Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/955b5c5b-556c-3812-bac1-0a6fae51e8ad.roa
File:                     955b5c5b-556c-3812-bac1-0a6fae51e8ad.roa (raw, json)
Hash identifier:          V0/VpHo/nUPAGnmV7FOO0/4k2wVxBpzeLJfq1LKCJPg=
Subject key identifier:   6D:D0:89:40:CC:D3:16:D7:A4:5E:11:BF:A9:C1:A5:59:8C:DB:77:46
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584908818CC725ED77190672A000
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/955b5c5b-556c-3812-bac1-0a6fae51e8ad.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        172.65.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:8c:c7:25:ed:77:19:06:72:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=a12160de-fed8-4b63-90a5-47d8f0340530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:93:1a:8f:e3:30:1a:82:b6:fe:2e:6f:fa:92:
                    e5:e6:cc:5e:b9:b3:e7:35:17:a9:c1:fe:39:d6:ae:
                    c6:cf:55:f6:bf:e0:cc:0d:a7:a2:18:d1:f8:68:6a:
                    47:90:a7:cd:a7:55:f0:2a:da:b2:89:f6:e0:0a:a9:
                    65:6d:4a:16:d5:ae:4e:57:16:39:84:4b:51:0c:44:
                    e1:78:cf:29:80:be:74:58:23:a6:fb:a6:11:d7:2b:
                    cb:0c:56:b5:45:9d:9e:8c:22:24:51:9a:4a:7b:6f:
                    cb:97:ab:f2:1b:12:0d:27:16:15:be:15:64:47:b3:
                    86:99:d4:5f:03:66:d1:39:a5:e7:67:34:db:78:7f:
                    ec:37:f8:7b:6e:02:ff:b1:dc:31:4c:a8:ea:37:0d:
                    30:f9:53:e9:14:7f:9a:e1:57:f1:ba:4f:d3:be:f2:
                    9a:0a:4a:3d:06:4c:3c:65:af:19:72:d3:2c:d2:25:
                    fd:4c:3f:b8:ca:72:1a:78:b7:84:8e:f1:22:6b:21:
                    a8:86:b6:1e:73:9c:54:32:2a:19:31:18:3c:03:f3:
                    c7:1a:f8:3a:51:7a:4d:4d:21:a9:ac:6d:a2:68:93:
                    b5:c0:3a:93:d2:99:bf:b8:42:ba:69:25:1e:41:21:
                    77:4b:b8:a6:98:6d:d0:5f:8f:37:d3:11:2b:69:a4:
                    f9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D0:89:40:CC:D3:16:D7:A4:5E:11:BF:A9:C1:A5:59:8C:DB:77:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/955b5c5b-556c-3812-bac1-0a6fae51e8ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.65.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:5e:3e:ca:6b:0f:57:b3:b8:f1:32:cf:a5:cf:50:af:43:13:
         bb:ee:e6:af:f5:36:e9:57:bb:89:19:88:23:3f:a7:72:4e:94:
         a2:90:fc:51:7c:7b:59:2e:74:fe:76:a6:0a:f8:90:c1:d0:15:
         61:3b:98:fd:f4:59:0e:11:45:c4:5e:cc:8f:a6:5c:f4:a4:61:
         df:09:d2:92:16:12:a3:ef:29:6f:09:32:1e:6d:45:56:c4:8b:
         15:17:31:17:2f:09:c3:b6:8a:17:e7:64:8e:bd:c3:83:15:44:
         cc:56:bc:b3:dc:01:8a:33:3e:bd:a5:90:f6:99:64:33:bc:75:
         1c:45:04:30:02:ba:63:08:b9:d5:f8:e0:d3:cf:e4:af:0a:b9:
         23:19:4a:36:41:29:86:10:64:ea:89:9b:72:3f:bb:c9:1a:2a:
         56:9a:86:eb:6e:08:2d:b9:13:bb:a9:85:13:a0:14:85:f7:61:
         74:17:12:e1:a9:dd:b6:8f:0f:ca:f8:72:96:ed:2d:b6:f5:a9:
         53:6d:c8:9e:94:13:cf:80:25:63:9d:c2:03:e3:bf:89:5a:bc:
         dc:a0:73:96:13:66:5f:5c:c6:d1:31:02:b2:19:96:a3:eb:9e:
         5a:a2:99:fb:96:bc:08:b6:5b:1f:a1:e2:f0:ce:54:e9:a4:cf:
         14:73:19:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:45:28 2025 by rpki-client