Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75a3ab1e-792d-3358-bf7e-ea8ae30b9ff2.roa
File:                     75a3ab1e-792d-3358-bf7e-ea8ae30b9ff2.roa (raw, json)
Hash identifier:          HxkZ7D7JNqu3pL6M3mxlD6kj2a21ZN8lKvjLRGZbgIU=
Subject key identifier:   B8:79:95:6A:C5:86:5E:53:52:94:20:BB:80:20:6A:B1:A1:0D:0E:F9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849F01A8D3D58DD00A7C209F480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75a3ab1e-792d-3358-bf7e-ea8ae30b9ff2.roa
Signing time:             Thu 22 May 2025 13:01:05 +0000
ROA not before:           Thu 22 May 2025 13:01:05 +0000
ROA not after:            Wed 20 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.71.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:1a:8d:3d:58:dd:00:a7:c2:09:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 22 13:01:05 2025 GMT
            Not After : Aug 20 13:01:05 2025 GMT
        Subject: CN=5a7a800f-4b0c-42d7-88f6-5df049596b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e5:f7:73:01:b8:93:20:28:b1:1d:9b:d4:cb:
                    a3:09:2e:84:00:b6:34:b2:4e:4f:18:31:94:86:0e:
                    4e:d6:ef:e5:bc:37:08:65:72:cb:63:31:2c:b6:92:
                    34:1d:63:ef:3c:c3:94:f7:e5:37:96:b2:6e:05:b0:
                    fe:e0:67:2a:e0:72:e1:ba:44:3a:1a:fe:77:f6:d1:
                    e2:b8:17:f8:8c:90:ca:5f:c5:4d:ea:b7:12:c8:b7:
                    7a:7a:58:a2:0d:4f:b4:47:2f:1f:e6:40:c4:c5:2e:
                    ba:8a:66:5b:be:27:b8:08:74:7f:9b:a8:15:ce:c4:
                    27:8f:28:88:92:73:96:69:09:d4:1f:21:89:44:e3:
                    f8:41:21:ea:2d:0c:95:68:ca:db:b3:b7:af:7e:1d:
                    66:e8:ad:43:6d:be:da:c8:00:5f:7e:76:77:15:b5:
                    a9:9a:46:3f:6b:fd:db:df:d2:1c:08:a1:4b:f5:74:
                    bf:a5:ab:fc:cc:90:e0:b6:0f:76:b2:3d:1e:33:dc:
                    14:fa:31:0a:1e:81:76:4d:06:e9:ac:5b:c6:78:ba:
                    2e:4d:f7:1a:68:ef:9b:32:b2:83:32:36:31:08:53:
                    f8:e1:e4:33:94:44:94:45:49:1b:95:58:de:1b:13:
                    96:48:bf:8d:aa:13:34:8d:1c:6c:d1:1e:c1:80:9e:
                    fc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:79:95:6A:C5:86:5E:53:52:94:20:BB:80:20:6A:B1:A1:0D:0E:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75a3ab1e-792d-3358-bf7e-ea8ae30b9ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:16:01:d1:3a:8f:d0:9d:7c:57:29:c1:84:52:d2:33:2e:ae:
         de:b7:1f:4d:46:46:e7:99:36:98:7c:10:00:15:0f:ea:5d:8f:
         9e:11:08:ff:60:ec:50:51:52:37:f5:83:1a:0d:07:80:b2:f8:
         07:14:0b:d7:e0:76:2a:a8:fc:cd:26:8a:50:b2:9b:4f:a9:35:
         73:5a:68:4f:49:0f:b7:9f:c4:77:ae:0e:de:21:c6:3e:47:a3:
         5f:b3:c3:48:90:8c:9b:7f:05:84:29:98:9e:0b:2c:00:78:4f:
         95:dd:cd:67:ff:a9:2d:a3:f8:fd:fd:3a:d9:ba:69:db:00:89:
         93:9b:24:01:eb:e2:16:0f:e9:65:80:b9:2d:86:ec:8e:11:7a:
         d9:2e:b2:fe:f7:e2:f7:c4:25:dd:74:21:46:82:ec:49:1e:bc:
         cc:7f:e0:04:73:fc:6e:98:49:6b:a3:1d:6f:e0:e5:f6:b0:39:
         7a:f4:a4:f6:41:5d:62:68:9c:d7:f7:d9:e4:c8:c8:ce:c9:4a:
         68:16:d0:b1:15:5b:9f:de:92:04:5a:f7:cd:8f:28:ec:65:63:
         d5:06:97:29:a6:55:f7:d2:d4:02:43:34:6c:0e:97:c7:b7:12:
         40:8f:aa:21:28:f6:71:f7:fe:6c:02:8d:5f:fa:35:e4:2a:86:
         79:91:e6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:38:26 2025 by rpki-client