Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5dcbea2f-df0e-3f84-8a34-ded53187fbd8.roa
File:                     5dcbea2f-df0e-3f84-8a34-ded53187fbd8.roa (raw, json)
Hash identifier:          uTmW440HYZYZN4G7GC3wrjEOdtKh/QZabzq6dZa9RJ8=
Subject key identifier:   62:D4:12:66:02:45:5D:2B:CF:27:B6:65:D5:0F:89:7A:AF:19:AB:04
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E4EFDACB2C732D32E3D93F80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5dcbea2f-df0e-3f84-8a34-ded53187fbd8.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     13335
IP address blocks:        172.71.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:da:cb:2c:73:2d:32:e3:d9:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=902088a2-7da3-41a1-9eed-0d3d86906e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1e:95:8e:f2:b3:f6:31:0d:04:b5:c6:ea:67:
                    bb:a2:3e:66:89:4b:33:25:be:ad:8a:f8:3e:ff:8b:
                    1c:a1:e7:24:c9:d7:03:71:de:1f:00:41:48:45:16:
                    c8:22:49:a4:b8:8d:3a:7f:4a:9c:3e:04:1f:af:6b:
                    59:e8:fb:e5:aa:57:41:66:38:f5:29:8b:23:62:12:
                    66:55:b5:53:34:17:4a:9f:c0:12:5e:a1:33:64:90:
                    44:18:d9:f5:83:36:0b:aa:c3:7a:c3:bc:b3:67:fc:
                    fd:14:3c:2f:96:11:b0:26:2d:ed:03:ba:bf:ed:01:
                    c0:cb:d6:c8:f0:47:61:12:00:70:fe:94:2a:07:db:
                    bb:f9:b1:95:cb:0d:87:c2:03:38:c0:72:26:5f:ae:
                    59:44:b1:40:f7:53:00:8c:6d:fa:60:d2:46:d5:b8:
                    8e:b3:81:70:d0:14:93:5f:67:13:f6:6b:be:38:92:
                    c0:cb:67:a3:ea:d6:f5:84:5d:6a:d4:7f:4d:ad:bf:
                    79:de:52:4c:68:b9:a7:06:c2:5d:81:95:c6:e3:6c:
                    fb:66:da:a5:00:ad:bd:54:f2:ba:8c:dc:4a:1a:f8:
                    e2:78:81:8b:22:9f:c6:65:66:ee:e0:62:c0:72:62:
                    8e:35:67:70:c9:76:69:75:b8:6d:d5:d4:13:6e:db:
                    3e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D4:12:66:02:45:5D:2B:CF:27:B6:65:D5:0F:89:7A:AF:19:AB:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5dcbea2f-df0e-3f84-8a34-ded53187fbd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:c9:4f:e7:59:fe:d7:76:6f:d0:48:3a:42:c6:dd:2b:44:b6:
         95:fd:8f:e0:54:f5:0c:29:d1:21:44:07:1b:a4:5e:35:a3:4c:
         67:01:b5:ac:60:aa:1c:89:3d:63:f0:1c:3e:16:20:37:fb:30:
         b8:f7:43:3a:cf:1b:67:ac:a9:47:d9:c3:1b:15:26:cc:b6:0a:
         e7:16:dd:96:12:49:97:91:81:26:0e:78:19:26:50:ed:ad:86:
         d1:af:6a:1f:1f:51:a7:13:b9:ab:a6:2e:0f:de:42:6a:a1:9f:
         5f:48:f0:9a:2b:52:9f:ea:ad:3e:e3:7c:9b:be:d2:a0:0f:89:
         e5:be:70:30:18:6f:a7:69:e6:9d:53:b3:d8:f1:f0:68:43:01:
         c3:01:a4:9b:a9:4b:cd:b3:07:3c:9f:03:95:af:e9:39:9a:0c:
         f3:12:88:f0:f7:ff:a1:8f:74:f7:59:ca:02:3a:60:36:ee:e7:
         fd:04:8e:4f:25:ad:9d:5e:04:e9:c3:7b:68:86:4b:c9:6d:a2:
         de:e7:5f:28:56:5a:23:e7:19:3c:bd:29:9a:db:aa:56:a1:b9:
         26:b9:37:dc:36:08:e0:36:a4:36:ef:91:77:3d:8a:9a:af:d2:
         59:d4:49:b4:1b:cf:fd:d2:a0:bc:4b:85:72:60:8d:15:9a:39:
         a2:92:f2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:45:16 2025 by rpki-client