Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afb42260-e1c7-3d68-bc07-b042edb33c35.roa
File:                     afb42260-e1c7-3d68-bc07-b042edb33c35.roa (raw, json)
Hash identifier:          rE8yc+axJRcyNhf595ww6BNniFvAnCIByfoNdN92ofE=
Subject key identifier:   3F:69:B0:8F:63:7F:AA:04:5C:61:74:D4:E3:C0:C0:22:C3:3B:DC:CD
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849071C067721AB4125A2AFD360
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afb42260-e1c7-3d68-bc07-b042edb33c35.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        172.69.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1c:06:77:21:ab:41:25:a2:af:d3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=77188837-d885-4a3c-ad25-32cae7b29f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:73:4a:1b:ed:1f:be:5e:f6:b3:00:8e:7b:a1:
                    87:be:90:20:6c:da:e6:20:22:a8:56:77:4c:1a:e9:
                    b3:b2:22:26:6c:61:b6:33:73:bd:db:f1:69:05:22:
                    54:1f:ed:4a:fa:09:5b:10:42:79:e3:e0:3e:40:eb:
                    aa:2b:c4:2e:6f:12:2b:f7:e0:d3:bd:2a:1d:6f:4d:
                    e2:38:7a:69:5f:57:86:b6:23:a2:d2:38:95:b1:7f:
                    28:97:47:08:ab:bf:58:75:8e:fd:ae:a1:7f:ae:7d:
                    d8:6f:4f:9f:11:f9:62:1c:4c:4e:5c:b4:6c:c3:ef:
                    2c:12:39:d8:af:79:6d:b7:6b:a9:0d:8b:5c:14:fa:
                    5a:14:ce:d4:81:87:7b:9a:23:a0:a0:85:2f:0a:68:
                    2a:3e:d4:de:ec:32:aa:1b:be:f4:3c:5a:ed:16:c2:
                    8c:96:29:6e:b8:b9:c4:ef:b1:ec:68:dd:96:db:55:
                    1b:54:2b:b2:f4:0c:3f:66:88:83:7d:16:e0:ef:e1:
                    d2:3f:0b:2b:26:bd:d8:45:8a:17:cd:bf:9c:ad:3b:
                    8c:dd:43:7b:ea:a3:49:12:31:c2:e6:2f:47:6d:73:
                    dd:bd:44:83:5a:92:56:cf:8f:2d:c6:bd:fd:25:70:
                    22:54:94:4d:45:ec:09:f9:08:8e:bc:23:f8:59:b5:
                    dd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:69:B0:8F:63:7F:AA:04:5C:61:74:D4:E3:C0:C0:22:C3:3B:DC:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afb42260-e1c7-3d68-bc07-b042edb33c35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ba:b8:46:73:18:ed:4e:b2:95:8c:3d:4d:24:80:76:b8:c6:
         67:34:a1:7b:9a:b3:3c:14:a1:81:73:3e:99:ca:22:e7:61:b6:
         57:3d:73:86:bd:90:d2:3a:8a:de:80:c5:b0:27:23:b7:75:15:
         52:7f:58:5e:b6:5a:01:a6:b6:e8:cf:37:ef:56:5a:72:2f:ef:
         c1:bb:0c:0e:ac:be:8a:a1:d3:ec:43:36:ad:2e:a5:78:fb:7d:
         29:37:ef:df:64:b7:dc:49:a2:39:8e:11:36:45:10:fa:76:71:
         7c:ca:71:69:e2:1e:82:88:17:9b:13:7e:64:c2:ab:50:52:97:
         36:8f:aa:45:2a:ea:8b:22:03:b3:a6:50:40:02:3c:80:13:67:
         66:b4:c1:f9:01:5f:4d:51:2c:d9:5f:11:98:55:fd:dc:ec:f4:
         ca:a6:f6:e7:09:d2:52:8b:e6:2a:7b:99:81:f3:1c:de:58:da:
         1a:f2:b1:93:af:25:f3:e2:d8:dc:c9:c4:5e:76:84:1f:25:29:
         82:4c:84:6b:c3:cb:f3:00:fe:20:8d:25:a1:1f:2a:5b:c1:8e:
         df:b9:1a:d9:3a:ad:74:7a:3d:89:71:60:31:ba:87:63:58:26:
         6f:79:48:7f:fb:69:32:75:1b:5b:b6:cd:57:cd:a9:4c:a8:e4:
         41:c7:80:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:48:40 2025 by rpki-client