Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5623372a-3548-3754-9e88-5892f74eafaf.roa
File:                     5623372a-3548-3754-9e88-5892f74eafaf.roa (raw, json)
Hash identifier:          LewTblXhvw6VLS8B4mBOUEMdTWsxzpwSbA2FolFwzHQ=
Subject key identifier:   6A:83:0D:2F:B7:16:92:3E:8B:92:13:DA:87:61:35:65:3D:2A:05:42
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858490B4C15F65009F011333F8640
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5623372a-3548-3754-9e88-5892f74eafaf.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        172.69.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:15:f6:50:09:f0:11:33:3f:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=4837b7e4-c1db-42c6-bdb1-43cf551dd7b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d5:a8:c8:f9:70:19:38:38:c9:19:ea:9a:04:
                    58:44:96:38:78:34:f3:56:30:65:dc:df:48:c5:3f:
                    9d:8e:dc:c5:a2:6d:f1:88:9c:63:f3:80:7d:7a:ce:
                    0f:bc:3e:62:d8:d8:e2:b0:24:b1:d9:fd:63:db:56:
                    4f:dd:8d:d6:ec:f5:1f:34:b6:6e:6d:04:23:1c:a0:
                    45:cb:e4:13:8f:f8:95:bb:7b:24:2e:ed:f3:d9:08:
                    57:98:d1:76:40:2e:71:d0:fa:58:0c:a9:ec:5d:dc:
                    d5:cb:6d:aa:db:f9:43:b5:75:e4:23:a1:e1:33:5f:
                    39:c0:02:5d:8b:18:6e:9f:4b:63:e3:b4:95:c2:1f:
                    20:fb:23:39:2e:e5:91:90:9f:7b:47:77:8d:eb:14:
                    05:48:30:87:8e:79:cc:ba:cb:43:a8:3c:d4:99:e0:
                    73:04:c1:6b:6f:42:2a:49:d6:77:2d:d2:13:d5:4a:
                    c0:60:24:f7:f3:17:58:1e:d8:48:ec:9b:9d:f5:16:
                    79:3b:2d:5f:f2:ed:3d:03:04:0d:92:a4:55:43:65:
                    8d:c8:6c:d0:eb:f6:64:78:36:8c:c6:39:e7:26:b8:
                    1d:75:49:3b:b5:64:23:8d:27:c5:6e:a8:49:4f:84:
                    7c:82:f8:e7:83:bf:0f:ba:01:47:fb:18:97:9e:bd:
                    49:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:83:0D:2F:B7:16:92:3E:8B:92:13:DA:87:61:35:65:3D:2A:05:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5623372a-3548-3754-9e88-5892f74eafaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:82:ae:18:24:f5:45:35:f6:61:a1:9d:58:e0:6c:7e:ee:cb:
         c0:75:6a:4d:a5:be:f5:b9:11:f5:93:73:07:23:0e:0a:6b:99:
         0b:95:68:8b:f1:29:e6:72:89:75:44:0d:1a:32:a5:b1:f0:55:
         0e:b4:bd:3b:0f:70:78:51:b1:3a:78:4b:25:12:56:99:3d:f4:
         a4:9f:ee:4b:60:e3:f2:1f:0d:3a:d4:9b:87:fa:be:d1:7c:3f:
         fb:51:f8:ba:fb:1c:aa:3a:b5:ca:0d:78:70:75:ce:dd:fa:2c:
         aa:12:a0:4e:85:c7:91:ef:65:81:3d:76:e1:c1:10:0b:6c:43:
         27:b5:bb:00:84:03:d7:a8:c6:5a:89:a1:9d:a6:f8:c2:15:de:
         fa:e2:cc:8c:15:21:2f:c2:9b:e2:78:a5:bc:80:f8:78:24:4f:
         ab:da:9e:4a:72:09:2f:e6:1f:b4:28:26:63:6e:70:c2:fc:01:
         0a:e1:21:4a:cc:b3:76:5c:f8:45:45:a1:3a:ff:f3:d1:96:ca:
         7c:cf:57:fc:db:02:4e:0f:5d:99:f4:f5:16:82:81:a3:05:0e:
         99:76:33:31:31:7e:8e:f1:75:b3:46:35:93:d6:2f:27:19:f3:
         92:30:9e:e9:86:b2:1c:36:3e:8d:c7:d3:38:27:6e:18:a2:51:
         ea:ba:44:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTBX2UAnwETM/hkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
NDgzN2I3ZTQtYzFkYi00MmM2LWJkYjEtNDNjZjU1MWRkN2I2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29WoyPlwGTg4yRnqmgRYRJY4eDTzVjBl3N9I
xT+djtzFom3xiJxj84B9es4PvD5i2NjisCSx2f1j21ZP3Y3W7PUfNLZubQQjHKBF
y+QTj/iVu3skLu3z2QhXmNF2QC5x0PpYDKnsXdzVy22q2/lDtXXkI6HhM185wAJd
ixhun0tj47SVwh8g+yM5LuWRkJ97R3eN6xQFSDCHjnnMustDqDzUmeBzBMFrb0Iq
SdZ3LdIT1UrAYCT38xdYHthI7Jud9RZ5Oy1f8u09AwQNkqRVQ2WNyGzQ6/ZkeDaM
xjnnJrgddUk7tWQjjSfFbqhJT4R8gvjng78PugFH+xiXnr1J7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGqDDS+3FpI+i5IT2odhNWU9KgVCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTYyMzM3MmEtMzU0OC0z
NzU0LTllODgtNTg5MmY3NGVhZmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ6Crhgk9UU19mGhnVjgbH7uy8B1ak2lvvW5EfWTcwcjDgprmQuVaIvx
KeZyiXVEDRoypbHwVQ60vTsPcHhRsTp4SyUSVpk99KSf7ktg4/IfDTrUm4f6vtF8
P/tR+Lr7HKo6tcoNeHB1zt36LKoSoE6Fx5HvZYE9duHBEAtsQye1uwCEA9eoxlqJ
oZ2m+MIV3vrizIwVIS/Cm+J4pbyA+HgkT6vankpyCS/mH7QoJmNucML8AQrhIUrM
s3Zc+EVFoTr/89GWynzPV/zbAk4PXZn09RaCgaMFDpl2MzExfo7xdbNGNZPWLycZ
85IwnumGshw2Po3H0zgnbhiiUeq6RMU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:16:33 2025 by rpki-client