Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/26c00a04-c5b3-3b15-a170-c42966c7909e.roa
File:                     26c00a04-c5b3-3b15-a170-c42966c7909e.roa (raw, json)
Hash identifier:          RRzbogaiEwy4Ro2xRFXBF1i/hKG44+G6l7/ptlUiDDc=
Subject key identifier:   9C:03:87:EC:4E:46:3D:78:C0:71:DB:9D:29:CB:09:4E:6A:DC:DC:56
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E7BA9ED9DFDC07BE84CA4A80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/26c00a04-c5b3-3b15-a170-c42966c7909e.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        172.66.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:9e:d9:df:dc:07:be:84:ca:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=ae045d74-2e80-486d-a75c-bdc10af8c513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:30:5f:1b:b5:b4:10:40:dc:45:0e:e0:ca:57:
                    1b:51:54:ec:b8:7b:18:65:a5:68:32:d3:de:de:21:
                    0c:97:26:a6:2b:13:c5:cd:f1:82:5f:02:36:59:5d:
                    ad:fa:ba:ae:32:ba:ab:ad:09:55:fb:d6:50:cd:db:
                    a5:c6:92:d2:fb:a5:20:84:20:61:e8:4b:0e:95:8d:
                    fa:fe:c0:9b:69:d4:04:6f:a0:91:2c:b4:d7:5a:4d:
                    3e:a4:41:8d:b7:2c:fb:e1:09:b5:73:33:04:7a:52:
                    16:2a:1d:7e:57:3d:cb:1c:3b:75:72:b1:96:78:6c:
                    c3:95:e4:f7:21:fe:23:aa:90:82:56:6b:dd:24:f5:
                    3d:73:ab:1d:9b:b5:5c:e8:77:07:38:b3:4a:4c:d9:
                    44:fc:f7:43:30:a3:c3:d7:ca:45:5b:a0:89:c5:f6:
                    45:d2:20:59:5d:9e:44:56:60:33:8c:82:30:4c:77:
                    06:05:62:aa:14:b8:28:94:92:42:2f:9f:04:cd:a2:
                    ca:d3:52:bd:71:db:bc:fd:25:fd:ad:c8:c8:dc:85:
                    76:31:7a:b0:14:fc:00:a6:cf:fe:54:32:a1:15:09:
                    5a:00:c6:16:bf:5f:ab:3a:4b:ab:74:a1:73:27:45:
                    79:0d:18:43:d0:a6:cc:4f:1f:d9:02:3c:a8:5f:9c:
                    c7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:03:87:EC:4E:46:3D:78:C0:71:DB:9D:29:CB:09:4E:6A:DC:DC:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/26c00a04-c5b3-3b15-a170-c42966c7909e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.66.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:2d:66:d5:37:0d:4c:e7:f8:e9:dc:c2:d8:99:f1:74:b6:06:
         dc:c8:43:96:ea:08:d2:bd:f4:1d:09:16:0d:1b:91:63:aa:e0:
         c8:a5:b9:06:75:89:e6:af:b4:68:90:58:31:2c:c0:40:36:20:
         19:ca:df:55:04:de:6d:c5:8e:bc:a2:89:90:53:d6:f3:0e:8b:
         b1:52:9a:a0:f5:f6:cc:85:b2:d1:c9:fc:a4:12:64:38:28:6b:
         f8:fa:dd:56:73:07:4f:cd:e1:99:a6:f6:a4:e0:dd:1e:f4:67:
         22:ab:8e:77:1a:42:66:e5:41:66:d8:1a:ff:97:ed:44:4e:03:
         a1:b6:e2:fa:db:a7:9f:4e:92:6f:fa:c4:53:2a:52:75:9f:24:
         9a:1d:67:b6:1e:2e:9e:50:4f:eb:38:4a:a6:8b:bc:aa:b3:c6:
         60:2e:78:c0:1e:d4:11:57:0a:a6:2f:d5:e5:26:61:2b:6e:72:
         a1:10:f4:10:5a:72:f2:b5:2c:9e:11:e3:a0:20:6e:98:3a:0e:
         41:74:17:32:10:a9:0e:36:c5:1e:19:87:1d:fa:97:9b:15:9b:
         9f:dc:86:5f:9e:1a:b1:64:23:da:03:b1:1e:82:ea:67:71:eb:
         1c:d7:27:d9:07:da:a9:de:a7:32:36:95:c3:32:94:cd:61:4e:
         62:71:49:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:30:34 2025 by rpki-client