Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2af978aa-bda8-37a1-862a-d533e2940e37.roa
File:                     2af978aa-bda8-37a1-862a-d533e2940e37.roa (raw, json)
Hash identifier:          m313VGl+P8BJVB6DSR6mPa0VR1Kx41fhFyGTFRuL4LE=
Subject key identifier:   A8:74:43:E7:72:2F:3F:3B:C3:37:DA:75:EB:D6:06:F3:D9:30:42:D5
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858485F9ADA754144F3E92C461400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2af978aa-bda8-37a1-862a-d533e2940e37.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        172.69.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:da:75:41:44:f3:e9:2c:46:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=83e1d8b5-617a-4a9a-b611-dd113bce088f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f4:9f:c3:93:bb:9f:e0:e1:7c:e3:69:39:3b:
                    1c:2b:7e:ef:0e:b7:d9:f5:76:4e:c4:cd:b3:ac:f9:
                    d7:33:b1:14:58:f5:e3:6b:49:de:73:03:b3:37:94:
                    ec:0e:5b:de:28:c2:4a:97:fe:26:81:78:ea:13:a3:
                    18:6e:7b:3d:6f:fa:ea:84:88:18:d7:09:53:54:45:
                    e2:03:63:64:49:08:52:52:44:54:7b:d7:92:f1:68:
                    0c:ab:90:51:7a:47:89:46:a5:04:aa:d7:be:f2:12:
                    4d:7d:a0:e0:9d:13:de:a5:94:a1:dd:b4:af:fc:94:
                    60:2f:1a:be:96:44:74:f1:6b:d3:0a:d5:53:c1:c2:
                    92:ac:50:d1:c5:01:a9:f4:af:0c:4d:dc:67:46:73:
                    f2:9c:c3:c8:52:0f:42:0c:9b:02:d7:22:5d:09:a6:
                    c3:4b:e9:4c:8d:82:48:38:ea:19:be:1e:d7:e2:4c:
                    03:d0:e2:e6:63:6f:c6:73:9a:52:00:aa:5b:a0:fa:
                    15:f8:3b:8e:db:50:a0:ab:b9:87:62:b6:76:6c:f5:
                    5c:a1:68:42:4e:0a:59:32:57:13:74:0b:4f:d6:aa:
                    e3:08:fe:30:71:80:ee:ad:4d:88:9c:de:57:76:6f:
                    08:2d:7f:99:cb:6f:d0:0f:0a:0d:19:46:02:44:65:
                    7a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:74:43:E7:72:2F:3F:3B:C3:37:DA:75:EB:D6:06:F3:D9:30:42:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2af978aa-bda8-37a1-862a-d533e2940e37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:80:95:a9:f6:54:95:17:25:57:04:14:0a:89:04:5e:e6:6c:
         17:8a:a8:30:88:e6:0f:8d:12:60:7e:eb:58:57:82:88:3d:be:
         15:7c:68:37:70:ea:ee:89:13:74:3f:26:ba:d4:d1:b5:b6:f2:
         f4:f6:bd:da:2e:31:46:bd:8d:7b:8e:aa:24:16:00:47:f4:9d:
         a4:d8:c5:05:db:d6:68:90:14:55:07:67:36:cd:3d:29:b7:77:
         6e:55:ac:d4:1f:ba:68:dc:2b:84:c3:4f:a3:0f:18:8a:ac:2c:
         3e:5c:a0:f5:83:3b:c9:25:84:a0:2e:5a:41:b3:76:f4:ef:63:
         5f:04:b7:fa:86:65:2b:bb:b9:8f:64:36:87:e4:b9:a9:69:23:
         ef:2c:5f:f5:2d:a0:24:df:49:38:99:ca:f5:a8:80:ab:92:c6:
         b6:fe:90:a9:8a:dc:52:5f:c5:8c:76:4c:b1:e0:af:bf:6a:f3:
         90:1a:3a:c7:b3:c9:af:36:70:be:3f:8b:a4:c7:be:42:ee:f1:
         3a:05:d7:80:fc:8d:94:69:9d:6a:60:ca:ea:57:e9:b6:08:2e:
         b0:4d:0c:a5:79:6e:c6:d8:5a:0c:a4:4b:b6:24:d7:a2:93:ec:
         a9:33:94:9c:94:d3:7e:d4:84:47:2c:14:58:d6:89:10:ef:20:
         35:9f:75:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhfmtp1QUTz6SxGFAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk
ODNlMWQ4YjUtNjE3YS00YTlhLWI2MTEtZGQxMTNiY2UwODhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/Sfw5O7n+DhfONpOTscK37vDrfZ9XZOxM2z
rPnXM7EUWPXja0necwOzN5TsDlveKMJKl/4mgXjqE6MYbns9b/rqhIgY1wlTVEXi
A2NkSQhSUkRUe9eS8WgMq5BRekeJRqUEqte+8hJNfaDgnRPepZSh3bSv/JRgLxq+
lkR08WvTCtVTwcKSrFDRxQGp9K8MTdxnRnPynMPIUg9CDJsC1yJdCabDS+lMjYJI
OOoZvh7X4kwD0OLmY2/Gc5pSAKpboPoV+DuO21Cgq7mHYrZ2bPVcoWhCTgpZMlcT
dAtP1qrjCP4wcYDurU2InN5Xdm8ILX+Zy2/QDwoNGUYCRGV6mQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKh0Q+dyLz87wzfadevWBvPZMELVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmFmOTc4YWEtYmRhOC0z
N2ExLTg2MmEtZDUzM2UyOTQwZTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEX/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALuAlan2VJUXJVcEFAqJBF7mbBeKqDCI5g+NEmB+61hXgog9vhV8aDdw
6u6JE3Q/JrrU0bW28vT2vdouMUa9jXuOqiQWAEf0naTYxQXb1miQFFUHZzbNPSm3
d25VrNQfumjcK4TDT6MPGIqsLD5coPWDO8klhKAuWkGzdvTvY18Et/qGZSu7uY9k
NofkualpI+8sX/UtoCTfSTiZyvWogKuSxrb+kKmK3FJfxYx2TLHgr79q85AaOsez
ya82cL4/i6THvkLu8ToF14D8jZRpnWpgyupX6bYILrBNDKV5bsbYWgykS7Yk16KT
7KkzlJyU037UhEcsFFjWiRDvIDWfdf4=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:10:36 2025 by rpki-client