Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/774c1334-f920-38d3-890d-0c6c643e1f62.roa
File:                     774c1334-f920-38d3-890d-0c6c643e1f62.roa (raw, json)
Hash identifier:          K030IiX6CTvqSJBXqTck2zhLvXtY3tLs0XLf2atB3HE=
Subject key identifier:   00:2D:E9:F3:DC:50:4E:5A:8F:0E:8B:BA:A9:05:1E:E4:AD:9A:18:6A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E4EFD88834463B56E28F0440
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/774c1334-f920-38d3-890d-0c6c643e1f62.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     13335
IP address blocks:        172.71.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:d8:88:34:46:3b:56:e2:8f:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=513c709b-396b-49a9-ac5c-1f6e5a766845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5a:50:fd:56:da:99:eb:9b:29:2c:62:58:18:
                    2c:87:19:e7:99:2c:ff:17:30:88:f3:cd:f2:f8:2a:
                    d1:a6:9a:cb:9c:94:de:04:a2:f2:69:42:6d:f9:5e:
                    17:7e:54:4f:a5:ed:1b:96:0c:f2:7b:17:8d:7f:2c:
                    76:c1:23:84:8f:30:00:ef:cb:0b:4b:40:8e:f8:50:
                    21:8c:6a:1e:62:15:3c:fc:a4:d8:7f:9f:32:3b:72:
                    dd:4b:72:2f:df:a4:70:ed:cc:0c:be:c5:b4:15:54:
                    b1:e0:59:e3:d4:b8:0d:2a:e7:2f:c7:55:db:76:5a:
                    3a:e8:a0:89:89:3a:14:57:99:4e:2e:4d:0d:4f:27:
                    3a:a9:27:9e:3b:93:2b:df:5c:db:88:dc:00:f5:7d:
                    98:4a:f4:b7:e2:af:0a:39:9d:e0:96:9c:08:8b:44:
                    72:ca:28:84:ee:f2:30:73:c5:e2:37:3d:08:88:e5:
                    71:8e:b1:16:48:39:ca:c2:91:1a:f6:58:51:27:c7:
                    17:c0:05:76:16:ab:6d:9a:fe:52:81:e2:d9:73:10:
                    26:a8:26:f9:44:b0:8c:4a:c7:a0:7d:2f:0d:6e:7b:
                    a2:44:1c:4a:d8:b0:c1:9c:43:82:f8:70:b2:5a:aa:
                    3c:0c:53:c8:5d:9f:5d:80:6c:2e:84:40:c8:ee:e2:
                    f9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2D:E9:F3:DC:50:4E:5A:8F:0E:8B:BA:A9:05:1E:E4:AD:9A:18:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/774c1334-f920-38d3-890d-0c6c643e1f62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:15:e5:39:08:68:61:32:d0:f1:92:19:01:b9:01:dd:92:71:
         a5:cf:7e:6a:be:1f:3f:bc:99:fb:6e:93:93:fc:76:99:9e:f6:
         ee:14:c4:13:cd:c2:16:2d:f3:b8:ac:6d:45:b4:d5:48:08:fe:
         7d:c7:a4:5b:3a:f6:3c:87:cf:39:4e:53:ff:8a:5d:de:a9:79:
         7e:10:57:b2:f1:85:cc:69:07:88:61:09:5a:93:69:21:7d:02:
         91:14:e7:3a:0c:8a:f6:2f:a8:e9:6d:37:ff:08:eb:98:e6:98:
         6f:3f:d7:d9:6c:d8:8e:20:5d:cb:75:7f:65:ba:42:b1:80:b4:
         1c:29:4d:26:24:5a:4c:1f:d9:83:fd:a9:15:0a:e4:e3:fb:d1:
         d9:72:6c:17:4c:dd:fc:76:24:0e:d1:15:6c:7e:1f:ff:7e:14:
         41:2c:41:3d:14:7f:c3:ee:cc:c6:e5:46:b3:11:51:98:99:16:
         83:29:77:99:b6:75:c2:ec:01:c0:0e:e4:92:a6:f6:9c:ae:47:
         4a:ad:c2:97:7f:f1:46:b7:a7:b1:41:0b:7e:44:aa:a5:10:8c:
         01:68:61:98:a9:67:c4:2f:8a:50:80:11:5b:3d:c4:ef:23:56:
         6a:21:27:c8:71:f8:68:9a:22:b0:fc:04:75:2d:e6:ff:b2:82:
         f0:96:49:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:00:28 2025 by rpki-client