Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/53feb0e3-9afe-3373-9c7d-bdf2c1fad737.roa
File:                     53feb0e3-9afe-3373-9c7d-bdf2c1fad737.roa (raw, json)
Hash identifier:          E2zo1abeyVO3Ijn9VGjOtBZjWynwAlNWSWhn/Gmsjnw=
Subject key identifier:   82:2A:5F:B7:51:CE:45:3A:62:38:29:09:38:8D:E5:C0:9B:BE:F0:3F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858490B4C16271FA88961EA08B480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/53feb0e3-9afe-3373-9c7d-bdf2c1fad737.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        172.69.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:16:27:1f:a8:89:61:ea:08:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=5084c9bf-f1e4-4060-ab71-d7236f94dc9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f4:a6:78:f9:1e:c5:16:26:41:68:78:2e:76:
                    dd:fe:c8:ac:6e:0a:77:7e:51:7b:9f:90:ef:1d:fd:
                    e1:b8:a4:30:f2:37:d4:45:03:01:95:02:d1:f3:52:
                    35:ad:c1:56:66:07:b6:a3:df:b3:b8:ad:11:ad:49:
                    df:d6:12:be:db:81:a9:17:ed:1c:3d:ae:33:c0:7e:
                    76:62:19:d6:ce:ac:28:a1:20:10:e6:3f:6a:aa:24:
                    a4:8a:d7:64:45:d6:4d:09:f4:5b:0c:5f:70:02:91:
                    81:38:5a:fe:83:ac:47:fb:9c:69:03:fb:50:3f:f4:
                    58:9d:84:56:34:2a:63:86:57:7e:91:8c:3b:88:e5:
                    93:7f:17:5c:ec:cf:02:c0:38:5f:bb:ac:70:b2:c0:
                    39:c2:cd:5e:69:e4:9d:4a:05:71:44:bf:8c:e9:a7:
                    ce:2a:fb:9e:35:be:65:02:c7:10:08:fb:07:ae:7d:
                    26:bb:13:70:20:29:f0:af:a9:f9:1f:81:6f:17:d1:
                    c2:06:e2:f0:cc:bf:89:44:01:f1:39:c3:c7:5b:24:
                    0e:d6:ff:38:2f:3f:89:c7:e5:3f:c4:8c:d1:e4:74:
                    74:42:e7:45:61:d8:2d:23:e8:2f:59:09:55:08:ac:
                    5e:71:a9:31:6e:71:a1:8d:8f:c9:33:71:0c:ed:81:
                    3d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2A:5F:B7:51:CE:45:3A:62:38:29:09:38:8D:E5:C0:9B:BE:F0:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/53feb0e3-9afe-3373-9c7d-bdf2c1fad737.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:25:07:51:8b:40:fb:51:e3:99:7e:c2:f8:a2:91:b4:3e:04:
         05:ba:87:81:25:4f:8c:ea:cc:a7:07:1b:cd:3c:54:03:26:8d:
         ef:01:fe:a7:f8:97:4e:74:1f:25:52:b0:4f:1e:59:96:53:f5:
         77:3b:5f:30:fe:66:62:a2:65:4f:cf:9e:4a:d8:82:88:11:b7:
         7a:1a:34:b0:14:2b:c6:8d:a8:ad:c8:63:11:e3:b7:d7:1d:92:
         98:e9:b3:b8:80:6f:7b:f6:a9:9e:db:db:41:65:b5:af:b0:dc:
         5d:9b:24:3a:7a:88:5b:52:cb:9e:c9:b1:40:e8:76:0d:db:5c:
         ac:ad:de:65:dc:4a:22:17:b9:fd:df:ce:fa:58:24:28:bd:40:
         3c:a2:4d:bc:ed:8b:01:ac:a9:eb:4c:ab:6d:f4:78:dc:a4:4a:
         92:8a:e0:06:4f:65:4e:4d:c8:d3:2b:85:7c:5d:62:de:92:61:
         8f:7b:9c:31:b8:65:58:2f:39:b6:67:ea:7f:b6:17:6d:9a:af:
         3a:57:1c:83:95:73:e5:aa:53:8e:2f:4c:c1:87:dc:f8:d3:87:
         a5:94:ff:00:59:e2:8a:be:ff:86:89:c0:02:bf:f7:f7:24:2f:
         ac:c0:26:70:11:47:e9:b8:e2:d7:a4:b7:c7:f9:e4:19:4d:41:
         97:56:f7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:11:02 2025 by rpki-client