Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a807c1cc-e569-31f5-9f7e-47fc4f3a6bc8.roa
File:                     a807c1cc-e569-31f5-9f7e-47fc4f3a6bc8.roa (raw, json)
Hash identifier:          CuvaCPIMKKPM2h21DGVIhSqcTOijRHNKMV3Td39icEU=
Subject key identifier:   50:F8:1C:6B:74:C3:F4:FB:2B:60:15:E6:40:3C:EE:A2:2B:E4:BD:CA
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584910E1764DF81CE855525E0700
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a807c1cc-e569-31f5-9f7e-47fc4f3a6bc8.roa
Signing time:             Mon 03 Mar 2025 14:00:53 +0000
ROA not before:           Mon 03 Mar 2025 14:00:53 +0000
ROA not after:            Sun 01 Jun 2025 13:00:53 +0000
asID:                     13335
IP address blocks:        172.71.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:10:e1:76:4d:f8:1c:e8:55:52:5e:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  3 14:00:53 2025 GMT
            Not After : Jun  1 13:00:53 2025 GMT
        Subject: CN=338bff57-d28e-4cd1-a303-870742fc0871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c3:ba:9d:21:a3:8a:0d:b9:58:6d:23:37:94:
                    49:78:d6:d4:87:b0:50:d9:7c:98:67:34:f2:8c:7a:
                    93:35:1a:d0:f4:ef:04:2c:30:55:d2:d8:18:95:96:
                    96:09:a5:4d:75:6e:fe:1c:3c:8d:ac:bb:a0:a1:d1:
                    e1:46:af:13:ad:1b:de:5c:10:be:7b:31:18:e4:1a:
                    a1:e6:fb:68:8e:64:a7:9f:45:dd:eb:7c:e9:4d:f0:
                    bf:04:58:e3:5a:fb:7c:7d:4e:1b:ec:b3:0e:b6:6e:
                    0b:89:b5:ea:4e:d6:0b:b5:4d:83:c7:e4:a3:6a:13:
                    44:b9:cb:cb:eb:b0:20:f3:bb:7d:90:1a:a0:9b:77:
                    b8:69:05:68:00:65:0b:53:7f:79:2d:09:7d:ee:fe:
                    79:42:ab:72:c5:c7:07:f8:5d:fe:cd:ff:72:39:e8:
                    90:ea:b1:58:d1:7b:e7:4f:f4:4d:eb:a0:1a:0d:25:
                    b5:e4:dc:6d:24:f1:cd:78:68:f1:35:ea:04:52:3b:
                    7d:fb:3d:ff:fc:f9:c4:52:36:36:0d:2f:19:27:3d:
                    2e:ce:a8:f2:f3:a9:ab:9b:ec:79:ea:a3:c1:12:eb:
                    fd:95:9b:8e:f9:5a:28:cd:d7:dd:2e:01:f7:4f:c5:
                    7d:2e:a3:b9:af:80:44:e3:d1:e7:95:4a:20:60:5b:
                    f2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F8:1C:6B:74:C3:F4:FB:2B:60:15:E6:40:3C:EE:A2:2B:E4:BD:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a807c1cc-e569-31f5-9f7e-47fc4f3a6bc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:b5:a9:43:b2:f5:bb:c8:84:81:62:15:be:ba:fe:2a:13:6a:
         06:b9:d6:60:74:d6:b2:b1:9c:e7:b8:42:89:d7:45:e3:83:43:
         c8:0e:01:00:3d:a0:b7:97:29:d7:1e:57:e7:02:42:7d:32:e7:
         b8:a3:21:e5:1b:92:75:77:98:fd:b6:5e:3e:66:25:6f:f3:60:
         77:b0:fe:56:7c:c5:e4:8b:55:40:93:a6:d7:d3:c3:ac:7d:9f:
         9a:30:96:1d:b5:ad:f7:00:0d:9c:42:0b:d5:a6:8c:d4:c0:52:
         3d:5f:c2:87:08:3f:65:5a:c4:2e:21:6a:51:68:42:40:f3:27:
         25:ab:e0:05:b0:ad:e0:08:ad:70:26:a0:ef:c4:54:9c:25:d1:
         91:df:c1:95:b2:26:82:2a:c9:fd:00:6d:96:07:ec:b9:e2:79:
         7c:a2:40:ee:72:b3:da:8f:d1:4c:39:7c:4e:9a:9e:f0:ef:1b:
         9d:ec:36:91:22:fe:57:3d:84:36:f4:43:36:c0:57:f4:36:32:
         90:90:5e:6b:b3:69:98:1a:7e:74:bd:3d:2c:41:7b:d3:ea:b2:
         91:3f:92:95:b2:b1:82:41:3f:a5:30:0e:42:cf:60:21:c2:b5:
         47:04:b0:df:ba:89:e0:6c:b3:0c:06:39:14:43:f8:60:81:64:
         73:33:8f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:19 2025 by rpki-client