Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6364a523-08e9-34b8-9be6-8d1eb2374f50.roa
File:                     6364a523-08e9-34b8-9be6-8d1eb2374f50.roa (raw, json)
Hash identifier:          jQhw2/l8Z24J/Awk0FncJY9hqq6nTOZINgs/q/VYw5k=
Subject key identifier:   2A:D7:B8:19:58:A3:12:33:50:13:32:47:43:10:56:99:36:C3:9E:BD
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849EA8545BC0A7D56D7C0FC9E00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6364a523-08e9-34b8-9be6-8d1eb2374f50.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.69.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:45:bc:0a:7d:56:d7:c0:fc:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=5220a30a-d58e-48f1-9b29-2bba6e6c07bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:df:74:6b:eb:b8:41:f3:b9:7a:27:52:82:92:
                    5c:38:a9:14:1b:bd:69:a2:2f:b3:6f:17:57:cb:fc:
                    38:fa:6b:cb:41:a7:4d:75:91:8a:12:f8:fe:89:75:
                    03:dc:4f:68:04:5d:bd:91:96:b1:e6:01:0a:4d:19:
                    c6:64:be:b2:75:1f:e5:f6:31:74:ee:d5:1c:64:89:
                    79:f4:3c:56:f2:4b:44:5a:7f:0a:0f:fc:a8:87:bb:
                    d5:10:17:88:ab:af:69:75:cd:8b:0f:8c:b1:b6:cc:
                    82:e7:06:d3:8d:34:86:2a:2d:63:e4:38:0b:d6:63:
                    ba:da:0e:d8:aa:3c:89:92:5c:34:ef:00:40:50:e4:
                    da:9d:cd:25:b9:23:f0:57:e6:3f:b8:c8:8a:60:ab:
                    3d:40:a1:c8:81:b4:f5:2c:3b:77:38:b1:d7:29:70:
                    98:40:f3:69:43:c1:f2:83:6d:7f:30:33:6c:81:44:
                    9b:b4:56:97:54:95:ba:ac:d8:31:a2:60:3b:13:95:
                    fd:3b:38:e9:62:84:1c:f1:fb:ba:2e:7f:5d:e1:ec:
                    a1:5e:cd:81:4d:7a:0f:4c:2e:1f:ff:6e:2a:c6:e6:
                    09:70:b6:d2:22:3f:9c:1f:79:cb:20:dd:b4:65:8b:
                    52:a0:22:20:f0:70:f6:58:7b:1e:70:81:af:51:2c:
                    c9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D7:B8:19:58:A3:12:33:50:13:32:47:43:10:56:99:36:C3:9E:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6364a523-08e9-34b8-9be6-8d1eb2374f50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:1c:f5:ad:ff:81:ef:ab:3f:80:ec:f9:ac:4f:b0:23:00:e1:
         56:34:2a:19:55:af:7b:8c:0a:f1:a4:c8:a3:72:5a:24:27:d0:
         fd:ac:b4:0a:d0:c5:98:33:11:30:9e:a9:77:fb:4d:82:21:49:
         19:0d:e9:f5:2e:65:0c:50:cb:26:ce:fd:fc:b3:0d:02:b1:22:
         41:5e:f4:32:58:f2:83:9c:87:71:33:c1:c4:f6:f8:9d:b8:10:
         af:8f:58:bb:4f:d9:5a:e1:31:6b:11:04:0b:74:c6:48:84:39:
         e9:53:42:b6:f1:2b:23:b1:72:e8:7b:e6:d9:f8:29:33:a5:b9:
         27:5c:8d:10:43:27:db:1e:97:04:85:a0:82:1f:e3:d6:76:12:
         81:85:43:7f:9f:a6:ba:96:40:20:36:76:95:c4:f2:2a:f3:96:
         a9:9d:9c:0f:7e:eb:eb:12:1e:0f:5c:65:02:76:12:0e:16:c7:
         c9:f6:66:94:24:a0:1d:7f:af:f8:b1:66:69:ad:61:3d:f0:71:
         b0:f7:39:42:c3:84:74:84:27:bd:da:a8:85:52:a3:a8:cf:f7:
         b2:35:e5:d7:67:09:52:e1:3f:13:4e:a0:28:06:9f:e0:c0:cf:
         fc:5a:b8:95:e2:06:59:76:43:68:0f:e3:5e:b6:eb:8a:26:bb:
         db:b8:1a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:20:01 2025 by rpki-client