bf:5f:ea:40:23:9c:98:f3:8f:ea:
                    50:3a:4c:cc:11:a3:c9:33:9e:01:e6:94:b1:bd:65:
                    fb:3d:2e:77:da:58:7b:5d:0d:a5:ec:5a:85:cd:2a:
                    59:9e:8b:31:88:d7:84:21:eb:7b:37:07:bc:45:be:
                    84:38:4a:80:72:67:b9:0c:f7:3b:0e:eb:29:2e:30:
                    50:09:dd:f7:d8:07:db:d1:ad:55:0a:7c:4e:a0:0c:
                    27:aa:ec:0a:b4:9e:64:24:57:39:c1:ac:29:1a:51:
                    0f:d9:3b:de:e3:e4:ab:91:85:04:2b:d8:91:da:a7:
                    cc:cc:c3:54:2a:74:f3:d1:d0:d7:ff:5b:06:43:8f:
                    89:3e:af:f0:88:d4:c8:3e:26:37:4e:8e:31:2d:f2:
                    6f:b3:3e:4f:d6:b4:17:3e:fe:d7:e6:4c:d8:2d:aa:
                    c1:40:38:63:a1:9f:f1:cb:ec:6e:1a:fe:8d:c1:77:
                    9e:f0:bb:6a:26:72:22:ef:f2:2b:ac:15:1c:a2:80:
                    88:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:55:7F:86:35:87:97:56:2A:E5:F7:7F:88:90:3F:24:BB:E9:DF:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/262c4e39-0ba4-3591-828f-eeaac7cdc897.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:d8:4c:3a:18:4c:58:89:27:0e:6f:eb:d6:bd:e2:92:1b:a5:
         b7:0a:d2:b8:37:f0:74:88:73:22:85:03:64:c1:c0:6a:4f:9a:
         51:65:8a:6e:74:11:6a:70:88:f5:83:be:1d:28:d3:0b:e4:9b:
         6e:14:69:02:0d:13:c0:61:87:fa:b4:77:9b:14:5c:78:ae:48:
         2f:2a:87:f6:5b:91:fe:53:4c:ef:d5:9b:15:d5:f1:c9:61:40:
         01:80:a0:74:7e:8d:41:22:36:84:9d:ba:31:18:ff:20:5a:1a:
         d9:60:61:b5:f1:c3:0b:f6:03:ba:7f:f1:8f:18:a3:4b:41:1c:
         23:a0:a2:36:24:b8:8c:ed:f1:1f:6b:7f:67:37:bb:8a:b9:6d:
         2c:70:44:94:09:4a:3d:b5:4b:a7:bb:8d:b6:71:8c:51:33:f5:
         93:77:2d:2e:64:99:49:90:98:d9:1c:6e:da:91:fc:19:58:48:
         1a:a2:0c:53:9a:58:4c:0c:78:40:28:83:ed:00:39:51:0a:10:
         5b:92:6b:11:3f:fd:c2:45:6f:76:47:44:4f:30:fb:e8:cc:cb:
         42:ec:f9:a8:d4:6d:0c:8f:62:9d:f7:5f:c4:c3:d9:6d:ff:d5:
         f0:de:c0:05:92:4e:41:41:74:96:4d:21:5c:fd:ce:a3:08:d2:
         47:ce:5b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:41:41 2025 by rpki-client