Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b9c86172-b02d-3dd5-8125-5c1bf0252e9e.roa
File:                     b9c86172-b02d-3dd5-8125-5c1bf0252e9e.roa (raw, json)
Hash identifier:          4wAPu9t+FuB5dJzbQR/EZkbERj0pkk+r9jDdQRKM9V8=
Subject key identifier:   73:53:33:39:5E:D1:FC:8B:12:90:65:73:85:57:21:4E:D2:1C:25:34
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849EA8546F9B0E702D49D0766C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b9c86172-b02d-3dd5-8125-5c1bf0252e9e.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.69.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:46:f9:b0:e7:02:d4:9d:07:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=9146d1c1-4eac-45e9-b2bc-6796488a1ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1e:24:ae:8a:8c:7d:b1:37:3e:4a:0c:50:51:
                    97:27:52:98:aa:c1:fb:8d:76:2d:8a:c8:81:21:ea:
                    5d:79:13:f3:91:fa:2d:97:4f:c7:db:1b:25:be:54:
                    6e:1a:6e:46:a7:86:a3:f6:25:0a:8a:a9:f6:84:d1:
                    b3:41:b6:01:da:6c:52:d0:62:85:5c:5f:1f:82:e0:
                    a8:ff:62:9f:87:de:6a:6c:28:ad:60:11:32:81:13:
                    45:ef:47:94:63:a2:9d:9b:80:58:38:ba:2e:e8:e8:
                    e4:ef:58:55:1b:2b:b3:07:0c:60:aa:ec:36:1c:b5:
                    35:c8:ab:c6:3c:24:08:a8:c8:60:1e:c2:4b:10:50:
                    73:c6:8d:98:a8:ad:bc:13:f1:71:76:13:4c:2b:fd:
                    6f:58:fc:18:cb:aa:3b:51:87:cd:75:62:f2:28:73:
                    d1:8a:53:0e:5a:bc:71:80:56:6b:cf:51:65:8b:bf:
                    10:25:56:cb:41:59:2b:e7:a9:6d:55:fb:f4:78:b3:
                    96:54:67:1f:58:0b:56:15:46:21:0b:33:32:ee:8c:
                    8c:5d:fb:55:49:55:4a:13:1d:bd:e5:08:ed:fa:0f:
                    c5:05:a3:76:58:a7:48:24:42:91:02:f2:3a:d0:aa:
                    84:10:e3:29:cb:b6:25:e2:9f:26:12:07:70:0e:3f:
                    67:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:53:33:39:5E:D1:FC:8B:12:90:65:73:85:57:21:4E:D2:1C:25:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b9c86172-b02d-3dd5-8125-5c1bf0252e9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:40:c7:56:dc:a0:da:4b:66:a5:9c:84:6b:ab:7c:f3:fe:be:
         45:14:35:e1:8c:39:d8:44:47:43:77:05:57:b8:34:b6:14:79:
         11:96:40:97:20:e2:aa:64:34:7b:69:2e:db:7f:90:dc:bc:ed:
         c9:ee:c3:a4:27:17:c3:8f:12:0c:ff:4b:fd:05:bf:5a:42:3c:
         54:5e:8f:d0:86:3e:f5:3b:67:1d:34:d8:20:7a:2d:d5:fa:c2:
         b9:57:b2:fc:77:55:f5:82:5f:7f:93:56:d8:2e:a5:c6:2c:59:
         85:03:4f:8c:b4:92:f4:7a:4d:4a:0b:91:bb:02:9b:cf:b6:f4:
         1a:f9:b2:fb:f2:50:c3:1a:48:cf:ae:32:5e:01:7f:b2:1a:ce:
         8b:c0:9b:8b:55:74:5a:35:f2:d0:91:79:07:af:15:7a:88:c5:
         45:96:85:7c:e7:de:b7:59:e8:b9:53:e2:51:05:f9:5b:e4:fe:
         6a:ab:aa:b1:21:54:3a:f4:c9:aa:36:4d:a5:07:f4:62:89:df:
         34:a9:a1:42:27:1e:65:dc:d1:4c:83:14:60:e5:9f:bc:81:21:
         2a:3d:8a:1a:31:a5:16:40:a0:db:52:4a:ce:4a:32:9e:12:92:
         a4:80:14:58:6d:50:51:4a:74:9c:3c:ff:35:e9:1a:8f:ba:26:
         c7:11:6b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:48:36 2025 by rpki-client