Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b43cc595-c740-3ee2-8352-31616405c44a.roa
File:                     b43cc595-c740-3ee2-8352-31616405c44a.roa (raw, json)
Hash identifier:          wxsObsbU/ImbedbW3ezVErOFUTVO/uxQh6K5fqH/jjQ=
Subject key identifier:   95:61:A3:5C:33:55:30:83:26:DC:D9:6A:E8:64:83:94:AE:C6:48:B0
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E654FD3A6A95E7B3B09FB180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b43cc595-c740-3ee2-8352-31616405c44a.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     13335
IP address blocks:        172.70.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:fd:3a:6a:95:e7:b3:b0:9f:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=3be94721-c38b-4b4f-8eb2-d86241594c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:70:52:27:c7:ab:ef:0e:60:1c:c4:8b:26:
                    87:a4:38:81:0c:1f:fa:47:05:a2:b7:47:c9:30:97:
                    c2:34:1d:a4:ab:bf:09:7a:54:36:69:8b:89:a6:dd:
                    1f:85:e5:14:be:ed:5b:48:3d:36:55:81:b0:fb:6f:
                    33:69:0d:44:20:d0:b0:55:88:36:9b:63:a3:c1:41:
                    fe:ec:af:2b:39:d9:8a:58:57:c7:e5:3b:ea:6d:c3:
                    e3:d0:21:82:18:2f:ba:ef:2b:49:c6:6f:2d:23:57:
                    76:9d:27:75:f0:6f:fe:34:4d:36:37:52:78:b6:96:
                    e8:5b:14:f6:08:44:22:58:ca:9e:47:31:3b:02:10:
                    a4:41:9e:bd:e7:8c:1e:d1:3f:8b:c7:dc:97:8e:9c:
                    c8:4b:6c:aa:96:14:0f:f8:a1:7f:ac:e1:2f:75:36:
                    ff:8e:09:fc:32:2c:33:e1:ef:d9:ae:9a:73:bb:a4:
                    28:03:2f:d8:68:b0:f2:62:9d:6d:a0:72:eb:0a:8a:
                    e5:d6:03:f4:51:25:1a:b6:e3:7b:b4:ca:9c:da:9b:
                    91:9c:10:66:ce:54:9a:36:ca:89:b4:bb:ae:df:de:
                    c6:fd:74:ed:b3:16:30:7b:09:7c:40:ff:b1:00:03:
                    a8:a3:d7:45:6e:ab:ba:4b:63:f2:9f:b1:ad:2e:05:
                    50:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:61:A3:5C:33:55:30:83:26:DC:D9:6A:E8:64:83:94:AE:C6:48:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b43cc595-c740-3ee2-8352-31616405c44a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:c8:3b:fb:05:3e:4d:52:99:69:52:23:26:ec:5c:89:50:1a:
         6d:dd:e0:d4:58:bf:6e:dd:03:35:bc:d7:90:bf:5a:7f:1b:50:
         c6:fe:06:e0:f6:c7:d6:2b:7a:36:e6:81:c0:ad:e6:85:70:09:
         a8:87:02:66:44:1f:ff:99:ed:52:38:82:0c:e4:58:5f:c2:b5:
         c7:32:6a:bb:dd:52:f8:02:ab:68:f0:5b:75:14:e7:24:75:a0:
         cf:a7:7f:90:67:b7:44:99:70:d4:13:a2:ee:56:6c:cd:37:75:
         1d:f9:83:26:a3:5c:5f:05:99:0d:d8:34:36:98:31:7a:da:d9:
         e5:1f:2f:90:75:c6:a3:50:62:70:74:88:01:82:a1:8f:b1:13:
         c4:82:be:fd:7f:a0:d6:5b:a7:26:f2:b4:16:e4:d2:43:1a:ae:
         f0:bc:ab:f4:f3:8b:ee:ac:86:e3:fd:2f:26:4d:68:86:c2:9c:
         ea:ac:f4:f8:e6:ca:41:30:8c:7f:56:3c:11:7a:85:ce:b5:60:
         f6:0d:4a:fa:eb:29:cb:47:1b:d5:b6:71:20:8d:ab:81:ca:63:
         95:22:46:a2:c8:9f:78:24:fb:ee:70:9a:97:7f:96:c4:cb:2a:
         53:0f:fb:1f:8d:23:f0:22:32:2f:67:49:c1:92:4c:ad:17:97:
         7f:e3:cc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:55:15 2025 by rpki-client