Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a74d6ec-72fc-3879-b747-0855f030aa8f.roa
File:                     8a74d6ec-72fc-3879-b747-0855f030aa8f.roa (raw, json)
Hash identifier:          YiuSTWVGGGJfm11/++RjwcVEyky5prFAy47iTO2cbOo=
Subject key identifier:   DB:81:AE:25:EB:48:56:0C:36:F9:DD:8E:F6:50:53:57:C9:CC:02:66
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858473AD9FB652C1F4932D0767000
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a74d6ec-72fc-3879-b747-0855f030aa8f.roa
Signing time:             Sun 15 Sep 2024 12:00:00 +0000
ROA not before:           Sun 15 Sep 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.6.0/24 maxlen: 24
                          172.69.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:d9:fb:65:2c:1f:49:32:d0:76:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 15 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=c4bc636c-7aff-4cdc-a141-8c79bd13dc3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:62:57:58:50:30:d8:76:d9:b9:25:45:28:75:
                    68:33:46:8c:fe:35:96:fb:8e:8b:62:ae:5d:cc:26:
                    d8:d0:33:47:9d:63:64:b9:c0:fa:92:b2:89:ff:a1:
                    55:72:84:b4:73:9b:94:a3:2a:7a:a6:4b:72:df:7e:
                    5b:e6:e3:95:6b:e2:a6:af:d5:aa:af:c0:29:15:59:
                    89:62:ac:e0:c8:6f:8d:38:94:75:43:9b:42:cf:c0:
                    67:34:51:59:40:46:3d:a6:86:0e:b1:3b:c2:8a:3b:
                    79:f3:03:83:23:d1:13:ed:a9:54:16:a3:53:5b:ce:
                    9b:92:0c:45:e4:60:52:38:b4:4b:9e:0b:03:65:9a:
                    0e:cb:d6:6d:a4:50:c8:65:b2:00:48:35:fc:e6:7a:
                    18:4b:01:01:90:19:3d:2c:43:c7:b9:b2:9a:38:1a:
                    42:30:f4:6a:6d:b4:4c:60:64:41:f4:1a:67:dd:6d:
                    be:b0:e9:3b:91:ba:dd:30:ab:82:29:4c:7f:d0:7b:
                    37:5b:5e:8a:f2:e5:42:12:d3:73:4f:27:29:e0:e3:
                    99:22:e1:69:63:83:07:66:24:ac:bb:92:fa:17:10:
                    cc:76:7b:bc:fd:d4:da:32:56:75:1a:08:3e:45:71:
                    7e:29:e1:55:11:79:a5:7b:3e:9a:ad:66:c7:72:47:
                    84:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:81:AE:25:EB:48:56:0C:36:F9:DD:8E:F6:50:53:57:C9:CC:02:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a74d6ec-72fc-3879-b747-0855f030aa8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:37:d8:38:10:05:0f:75:3d:03:9a:f7:0f:a3:38:a3:1e:2b:
         61:e1:a2:6e:70:f1:e7:55:52:5c:41:81:27:ff:87:dd:c7:b7:
         aa:c1:f7:af:21:05:51:5f:8e:c5:64:7e:4d:18:13:8c:26:f0:
         d3:1f:1b:69:0e:81:1b:1a:f9:7c:54:67:06:1a:ff:6d:ee:31:
         43:07:4f:ae:b3:91:8e:eb:0c:a0:ad:a1:5a:7d:13:22:5e:bd:
         00:f3:ad:a4:f3:e2:8f:fe:97:88:ae:af:71:d8:9b:7d:41:b6:
         13:4e:9d:86:84:ad:5e:bc:0f:a6:ca:92:ee:ea:f4:cf:59:1e:
         4f:f0:b7:19:0f:82:b1:36:47:4d:05:19:61:7f:f5:91:f0:bd:
         f5:22:59:4f:73:6e:26:39:99:f9:49:6a:a2:86:d1:60:3c:e4:
         08:aa:b0:61:35:bb:d3:a0:0d:61:32:12:8a:8a:a4:0b:07:56:
         20:15:b4:0f:73:8c:cc:fe:42:74:2a:c4:30:71:76:27:fb:36:
         80:09:c7:c7:80:c6:1e:5c:cd:b4:14:bb:10:3c:5e:3d:5f:0f:
         66:69:39:01:5e:70:fa:48:52:da:b3:f5:5a:5b:18:09:9c:46:
         58:17:c3:30:fe:89:18:5b:03:2f:a9:d4:90:4d:83:ca:6e:6f:
         59:4f:26:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc62ftlLB9JMtB2cAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MDkxNTEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk
YzRiYzYzNmMtN2FmZi00Y2RjLWExNDEtOGM3OWJkMTNkYzNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGJXWFAw2HbZuSVFKHVoM0aM/jWW+46LYq5d
zCbY0DNHnWNkucD6krKJ/6FVcoS0c5uUoyp6pkty335b5uOVa+Kmr9Wqr8ApFVmJ
YqzgyG+NOJR1Q5tCz8BnNFFZQEY9poYOsTvCijt58wODI9ET7alUFqNTW86bkgxF
5GBSOLRLngsDZZoOy9ZtpFDIZbIASDX85noYSwEBkBk9LEPHubKaOBpCMPRqbbRM
YGRB9Bpn3W2+sOk7kbrdMKuCKUx/0Hs3W16K8uVCEtNzTycp4OOZIuFpY4MHZiSs
u5L6FxDMdnu8/dTaMlZ1Ggg+RXF+KeFVEXmlez6arWbHckeEsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNuBriXrSFYMNvndjvZQU1fJzAJmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGE3NGQ2ZWMtNzJmYy0z
ODc5LWI3NDctMDg1NWYwMzBhYThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrEUGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHE32DgQBQ91PQOa9w+jOKMeK2Hhom5w8edVUlxBgSf/h93Ht6rB968h
BVFfjsVkfk0YE4wm8NMfG2kOgRsa+XxUZwYa/23uMUMHT66zkY7rDKCtoVp9EyJe
vQDzraTz4o/+l4iur3HYm31BthNOnYaErV68D6bKku7q9M9ZHk/wtxkPgrE2R00F
GWF/9ZHwvfUiWU9zbiY5mflJaqKG0WA85AiqsGE1u9OgDWEyEoqKpAsHViAVtA9z
jMz+QnQqxDBxdif7NoAJx8eAxh5czbQUuxA8Xj1fD2ZpOQFecPpIUtqz9VpbGAmc
RlgXwzD+iRhbAy+p1JBNg8pub1lPJgs=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:28 2025 by rpki-client