Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/580f6b1d-f2bf-3411-9adf-ae9496693e8b.roa
File:                     580f6b1d-f2bf-3411-9adf-ae9496693e8b.roa (raw, json)
Hash identifier:          F4P+v/k+PkomZets1toum9NfhDJu0s8B/m2EgcihjqI=
Subject key identifier:   35:3E:68:AE:C7:E9:E8:A8:51:76:18:02:37:C9:38:9C:79:47:89:0F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E4EFC95C0693D168EF41FAA0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/580f6b1d-f2bf-3411-9adf-ae9496693e8b.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     13335
IP address blocks:        172.64.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:c9:5c:06:93:d1:68:ef:41:fa:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=9840ea2f-6bff-4403-962c-dc318633e7ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:06:62:32:3b:f9:cf:68:3d:50:5e:4d:32:46:
                    cc:87:8b:01:76:50:f8:01:22:0f:50:f7:60:a1:b9:
                    34:f3:3d:3b:3e:48:d9:7c:38:22:93:bb:db:df:b2:
                    36:75:70:6a:2b:79:ef:a5:0a:30:c7:43:af:d3:c0:
                    00:03:c7:8b:27:4c:25:2f:f9:32:d9:11:3d:76:4d:
                    09:41:0c:3b:61:ed:f0:e7:5a:9a:7d:4a:04:1e:ab:
                    d4:90:f0:1c:31:1a:d6:6e:2d:4c:3e:91:f1:10:8f:
                    12:2e:71:8c:b1:6a:24:0d:bd:d8:1a:75:27:82:3d:
                    53:4b:d4:2d:33:f9:4d:a4:66:58:97:61:bc:3a:b9:
                    9a:db:c8:a8:5e:7d:04:fb:49:ba:4f:c8:38:0a:7d:
                    ea:f8:04:fb:d5:1b:e0:00:9b:2b:0e:37:c9:2d:84:
                    a7:fe:09:6c:35:8c:e5:f5:e2:f1:fd:86:42:0b:7f:
                    87:83:cc:f8:fb:d0:05:a6:04:fa:61:01:79:07:03:
                    c9:a1:44:8d:89:6f:50:6d:10:db:6c:86:0e:9a:57:
                    e5:3d:65:59:11:7c:99:3c:f5:79:c6:39:3d:18:33:
                    4c:9a:e2:25:45:9c:5a:7c:aa:9d:28:6b:3c:eb:2a:
                    41:04:21:52:f0:95:38:3b:44:ef:f6:5d:81:b7:41:
                    f9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3E:68:AE:C7:E9:E8:A8:51:76:18:02:37:C9:38:9C:79:47:89:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/580f6b1d-f2bf-3411-9adf-ae9496693e8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:77:98:cc:32:b8:85:06:80:42:46:b6:86:e8:04:73:ea:6c:
         f1:f0:3d:e9:47:0c:7a:3e:55:99:30:70:c8:2e:04:d9:00:33:
         c8:45:e9:b1:55:b1:2c:61:4f:0c:ef:29:e3:47:99:5f:dc:32:
         67:a4:2f:db:0c:9b:32:fb:2d:de:53:cd:97:26:0c:ed:3b:60:
         ca:59:73:40:53:ac:28:4d:42:1c:e6:4e:77:20:75:ca:87:7f:
         46:7e:17:eb:4a:7e:23:f8:a5:d0:31:9f:16:f1:d5:d4:b7:e3:
         2b:c0:62:1b:5c:43:66:b7:61:c7:3b:b9:5f:c7:c8:40:da:77:
         17:59:2e:45:8c:1c:ac:6a:b7:17:75:c7:21:5c:9e:d6:6a:8b:
         3a:4a:14:a7:84:38:d5:43:a7:fe:1d:86:bc:f9:b5:7f:85:52:
         b4:fc:c0:9e:2f:06:69:c4:be:f4:a8:a1:e6:63:1e:e7:73:48:
         d0:73:38:b5:0e:3d:2e:b7:ab:98:7d:6f:b7:36:3c:cf:cc:1b:
         b2:38:25:d1:e9:63:8c:fe:de:02:9e:36:bd:0f:25:a4:42:37:
         33:cd:2e:27:1a:00:14:a5:c9:62:92:18:95:49:d7:db:77:4d:
         7e:a4:bd:e2:df:cd:1b:ca:1c:1a:3e:94:10:25:f7:49:f8:34:
         13:6e:95:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:57:25 2025 by rpki-client