Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/548d9d6e-ded0-3991-92c7-df643887517c.roa
File:                     548d9d6e-ded0-3991-92c7-df643887517c.roa (raw, json)
Hash identifier:          p0K0Imz425/isniVYQCdK+l7cV2d3tMuIT4bPpVaqxA=
Subject key identifier:   A8:11:8E:01:32:5B:55:97:32:44:74:54:5F:14:CF:76:AA:E7:7D:AC
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858490B4C0DEFC0C0865BC33EFF00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/548d9d6e-ded0-3991-92c7-df643887517c.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        172.69.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:0d:ef:c0:c0:86:5b:c3:3e:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=a60b20a9-b87c-46d9-be59-560e65c222c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:66:a3:c8:2e:1c:97:ce:6e:93:da:d5:0c:da:
                    9a:b9:5c:d7:3b:41:db:44:0a:8a:8e:74:00:8d:38:
                    54:a1:e2:94:8c:64:ee:8c:34:00:ad:90:77:77:be:
                    d7:4d:8c:fe:d1:7a:7c:94:b8:3c:30:41:d2:29:d0:
                    ed:82:2c:8b:ed:22:36:3f:a5:25:e1:6a:e7:f4:3b:
                    fd:d1:2c:ab:f6:e2:6e:7b:8c:46:a7:76:5c:73:b7:
                    27:e3:41:46:a4:15:0b:3a:ca:45:b4:55:f9:fe:c9:
                    a9:35:1d:50:f7:99:04:3a:79:02:49:0a:e8:61:44:
                    70:19:87:0e:fb:6d:58:86:06:c6:01:79:8b:a5:f8:
                    53:5c:10:4e:fb:7a:78:c5:6f:92:45:fd:40:18:82:
                    a5:00:80:1b:9e:ce:7f:0b:e9:e9:ef:c3:1a:dd:0b:
                    22:e4:f7:65:3c:11:3a:52:fd:a1:d0:4a:a4:11:ab:
                    20:1c:2d:99:69:db:fb:0c:0c:88:d1:17:5c:0f:2f:
                    6e:0e:7c:74:8a:40:e6:4a:59:8d:b0:ea:14:a9:c7:
                    f5:c8:a4:74:3b:0e:af:7e:ba:65:c2:09:cb:f9:92:
                    58:31:e2:cd:29:1f:62:df:80:1e:49:c5:2d:70:c1:
                    cd:4b:b2:c1:3c:da:ae:d5:e8:59:47:4e:01:c3:16:
                    6a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:11:8E:01:32:5B:55:97:32:44:74:54:5F:14:CF:76:AA:E7:7D:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/548d9d6e-ded0-3991-92c7-df643887517c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:68:af:9f:da:be:a5:f9:15:e8:47:d0:f8:ea:e8:ee:f0:11:
         b2:56:d8:82:81:57:bb:63:41:ee:dd:5c:8d:f3:ba:b7:e2:48:
         1b:ba:b2:9c:55:93:c3:1f:e7:2e:e0:a9:23:70:59:3c:e4:2b:
         58:3e:95:f5:05:d1:78:a4:66:c8:90:45:d2:4a:6b:1b:25:8f:
         08:3b:81:7b:df:d4:03:61:ca:8b:71:b5:33:94:9c:c2:a4:05:
         31:33:da:16:e1:7f:a8:2a:4c:ca:77:f7:47:2c:18:e9:c0:39:
         22:ec:99:08:29:70:2c:f4:77:75:b4:06:b3:13:e9:9b:79:68:
         ec:1a:e3:fb:33:65:13:ff:28:45:70:a5:f7:e2:b7:5f:df:ba:
         9a:be:79:84:ed:0f:11:d1:9e:2a:48:98:71:e6:4e:8d:fc:ed:
         51:56:85:fc:54:7b:bc:68:34:99:a3:a3:d7:34:a1:d5:dd:4c:
         85:77:c3:ea:01:4d:78:5a:09:fc:c5:4c:2d:5b:8a:01:a5:96:
         2b:06:4c:dd:e7:9f:c4:c7:c7:29:e8:44:3a:24:cc:2f:8e:db:
         85:de:69:ac:c2:fc:38:6c:90:38:f2:a2:08:a1:c7:8a:e9:1e:
         c5:3b:62:28:75:87:52:fd:50:84:0b:02:12:f4:13:7d:c5:e4:
         26:33:59:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTA3vwMCGW8M+/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
YTYwYjIwYTktYjg3Yy00NmQ5LWJlNTktNTYwZTY1YzIyMmM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumajyC4cl85uk9rVDNqauVzXO0HbRAqKjnQA
jThUoeKUjGTujDQArZB3d77XTYz+0Xp8lLg8MEHSKdDtgiyL7SI2P6Ul4Wrn9Dv9
0Syr9uJue4xGp3Zcc7cn40FGpBULOspFtFX5/smpNR1Q95kEOnkCSQroYURwGYcO
+21YhgbGAXmLpfhTXBBO+3p4xW+SRf1AGIKlAIAbns5/C+np78Ma3Qsi5PdlPBE6
Uv2h0EqkEasgHC2Zadv7DAyI0RdcDy9uDnx0ikDmSlmNsOoUqcf1yKR0Ow6vfrpl
wgnL+ZJYMeLNKR9i34AeScUtcMHNS7LBPNqu1ehZR04BwxZqWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKgRjgEyW1WXMkR0VF8Uz3aq532sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTQ4ZDlkNmUtZGVkMC0z
OTkxLTkyYzctZGY2NDM4ODc1MTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEU1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGhor5/avqX5FehH0Pjq6O7wEbJW2IKBV7tjQe7dXI3zurfiSBu6spxV
k8Mf5y7gqSNwWTzkK1g+lfUF0XikZsiQRdJKaxsljwg7gXvf1ANhyotxtTOUnMKk
BTEz2hbhf6gqTMp390csGOnAOSLsmQgpcCz0d3W0BrMT6Zt5aOwa4/szZRP/KEVw
pffit1/fupq+eYTtDxHRnipImHHmTo387VFWhfxUe7xoNJmjo9c0odXdTIV3w+oB
TXhaCfzFTC1bigGllisGTN3nn8THxynoRDokzC+O24XeaazC/DhskDjyogihx4rp
HsU7Yih1h1L9UIQLAhL0E33F5CYzWQw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:38:57 2025 by rpki-client