Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/459a32d8-5e54-3518-bb42-444bfb04dd37.roa
File:                     459a32d8-5e54-3518-bb42-444bfb04dd37.roa (raw, json)
Hash identifier:          VVm1nPgahuyP3bQn7CMB7yAGV0aR64426T2eq8Zd6W8=
Subject key identifier:   C3:EF:92:00:79:7B:CB:40:68:48:19:78:35:E7:97:DF:7F:7C:B6:9E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E7BA8F92105B47AA7CA03B00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/459a32d8-5e54-3518-bb42-444bfb04dd37.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        172.69.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:8f:92:10:5b:47:aa:7c:a0:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=7931817a-107a-4f46-8fbc-9d130ce6d5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c8:bf:f8:93:d6:28:53:c1:a8:c3:a4:00:c2:
                    78:58:17:7c:f0:26:70:26:80:4c:08:c1:8a:b8:53:
                    c2:58:a1:35:44:91:8f:b1:16:30:20:64:47:4a:12:
                    ef:c7:32:b3:18:fd:8a:f5:ee:98:40:85:10:65:08:
                    85:e0:04:d5:2a:d9:21:66:c5:81:33:a1:f0:48:45:
                    5d:4b:0a:89:b5:04:5f:91:de:75:72:41:83:68:28:
                    44:96:58:39:29:d4:05:94:e0:38:3d:ea:43:3b:64:
                    2a:3f:ef:c2:6c:34:b6:77:03:7a:a9:86:12:c6:03:
                    ee:90:d1:66:eb:a1:c7:cd:40:2c:54:37:3a:67:3c:
                    c6:51:05:3e:1f:85:ab:d7:44:20:d7:43:ac:e3:ff:
                    35:48:e5:2e:1d:9a:e7:17:1f:96:03:ec:7b:9b:f5:
                    b2:d8:5a:85:db:b7:9d:a9:17:81:4f:e2:ff:2b:a3:
                    89:c5:26:9e:bd:b5:c5:b1:bc:a8:69:6d:de:cf:b9:
                    75:60:94:fc:48:c0:e6:05:29:78:6e:b9:4b:49:c6:
                    f6:13:da:7d:1b:ef:24:60:ff:33:5a:8f:3f:d4:26:
                    85:fb:b0:68:4b:d1:a5:36:39:eb:b7:a5:24:a9:1e:
                    88:45:83:2b:f4:c7:b3:80:6e:55:74:00:b9:1d:e6:
                    98:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EF:92:00:79:7B:CB:40:68:48:19:78:35:E7:97:DF:7F:7C:B6:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/459a32d8-5e54-3518-bb42-444bfb04dd37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:aa:39:25:78:2d:3c:66:92:74:60:0d:d7:52:03:50:af:73:
         f5:32:00:b6:a7:e8:c4:49:41:96:00:82:92:1d:14:e5:cf:f9:
         b0:73:6f:6e:bd:09:ce:60:8e:c9:94:1d:60:c7:06:60:de:1d:
         d5:fa:16:19:57:e8:8c:cd:c7:8b:01:f6:4d:a6:7c:e3:a2:78:
         ae:c0:d2:35:58:ba:dc:45:8d:93:e6:d7:24:67:20:e6:3e:87:
         1e:f2:68:9a:7d:75:fa:d0:4b:9b:69:13:90:74:4c:37:34:1f:
         ea:e7:55:4b:14:74:9b:83:4e:dd:c9:0f:cb:a4:48:3c:dc:d5:
         a4:a7:b5:c9:1e:e2:40:7a:13:80:5e:79:c0:c1:b4:d0:61:02:
         20:59:5d:95:97:2f:50:2b:36:41:f5:13:d3:fd:62:03:a2:88:
         ba:79:1d:f2:a6:76:88:77:b2:31:29:71:30:06:ba:3b:ea:c1:
         0b:1e:5d:11:07:e4:07:6e:15:a5:49:5f:b5:8a:92:d0:ac:03:
         58:9e:1f:b7:de:01:7c:25:56:92:ca:ab:80:32:c8:49:b4:56:
         0b:0c:d8:2c:a7:31:c4:52:7a:d8:4d:15:d0:e1:fc:15:ae:c9:
         ad:b7:d8:23:74:f3:68:dc:bd:ec:42:4a:81:f1:0c:61:39:d5:
         f2:16:5a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:13:24 2025 by rpki-client