Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/67932019-21fc-3ba4-aeb0-2068a096b591.roa
File:                     67932019-21fc-3ba4-aeb0-2068a096b591.roa (raw, json)
Hash identifier:          eTQN2SJABYpjpjeihbsQLXGSoxG+QCiGzEkfa5Fam6k=
Subject key identifier:   98:D1:B0:90:0B:78:67:9E:C4:6F:AD:62:B3:D1:54:31:E9:39:02:7C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E7BA96FA538CA856860E5E00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/67932019-21fc-3ba4-aeb0-2068a096b591.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        172.68.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:96:fa:53:8c:a8:56:86:0e:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=7627cd9e-2c43-4f66-ad58-7457390b71e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c3:bf:56:41:3a:7e:7a:ed:de:a1:94:fa:ed:
                    88:ba:dd:31:a4:0b:b8:78:24:26:4f:98:88:20:ce:
                    7b:3b:b9:9e:4d:6b:62:60:3a:cf:b5:3f:f2:1a:77:
                    e3:66:68:6f:2d:93:8b:6d:68:53:af:7d:4d:53:1d:
                    42:e4:51:13:4b:db:fe:26:65:15:82:90:e4:e0:d6:
                    bb:1a:70:31:1f:31:6b:b7:9f:f8:4b:8d:0f:90:d2:
                    22:26:d8:85:4a:a6:0a:07:d8:a9:05:01:06:4b:87:
                    ab:81:55:c5:e0:36:3c:1b:f1:be:44:aa:95:8b:93:
                    58:0f:9d:1e:88:48:f9:be:b7:26:33:94:5a:b6:c8:
                    9f:cb:fb:8f:c2:f6:80:00:7e:98:e5:42:cb:76:89:
                    7f:4f:85:83:34:f4:4e:eb:e4:90:ff:d3:4e:19:35:
                    aa:3f:f9:74:0b:7b:03:d9:90:ef:39:9c:fa:e0:a1:
                    99:dd:08:82:66:ef:d5:ef:64:71:5e:75:33:23:19:
                    38:81:a9:35:3e:7e:5c:f4:b4:28:27:e4:92:6d:f1:
                    66:6f:4e:d0:b6:47:a0:58:ac:4c:d4:32:cf:e6:61:
                    35:25:88:dc:c0:9d:78:1d:9a:88:e7:98:a2:40:cd:
                    3b:32:e4:26:06:fb:d2:ae:ef:a2:44:03:a5:d3:ce:
                    da:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D1:B0:90:0B:78:67:9E:C4:6F:AD:62:B3:D1:54:31:E9:39:02:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/67932019-21fc-3ba4-aeb0-2068a096b591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:70:06:0c:da:73:03:42:6c:9f:b6:d5:1b:18:50:e7:48:8f:
         ca:98:6f:c4:42:84:05:77:e9:28:7c:e2:5f:09:b1:38:84:19:
         04:af:1f:0f:ca:9f:ea:88:a2:a2:57:c0:5a:e3:87:b9:51:12:
         5a:0c:3c:a7:55:e3:f6:17:a2:77:dc:66:a2:3b:9c:a4:b1:e3:
         7a:a0:8b:c5:32:d6:3a:52:22:d0:bd:7d:54:8c:6a:a0:a9:cb:
         df:11:3b:f2:b4:09:d1:63:86:ad:8c:f8:e6:34:ef:11:31:c1:
         11:f7:d4:0a:0a:03:ee:33:af:24:d4:40:a7:9f:2d:4a:cc:9b:
         4a:8a:77:44:ad:a9:d6:8b:cc:07:88:cd:65:bf:aa:72:48:62:
         5a:02:2d:84:68:e3:96:e6:f5:7e:05:6a:8c:bd:f7:58:1a:f3:
         1f:3c:14:3c:4c:76:0f:97:82:fd:d4:c6:06:b1:a4:d4:8c:02:
         96:bd:04:0f:97:f2:1b:22:f6:4f:3c:8f:2c:be:a7:f9:44:7f:
         df:8c:e0:ba:bd:41:5e:83:bc:32:67:32:61:21:e5:bf:36:3d:
         1f:4a:92:67:7f:c9:b4:57:b3:c9:2f:bc:d9:fe:4b:10:22:c6:
         da:fd:8d:71:6f:66:d8:26:10:6c:72:58:5b:6f:bd:ec:ed:28:
         78:68:55:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:51:22 2025 by rpki-client