Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/93387d12-85b4-3d2f-81d4-c73e2a03360b.roa
File:                     93387d12-85b4-3d2f-81d4-c73e2a03360b.roa (raw, json)
Hash identifier:          10xWobJdOO90CZhhXBDQan1eeH1GSBWOU/EaHboXWsE=
Subject key identifier:   59:AD:2E:54:81:87:DC:BA:AD:21:8C:4F:BF:36:74:58:F0:DE:79:B7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E65513767677FDF521C8B380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/93387d12-85b4-3d2f-81d4-c73e2a03360b.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     13335
IP address blocks:        172.69.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:55:13:76:76:77:fd:f5:21:c8:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=19a251fb-74ad-44bd-aa95-448588ff9514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fe:d2:58:09:13:ac:b6:12:f2:7d:5d:10:fe:
                    22:cf:30:f8:d5:df:86:84:d2:50:ec:f8:cd:88:a3:
                    6e:37:ea:2d:d6:e4:e4:26:e3:ab:94:12:35:e0:cc:
                    60:74:2a:20:eb:15:2a:9c:d9:c0:f8:59:2b:c1:a8:
                    77:1a:24:24:bd:11:5b:89:fa:e3:c4:d7:98:cb:90:
                    f1:4a:fd:cd:92:68:4a:3a:9d:4b:62:b2:29:23:f6:
                    70:ba:f2:3f:52:a1:d2:d7:e7:5b:36:23:f6:8f:60:
                    bd:84:2f:1c:0d:bb:00:01:a4:68:a1:36:ca:f5:92:
                    1e:cc:25:0a:0d:12:67:2c:c2:58:f9:4e:23:82:f6:
                    34:1c:dd:54:03:e4:5a:28:1f:e8:6f:88:78:99:71:
                    90:e1:fc:1a:44:50:00:8b:3a:fc:4d:76:d7:bf:42:
                    45:60:44:54:43:e7:6a:f7:b2:e1:7f:4a:f9:41:99:
                    15:12:43:46:fe:69:3b:64:b5:18:5a:30:a3:9f:b0:
                    09:35:3e:52:d5:68:14:d0:76:ff:25:b9:b9:5d:87:
                    41:4a:fa:a4:a6:ea:0a:1a:b0:72:32:0d:35:0e:97:
                    00:82:86:0e:90:6f:a2:6c:e3:63:95:51:58:1a:a3:
                    98:23:30:f4:0a:60:e2:53:00:8a:8f:ad:b3:8e:37:
                    d7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AD:2E:54:81:87:DC:BA:AD:21:8C:4F:BF:36:74:58:F0:DE:79:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/93387d12-85b4-3d2f-81d4-c73e2a03360b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:97:e8:79:ee:17:ac:e3:b4:b1:81:cc:8b:0b:86:a4:ce:c8:
         c4:66:9c:98:96:90:cb:7d:ac:74:05:36:fb:51:cf:58:95:5e:
         c6:fb:7b:34:39:ed:6c:85:4a:97:66:c9:0c:35:96:31:3b:4e:
         37:13:54:cc:dc:eb:4b:bd:6b:86:66:cf:a9:4f:c7:3f:f2:34:
         75:2c:86:08:30:af:02:88:29:28:68:57:de:91:bc:d0:43:ee:
         25:64:9d:92:82:b2:e9:47:3e:55:d4:f4:7b:34:52:f8:b9:dd:
         29:f4:87:57:56:ca:ed:e2:8d:d8:2e:17:53:fc:39:28:b2:c3:
         11:82:e2:d5:45:2b:0f:9b:bc:25:b1:65:90:4d:56:af:bd:06:
         5a:40:f9:6a:30:0c:d5:6e:67:e9:6b:53:af:e7:40:6f:1d:72:
         3c:b4:7f:1d:75:b7:9e:84:b7:98:c4:04:0b:34:3a:ef:9d:4b:
         e4:8d:d2:57:a8:fa:f5:5c:9d:cf:1e:0f:79:9d:e8:32:f0:ce:
         9b:ab:71:e7:32:6b:c4:fc:bd:cf:ab:11:68:29:d6:a0:c1:80:
         a9:57:cf:a5:ad:75:c6:61:de:40:89:46:49:55:56:ca:9e:dc:
         47:bc:01:dc:b2:3e:3a:3b:de:ab:b7:2a:1f:e3:54:81:50:f8:
         e8:5d:32:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:26:11 2025 by rpki-client