Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6ee21ae3-40c5-350a-8b9f-67d7dcc3bd3c.roa
File:                     6ee21ae3-40c5-350a-8b9f-67d7dcc3bd3c.roa (raw, json)
Hash identifier:          nV0Hs6evCM8/I+VeDIM6xKVhqZsoNwajxUfK/1BQALg=
Subject key identifier:   D2:62:93:B3:87:F8:DC:A3:A1:ED:67:51:A6:10:2F:DC:D2:7C:0E:08
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858490B4C1562586C66E0BEAB1800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6ee21ae3-40c5-350a-8b9f-67d7dcc3bd3c.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        172.69.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:15:62:58:6c:66:e0:be:ab:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=5a03738c-bba0-4093-a164-afda012c1e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2b:5f:e5:9c:1c:e8:84:9f:da:92:2b:32:a5:
                    e6:a9:60:23:57:52:73:31:0e:b7:3f:0a:12:0c:88:
                    23:f0:c7:f9:8c:74:86:7c:bd:02:5f:d5:e1:3c:8d:
                    5d:be:30:61:a9:79:62:ef:fa:c8:e7:b0:7c:08:9c:
                    91:f8:07:7e:32:1c:12:63:6b:b6:a3:52:87:2c:a9:
                    a5:cf:44:ca:40:6a:3e:0d:ca:d4:43:2a:7a:72:9b:
                    c5:79:15:0b:fa:6b:8d:9e:06:e6:08:e4:f4:2b:e9:
                    ef:10:b9:81:99:46:cf:b2:0d:74:02:7c:7e:d6:c6:
                    5e:ae:9a:9f:d4:9b:bc:44:cb:e0:d2:e6:c0:5b:57:
                    65:9e:88:45:ee:b3:57:ad:b1:6d:95:e2:0a:a8:dd:
                    38:80:b3:6b:33:8a:92:ff:2f:99:b4:55:f0:b8:d6:
                    16:14:d6:bd:34:6e:74:3a:94:8e:44:51:75:79:1e:
                    08:c7:b6:57:2f:2b:e3:a2:fc:7e:d6:25:a0:2e:8a:
                    7a:46:fb:13:8a:23:8f:67:47:72:86:78:03:59:a3:
                    56:cf:a0:0d:91:16:33:23:f7:00:0f:6d:ce:5e:be:
                    c5:fd:a9:13:8c:a7:89:8d:9f:6b:a4:30:bd:1c:53:
                    08:84:76:2d:e4:af:a1:0e:60:97:b5:7c:ec:e6:43:
                    11:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:62:93:B3:87:F8:DC:A3:A1:ED:67:51:A6:10:2F:DC:D2:7C:0E:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6ee21ae3-40c5-350a-8b9f-67d7dcc3bd3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:1a:15:08:74:7b:22:08:69:0f:14:4a:90:8f:80:be:50:50:
         12:c7:c6:38:e1:52:56:04:f1:7d:b8:05:1b:f8:e4:04:d3:9e:
         47:91:f6:6f:6d:df:dd:8f:49:0a:a8:ee:71:66:58:22:ac:c0:
         16:de:bd:1f:1e:0d:24:51:d5:f8:c1:ef:d9:9a:0e:8e:dc:7d:
         73:f1:7e:97:fc:05:86:89:6d:ce:d7:d5:4a:13:47:2a:93:5e:
         5b:36:84:9a:a4:5a:4f:8c:0e:d3:e4:a8:62:a7:83:c2:9f:16:
         ad:34:a8:bf:89:35:4b:21:58:70:9e:f9:15:bb:7a:e3:35:67:
         62:3c:c5:d9:41:58:b4:a5:f0:25:7f:f8:fa:2d:10:3f:3b:8e:
         ad:e8:ec:5c:34:58:a4:35:be:c3:28:83:7c:17:97:d5:d1:8f:
         2b:2d:f3:3b:e4:78:3a:9b:e1:a4:86:cf:3f:62:52:23:88:c3:
         33:82:f9:76:3c:fa:64:19:97:99:9b:dc:68:bf:dc:04:18:28:
         22:96:eb:26:fc:64:a6:57:70:55:fa:6f:c4:cc:f1:c5:78:2e:
         72:6c:0e:09:5c:3e:69:59:f6:66:8f:4a:d4:db:7a:77:a3:07:
         f6:7c:5c:00:8b:34:49:2d:38:b1:00:33:75:83:62:5c:af:bf:
         3b:69:e7:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTBViWGxm4L6rGAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
NWEwMzczOGMtYmJhMC00MDkzLWExNjQtYWZkYTAxMmMxZTY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCtf5Zwc6ISf2pIrMqXmqWAjV1JzMQ63PwoS
DIgj8Mf5jHSGfL0CX9XhPI1dvjBhqXli7/rI57B8CJyR+Ad+MhwSY2u2o1KHLKml
z0TKQGo+DcrUQyp6cpvFeRUL+muNngbmCOT0K+nvELmBmUbPsg10Anx+1sZerpqf
1Ju8RMvg0ubAW1dlnohF7rNXrbFtleIKqN04gLNrM4qS/y+ZtFXwuNYWFNa9NG50
OpSORFF1eR4Ix7ZXLyvjovx+1iWgLop6RvsTiiOPZ0dyhngDWaNWz6ANkRYzI/cA
D23OXr7F/akTjKeJjZ9rpDC9HFMIhHYt5K+hDmCXtXzs5kMRyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNJik7OH+Nyjoe1nUaYQL9zSfA4IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmVlMjFhZTMtNDBjNS0z
NTBhLThiOWYtNjdkN2RjYzNiZDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB8aFQh0eyIIaQ8USpCPgL5QUBLHxjjhUlYE8X24BRv45ATTnkeR9m9t
392PSQqo7nFmWCKswBbevR8eDSRR1fjB79maDo7cfXPxfpf8BYaJbc7X1UoTRyqT
Xls2hJqkWk+MDtPkqGKng8KfFq00qL+JNUshWHCe+RW7euM1Z2I8xdlBWLSl8CV/
+PotED87jq3o7Fw0WKQ1vsMog3wXl9XRjyst8zvkeDqb4aSGzz9iUiOIwzOC+XY8
+mQZl5mb3Gi/3AQYKCKW6yb8ZKZXcFX6b8TM8cV4LnJsDglcPmlZ9maPStTbenej
B/Z8XACLNEktOLEAM3WDYlyvvztp5+E=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:31:31 2025 by rpki-client