Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4e7eaf9c-cd28-3272-b6db-c1d029b6a90b.roa
File:                     4e7eaf9c-cd28-3272-b6db-c1d029b6a90b.roa (raw, json)
Hash identifier:          ovx6GIfvCT57D5VhmjV4ugVIgDWeHEohNFEJiCWGmoY=
Subject key identifier:   0E:0F:AF:45:2F:0F:97:A0:C8:04:D8:6B:3F:53:EC:88:F2:0B:1A:D9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849CFFF856B6EED91E271037FC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4e7eaf9c-cd28-3272-b6db-c1d029b6a90b.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     13335
IP address blocks:        172.69.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:85:6b:6e:ed:91:e2:71:03:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=a56f1a39-069d-42b6-bbf3-94d253becd6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:f6:3d:44:c1:db:f7:18:c4:3c:6e:72:f9:
                    aa:ca:69:89:5a:1b:6a:1e:69:42:f5:58:c8:12:69:
                    d4:3c:ef:c7:f3:c4:9e:02:5f:56:18:55:0d:4e:6b:
                    55:db:97:1c:05:49:ee:23:7a:18:3f:6f:04:14:fb:
                    4d:b3:13:db:cd:ef:83:a1:29:3b:2e:f7:b0:d8:47:
                    75:10:ed:94:9a:86:ba:2f:e0:d4:b7:61:d2:64:90:
                    67:36:9d:29:17:32:90:3d:41:a3:8d:b6:ca:d7:35:
                    97:2b:e1:c7:c9:04:ae:15:d1:fe:b8:7d:6d:de:7d:
                    e0:75:09:d1:c8:c0:54:5e:f0:1c:83:df:db:d6:04:
                    1f:69:71:88:2b:d8:a3:56:e1:cd:b1:7f:b9:d6:cb:
                    a9:d2:c2:9a:30:b7:67:0b:3d:2b:78:c4:2b:8a:f2:
                    62:29:b8:4a:77:e8:0d:14:2c:59:18:ff:59:b6:8a:
                    31:c5:32:09:c9:6c:f0:69:5d:9e:c9:52:09:6f:d4:
                    92:4b:20:c5:eb:c2:24:6a:3b:f1:1e:2d:9c:61:ca:
                    e5:2c:8a:4f:9c:96:cb:f0:34:01:b3:ef:14:d6:36:
                    81:af:8d:36:f9:fa:c2:e2:f6:b4:a7:ac:88:e3:b8:
                    82:26:9e:d1:e4:16:e1:50:d2:f3:fa:56:75:60:ee:
                    44:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0F:AF:45:2F:0F:97:A0:C8:04:D8:6B:3F:53:EC:88:F2:0B:1A:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4e7eaf9c-cd28-3272-b6db-c1d029b6a90b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:0a:b6:0a:f6:d7:7a:c6:da:36:fc:21:76:7f:93:97:46:af:
         ec:fb:75:d1:ac:87:06:51:d4:8a:27:3a:cb:aa:26:f4:78:cf:
         0e:0a:f3:0a:90:35:14:d4:96:ef:55:4c:02:52:02:9d:8b:dd:
         58:d4:b9:84:f0:6b:3e:e7:b1:ff:d3:86:c4:c9:53:17:7e:d3:
         60:bd:56:76:92:79:36:ec:a3:74:ed:4d:7b:94:6c:13:bc:85:
         07:07:91:55:9f:25:93:c3:b9:c3:08:dc:5e:60:65:ba:98:ee:
         9b:61:64:19:70:61:14:14:28:50:6e:fd:f3:fb:2d:06:ff:49:
         94:eb:cb:27:95:98:87:4e:8e:22:1a:eb:59:fc:61:3e:94:73:
         c9:f8:4e:73:a6:4b:54:92:d0:75:76:9b:8a:f0:f1:01:0e:f3:
         19:a6:28:fd:f1:da:cc:6a:5e:a5:05:44:c5:69:5e:07:f4:50:
         28:e3:9d:85:f3:e3:bd:f7:4c:15:10:f6:7b:a5:86:21:35:a2:
         3b:37:53:55:1c:3a:1f:af:32:72:d8:e0:b5:cf:0f:d6:f9:f9:
         bf:db:6e:07:b6:79:be:0a:9e:ba:b3:50:6b:8b:9e:00:11:bf:
         d7:37:d0:b0:bf:14:60:cb:5e:49:12:84:cf:67:c3:71:88:59:
         78:09:70:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:21:01 2025 by rpki-client