Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/486cdc27-fa6c-3a69-8ca5-9921152dd75d.roa
File:                     486cdc27-fa6c-3a69-8ca5-9921152dd75d.roa (raw, json)
Hash identifier:          ky2zS60qWbxfbysU7f58QYi6zldwrqJ/6tfjDJfelhc=
Subject key identifier:   22:F6:30:40:93:06:90:1D:4E:D7:D4:58:E3:92:95:FD:5A:3F:DE:04
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E7BA9509BC059DD20DD710A8
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/486cdc27-fa6c-3a69-8ca5-9921152dd75d.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        172.68.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:95:09:bc:05:9d:d2:0d:d7:10:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=e9349181-7dbc-45b9-96ae-cd89163529b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7c:63:4a:68:1b:05:bf:19:49:a3:b2:be:66:
                    4e:95:48:17:09:c7:80:36:c3:4f:85:8d:f5:ae:37:
                    40:63:54:7f:d4:f2:41:50:b3:7b:50:82:77:49:cd:
                    49:c7:63:0a:0a:7b:1c:e2:b8:c9:02:ea:69:e2:31:
                    d3:51:dc:f2:99:71:93:43:cb:8a:f3:56:7f:5c:29:
                    8e:37:02:ac:35:4d:41:f6:5e:03:bb:16:65:a8:52:
                    cb:2f:64:d0:8c:65:1e:fe:99:c8:a7:93:eb:eb:38:
                    2a:3e:29:21:10:4c:fc:b2:d5:7f:33:dd:1d:0e:e3:
                    91:43:eb:05:bd:05:19:a4:9b:8b:59:ab:31:f0:89:
                    14:ce:5a:3d:78:6f:30:0e:c9:46:30:29:6c:7c:73:
                    79:3e:48:f2:63:f7:03:2c:d2:0b:19:88:ff:d1:de:
                    76:5e:df:c9:7b:bc:a6:03:8a:89:e2:7a:05:7f:8f:
                    0c:6f:6b:ac:58:17:4a:5d:f2:fd:4b:29:1e:a5:bf:
                    0b:6c:18:70:1d:45:3a:d5:44:19:e8:42:e7:6f:c7:
                    8b:d3:46:fd:43:9e:9d:ef:8b:b5:27:6c:ca:b5:f2:
                    a4:b5:9c:11:f4:eb:38:9b:6d:42:d1:d1:09:8b:b0:
                    0d:f3:fc:87:37:14:5c:23:0a:a5:d8:a9:8e:09:0d:
                    6e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F6:30:40:93:06:90:1D:4E:D7:D4:58:E3:92:95:FD:5A:3F:DE:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/486cdc27-fa6c-3a69-8ca5-9921152dd75d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:70:ad:0c:f6:50:67:29:50:e4:09:09:ce:e5:02:e4:9a:f9:
         54:69:c6:71:0a:e8:87:72:9a:f6:ca:76:46:0b:c7:3d:92:d6:
         f0:a3:a7:18:f2:c0:5b:1e:2f:3c:88:bf:2a:af:9a:4e:c3:bf:
         b5:a3:ee:3a:6f:59:a1:22:cf:c6:4b:9b:2a:06:66:4b:87:1f:
         45:dd:69:4a:26:25:96:56:c1:1e:81:8c:6c:fd:21:cf:8a:8a:
         d8:8e:d9:64:83:93:26:82:62:4c:2f:c9:8e:f6:19:0d:59:46:
         5c:f5:a3:e9:a8:de:d0:b6:ed:a4:81:09:51:94:68:72:18:ef:
         71:bf:9f:b0:ed:a1:f5:03:44:df:a8:e4:64:18:02:e6:c6:9f:
         c2:b8:db:c1:0d:f3:3a:c1:aa:06:9b:22:b3:76:5e:87:97:32:
         54:c8:14:08:b2:d9:28:67:b8:56:35:71:56:4f:52:1a:af:c1:
         dd:16:54:d1:dc:83:a1:54:fc:da:7a:26:a1:9a:1e:c2:5f:7a:
         b5:22:78:67:ab:8b:4d:18:4f:2b:f6:99:89:1d:c2:15:e4:d8:
         56:1f:38:01:8f:5c:62:06:18:34:59:45:4e:3b:b9:f0:de:71:
         d0:59:42:f0:ca:68:5a:56:bd:a7:42:b6:ab:27:53:5b:4a:5f:
         c5:88:84:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:29:39 2025 by rpki-client