Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/98b5ce17-378e-3e63-ba11-da47f580b202.roa
File:                     98b5ce17-378e-3e63-ba11-da47f580b202.roa (raw, json)
Hash identifier:          Od5TlnM9/sxh8N0uHkqsa9yErobbVJiprXIbhOXtM2A=
Subject key identifier:   0B:E9:11:DB:CC:DF:31:95:9F:64:05:BF:42:1B:86:9F:F9:8B:F1:94
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E7BA9FBAD67AC856775AD600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/98b5ce17-378e-3e63-ba11-da47f580b202.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        172.68.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:9f:ba:d6:7a:c8:56:77:5a:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=3d83fece-32eb-4743-bab0-52879c647ce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ef:63:09:2b:c9:26:50:4a:6d:d5:1e:c9:5b:
                    d6:e0:05:8f:b1:49:51:45:39:24:1e:17:40:3c:31:
                    f7:3c:e5:7f:4c:4d:85:d8:f9:eb:50:b8:5f:ed:5f:
                    0e:6d:f1:7b:72:63:b5:c0:4c:1a:0a:7d:97:67:a2:
                    79:df:8d:4f:17:8f:9d:ca:28:8e:88:fe:58:4b:20:
                    b7:ad:6a:7a:63:89:34:25:50:c5:76:a0:cd:78:ae:
                    45:8d:79:9a:1d:54:6b:2a:ae:79:6e:5f:02:a2:55:
                    6b:90:5f:61:02:9e:9b:c8:f1:29:f2:7d:d1:43:56:
                    11:09:e8:84:91:85:a8:0f:69:24:21:52:a2:c2:41:
                    84:2e:b8:24:82:5c:39:50:ad:da:8c:f2:30:4e:1e:
                    16:6d:b5:78:88:6b:ae:ea:c1:10:d9:39:70:80:f3:
                    aa:51:91:ec:ca:1e:67:73:51:aa:67:47:0e:03:72:
                    d5:fc:8f:8e:b6:e3:29:2b:1a:ee:d8:ff:d1:98:a8:
                    03:b9:ff:fa:aa:bb:7b:ac:b9:5a:cb:9f:74:c1:01:
                    e1:b3:c1:cf:59:62:a2:63:b5:13:14:28:fa:77:bf:
                    d0:f0:7d:6c:6e:d4:85:36:6e:04:4c:0d:14:17:40:
                    d7:f5:29:4c:68:06:b9:94:cf:56:30:d8:6f:9c:4c:
                    81:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E9:11:DB:CC:DF:31:95:9F:64:05:BF:42:1B:86:9F:F9:8B:F1:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/98b5ce17-378e-3e63-ba11-da47f580b202.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:36:ba:c2:e3:e2:b6:8c:67:99:65:76:75:fb:71:e1:40:8c:
         84:f4:bf:c5:d8:c6:4d:84:db:e1:4b:b3:0e:19:df:cd:a8:c5:
         fb:81:f7:41:f1:c8:0e:41:5d:98:56:02:dc:3d:3e:fd:58:0a:
         7e:03:cb:7c:74:32:53:e2:59:1e:1d:f4:e4:ad:b4:99:83:ca:
         4e:3d:b6:be:ea:1f:3a:93:18:75:68:ed:bc:31:ae:26:89:1c:
         be:60:48:4f:91:d8:e4:62:d5:57:6b:05:f0:73:68:07:c5:a5:
         c9:c9:f1:69:27:0c:16:f5:51:2a:d5:09:53:80:a8:15:f6:89:
         48:5f:8c:e0:bd:ef:b3:5f:e9:90:1c:4c:c0:85:22:97:40:b5:
         21:62:8a:62:9c:f8:81:ee:d8:78:5d:db:7a:ee:e0:d5:2a:aa:
         ed:5b:de:fb:65:ba:38:80:77:5d:bc:ad:b8:51:3e:dd:d7:b4:
         09:ab:44:3e:39:85:e7:9e:6e:6d:97:ee:cc:72:b9:e1:f7:fa:
         82:59:8d:f0:9e:69:8b:a1:d7:cc:6f:90:82:e4:63:b1:07:b1:
         40:d4:2e:25:9d:16:99:a1:40:0e:a4:a6:02:64:dc:c0:e8:81:
         e9:3d:ff:74:1f:ee:f8:c0:77:3b:7c:7e:e6:22:5c:0d:53:9d:
         2c:8d:cd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:14:12 2025 by rpki-client