Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7471f609-4e4f-3a7a-984d-a655e565f544.roa
File:                     7471f609-4e4f-3a7a-984d-a655e565f544.roa (raw, json)
Hash identifier:          6o49Wr8/64i+oINBpvurCrogQz2csJeY35UEhL4BHBA=
Subject key identifier:   BF:06:3D:D3:A9:7D:BC:56:23:81:2A:8D:60:29:4D:DC:5D:2F:6E:B9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848C150CB9AD6B3F4DF7577E880
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7471f609-4e4f-3a7a-984d-a655e565f544.roa
Signing time:             Mon 03 Feb 2025 02:00:39 +0000
ROA not before:           Mon 03 Feb 2025 02:00:39 +0000
ROA not after:            Sun 04 May 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        172.71.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:50:cb:9a:d6:b3:f4:df:75:77:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb  3 02:00:39 2025 GMT
            Not After : May  4 01:00:39 2025 GMT
        Subject: CN=392ec2a1-c222-4e64-afbd-66b547f8099f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0b:d8:23:64:bb:f7:0f:4c:8d:0e:10:6f:65:
                    97:ac:58:c8:60:91:7a:6f:71:4f:06:c7:74:25:6e:
                    27:60:8d:2f:30:13:c6:eb:32:c0:5d:55:df:a2:35:
                    03:66:80:e4:de:84:67:6e:c7:05:05:d8:c7:c7:8b:
                    61:d6:4a:bc:7d:29:b5:72:0c:1f:fe:72:07:a5:a1:
                    59:10:01:b4:2f:27:dc:7b:f5:cd:95:36:5e:c0:d9:
                    5f:30:e3:45:f1:c1:07:ac:6c:2f:e5:49:60:ec:b5:
                    9d:98:e1:27:e4:6c:95:52:df:24:e3:18:3d:7f:9f:
                    b2:c1:10:cd:44:8e:0d:e5:86:28:8a:5d:b8:2c:cd:
                    07:f7:9f:17:0a:79:61:bb:ed:95:6a:4e:bb:99:ea:
                    3a:22:d2:5b:99:d3:c7:87:39:44:2d:37:53:3c:da:
                    51:73:31:68:59:e2:76:51:00:d2:e8:cf:03:4a:a5:
                    e9:38:d7:07:0c:f8:0f:f2:4e:33:96:74:88:0b:1a:
                    a3:a7:2d:44:2f:68:77:48:52:fe:0e:48:06:fd:39:
                    37:ab:53:be:d5:33:4d:72:52:e9:3e:75:af:bf:f9:
                    00:f5:48:2b:a0:d3:45:80:9f:3d:e9:eb:16:7b:35:
                    bb:b2:7d:63:66:59:63:12:10:55:e3:6d:13:74:ac:
                    ba:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:06:3D:D3:A9:7D:BC:56:23:81:2A:8D:60:29:4D:DC:5D:2F:6E:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7471f609-4e4f-3a7a-984d-a655e565f544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:6d:ca:ec:8a:3c:6c:04:a8:11:d1:b6:b0:b2:6b:cb:25:b7:
         2a:d7:4b:6d:0d:23:78:bb:69:b8:3c:b1:c0:83:f5:fe:d5:02:
         aa:c3:68:a8:4d:62:a9:32:35:66:c1:4b:53:56:d9:43:f7:5b:
         10:2b:78:62:c8:d8:0e:33:26:0b:2a:bb:09:ae:36:5e:c0:25:
         b9:1b:42:77:06:5e:b7:c4:55:4f:80:fa:7f:4f:39:75:a6:b2:
         fa:0e:93:bd:c9:c1:b2:4f:59:23:31:ce:b9:5b:06:bb:0c:12:
         7b:42:00:73:93:74:a3:b0:f9:37:ac:b9:cd:91:7a:09:6a:dd:
         68:eb:88:3c:00:01:7e:02:f5:4f:bc:3a:6b:3e:80:8e:0f:f4:
         cb:10:7d:6d:40:7e:fc:48:f8:2d:6c:c4:ca:7b:e6:a9:0f:99:
         66:a5:cc:3b:6f:0d:c9:66:af:97:6c:de:c9:01:0a:2a:cc:37:
         c0:b7:2d:1e:3f:51:ad:31:6a:cf:b0:d3:d6:0b:45:fa:54:af:
         f8:af:36:c7:d9:f8:5f:75:dc:de:c8:d5:ec:79:90:25:54:8b:
         95:be:79:20:46:82:5f:84:ba:55:85:9f:f1:a2:5e:96:f9:09:
         88:58:da:b1:c9:e4:c5:fa:0d:15:17:3c:94:80:ba:8f:35:d1:
         51:fe:7c:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUMua1rP033V36IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk
MzkyZWMyYTEtYzIyMi00ZTY0LWFmYmQtNjZiNTQ3ZjgwOTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAvYI2S79w9MjQ4Qb2WXrFjIYJF6b3FPBsd0
JW4nYI0vMBPG6zLAXVXfojUDZoDk3oRnbscFBdjHx4th1kq8fSm1cgwf/nIHpaFZ
EAG0Lyfce/XNlTZewNlfMONF8cEHrGwv5Ulg7LWdmOEn5GyVUt8k4xg9f5+ywRDN
RI4N5YYoil24LM0H958XCnlhu+2Vak67meo6ItJbmdPHhzlELTdTPNpRczFoWeJ2
UQDS6M8DSqXpONcHDPgP8k4zlnSICxqjpy1EL2h3SFL+DkgG/Tk3q1O+1TNNclLp
PnWvv/kA9UgroNNFgJ896esWezW7sn1jZlljEhBV420TdKy6pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL8GPdOpfbxWI4EqjWApTdxdL265MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzQ3MWY2MDktNGU0Zi0z
YTdhLTk4NGQtYTY1NWU1NjVmNTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH1tyuyKPGwEqBHRtrCya8sltyrXS20NI3i7abg8scCD9f7VAqrDaKhN
YqkyNWbBS1NW2UP3WxAreGLI2A4zJgsquwmuNl7AJbkbQncGXrfEVU+A+n9POXWm
svoOk73JwbJPWSMxzrlbBrsMEntCAHOTdKOw+Tesuc2Reglq3WjriDwAAX4C9U+8
Oms+gI4P9MsQfW1AfvxI+C1sxMp75qkPmWalzDtvDclmr5ds3skBCirMN8C3LR4/
Ua0xas+w09YLRfpUr/ivNsfZ+F913N7I1ex5kCVUi5W+eSBGgl+EulWFn/GiXpb5
CYhY2rHJ5MX6DRUXPJSAuo810VH+fJU=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:01 2025 by rpki-client