Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/998007a9-861a-3535-a624-dfaaedcb3269.roa
File:                     998007a9-861a-3535-a624-dfaaedcb3269.roa (raw, json)
Hash identifier:          bZUzViLOAUy9ik7CCaWOXTw300sbqtJ98fgQ0cLl+Oc=
Subject key identifier:   F7:3A:F9:72:03:78:8A:8E:DF:9F:D0:CD:4D:1B:AF:B2:72:CD:2C:6E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849EA8545ADF288DBA275374C80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/998007a9-861a-3535-a624-dfaaedcb3269.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.69.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:45:ad:f2:88:db:a2:75:37:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=e6901dc3-4000-48ec-ac13-55c75d21a2f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f8:4e:ff:8f:39:75:97:54:07:ba:fb:f4:15:
                    c6:bf:e6:23:5f:d5:f8:1a:a8:b5:08:38:ef:a9:86:
                    64:5a:27:bc:48:b1:d8:ff:21:7c:14:0a:78:64:48:
                    af:74:ac:f6:a0:78:2d:37:57:8f:40:62:fb:66:6d:
                    eb:05:df:9e:a2:2f:85:39:5d:ff:76:e6:32:58:34:
                    05:7c:14:0b:90:c0:bd:09:e7:66:a4:c6:10:81:0b:
                    43:c4:2a:3c:06:97:62:77:c8:1e:44:34:67:94:aa:
                    65:43:f8:81:4d:73:8b:30:4c:9a:e8:26:d9:5d:58:
                    05:27:69:03:8a:95:36:a4:5f:2c:22:51:14:75:44:
                    d9:79:a6:0d:c6:78:2c:7a:a4:36:62:b5:99:66:e8:
                    b6:ec:4f:7c:c8:67:53:3c:7f:1a:e4:bf:f8:35:23:
                    57:cd:03:db:68:e2:99:9e:4c:9b:2d:73:d7:45:d8:
                    a9:45:0f:d7:ab:50:ca:1d:9c:a8:91:4d:d9:d2:fd:
                    87:8b:e5:a6:a6:99:e6:c8:73:ef:48:73:94:ef:78:
                    da:60:00:b1:fb:a2:66:d1:cb:1d:e6:e7:eb:4b:b6:
                    da:e4:f0:c3:0e:40:9e:4a:a7:3a:b9:b4:27:d1:5c:
                    cf:ea:41:f4:79:62:f5:32:39:f6:9f:de:f8:07:91:
                    bf:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3A:F9:72:03:78:8A:8E:DF:9F:D0:CD:4D:1B:AF:B2:72:CD:2C:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/998007a9-861a-3535-a624-dfaaedcb3269.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:d0:15:6d:1d:f8:52:9f:8d:13:d3:bf:09:2c:33:6a:c5:af:
         7c:07:48:6f:66:fe:c9:7e:53:46:73:b1:fd:14:24:ea:ef:88:
         e5:44:49:f6:05:98:99:f1:26:bc:98:e3:54:f5:90:da:c5:86:
         bb:a0:d3:ed:9f:be:8f:48:a9:1c:2b:42:94:4e:a3:4a:d9:6a:
         7e:98:9a:99:0c:b7:52:2f:a8:ce:0b:d6:f8:b7:c6:28:c3:fb:
         dd:01:ca:7b:9a:76:90:11:a9:6e:17:01:fd:a7:85:49:cb:25:
         09:32:a8:c7:06:c3:36:39:60:1c:d9:a3:25:30:a4:32:c9:15:
         5d:c5:48:f2:23:ee:b5:bb:fc:e4:52:b2:54:8a:91:45:22:1e:
         d1:ee:a0:6e:91:82:03:f8:95:73:6f:99:87:7e:6c:8c:66:0c:
         8f:04:15:12:83:d6:17:28:4d:00:48:1d:91:ce:a0:53:6a:5b:
         59:c7:22:ca:10:ed:63:e6:5d:c6:b4:66:28:e7:c6:43:e1:34:
         81:06:dd:0d:1f:11:23:95:6b:31:51:8e:1c:5d:9a:88:e1:b2:
         8e:7e:c8:78:ed:7b:b8:3d:c2:4d:b2:86:0d:25:42:94:11:18:
         4c:66:c0:83:c0:62:a2:d7:9d:fc:65:14:2e:0a:79:46:e4:44:
         8f:84:73:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhUWt8ojbonU3TIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk
ZTY5MDFkYzMtNDAwMC00OGVjLWFjMTMtNTVjNzVkMjFhMmYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/hO/485dZdUB7r79BXGv+YjX9X4Gqi1CDjv
qYZkWie8SLHY/yF8FAp4ZEivdKz2oHgtN1ePQGL7Zm3rBd+eoi+FOV3/duYyWDQF
fBQLkMC9CedmpMYQgQtDxCo8Bpdid8geRDRnlKplQ/iBTXOLMEya6CbZXVgFJ2kD
ipU2pF8sIlEUdUTZeaYNxngseqQ2YrWZZui27E98yGdTPH8a5L/4NSNXzQPbaOKZ
nkybLXPXRdipRQ/Xq1DKHZyokU3Z0v2Hi+WmppnmyHPvSHOU73jaYACx+6Jm0csd
5ufrS7ba5PDDDkCeSqc6ubQn0VzP6kH0eWL1Mjn2n974B5G/QwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPc6+XIDeIqO35/QzU0br7JyzSxuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTk4MDA3YTktODYxYS0z
NTM1LWE2MjQtZGZhYWVkY2IzMjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHQFW0d+FKfjRPTvwksM2rFr3wHSG9m/sl+U0Zzsf0UJOrviOVESfYF
mJnxJryY41T1kNrFhrug0+2fvo9IqRwrQpROo0rZan6YmpkMt1IvqM4L1vi3xijD
+90BynuadpARqW4XAf2nhUnLJQkyqMcGwzY5YBzZoyUwpDLJFV3FSPIj7rW7/ORS
slSKkUUiHtHuoG6RggP4lXNvmYd+bIxmDI8EFRKD1hcoTQBIHZHOoFNqW1nHIsoQ
7WPmXca0ZijnxkPhNIEG3Q0fESOVazFRjhxdmojhso5+yHjte7g9wk2yhg0lQpQR
GExmwIPAYqLXnfxlFC4KeUbkRI+EczE=
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:28:52 2025 by rpki-client