Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bc929892-dc70-35d5-ad0d-2bb9fc887f18.roa
File:                     bc929892-dc70-35d5-ad0d-2bb9fc887f18.roa (raw, json)
Hash identifier:          9T9V4SqpICxhFFYX/BOR1pw3iFK8nBILminabjwzEsg=
Subject key identifier:   59:0F:26:72:F0:F7:78:37:5F:DE:95:2F:C3:28:4B:53:04:59:71:C7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584910E172AEFC7B973E58390A00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bc929892-dc70-35d5-ad0d-2bb9fc887f18.roa
Signing time:             Mon 03 Mar 2025 14:00:53 +0000
ROA not before:           Mon 03 Mar 2025 14:00:53 +0000
ROA not after:            Sun 01 Jun 2025 13:00:53 +0000
asID:                     13335
IP address blocks:        172.71.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:10:e1:72:ae:fc:7b:97:3e:58:39:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  3 14:00:53 2025 GMT
            Not After : Jun  1 13:00:53 2025 GMT
        Subject: CN=9631bb30-96fd-4704-ae0b-1cbb0ba19de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8c:11:7b:5a:93:fd:b9:06:69:f5:b9:5a:e8:
                    2b:52:bc:cb:73:43:ed:44:1e:59:28:3a:75:d2:4c:
                    bb:ae:3c:c6:6b:f3:95:86:74:b3:98:86:1d:d0:0e:
                    fa:66:a1:b5:16:d5:4e:b8:19:7a:a2:64:6f:68:56:
                    8c:5d:02:0f:e9:fa:db:61:21:52:25:83:06:2b:a6:
                    ad:fc:14:a2:ae:2e:34:00:ac:78:9f:1c:ad:49:21:
                    ad:49:b0:55:eb:04:8b:3e:40:33:cd:34:f9:c0:5e:
                    2d:77:10:26:ee:b1:ff:44:e6:bc:54:17:c8:e9:3d:
                    41:c8:b7:81:4d:d2:a1:29:7b:30:b7:68:bd:b6:46:
                    c6:2a:e4:2d:06:10:e8:da:07:29:0f:ed:e1:b3:29:
                    84:0e:2e:04:c9:9d:06:cf:e5:a7:bd:d6:37:db:42:
                    16:ab:8b:36:7c:9a:1a:0f:b2:0d:f6:d1:14:57:36:
                    ef:49:40:b0:fb:91:ea:33:46:83:10:21:46:13:16:
                    78:56:f0:ba:df:77:42:72:06:ed:47:16:4c:a4:e4:
                    e4:ce:bf:58:73:bb:c6:b7:f3:27:51:48:a1:f9:c8:
                    7f:4f:7c:a4:12:54:55:7c:19:4d:c6:18:9d:56:90:
                    6a:3c:64:0e:7f:f8:10:c2:ef:13:fa:02:64:f2:51:
                    e8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0F:26:72:F0:F7:78:37:5F:DE:95:2F:C3:28:4B:53:04:59:71:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bc929892-dc70-35d5-ad0d-2bb9fc887f18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:e1:63:70:33:02:64:07:2a:81:2c:be:d0:1d:12:6c:07:d7:
         12:2d:6f:ca:3b:8e:fc:94:26:e7:56:f0:42:cc:34:f1:bc:7c:
         96:d4:b2:f6:57:54:c9:4a:c9:fe:07:ec:c8:07:0a:1c:dc:3d:
         4c:a4:6c:1f:00:37:29:50:4c:84:35:81:ad:a2:27:89:5d:9e:
         bc:1d:f1:47:a5:1e:87:78:5c:c3:7e:c5:48:fc:12:41:73:f1:
         36:8f:4f:3d:35:35:b9:07:3a:74:9e:e1:17:e2:79:f8:c9:fa:
         03:dc:ae:57:0d:2d:8f:f6:d3:40:7f:39:a4:b6:21:0a:74:fd:
         ef:3c:7c:c0:00:49:b9:30:de:9e:f2:95:9d:13:4e:e0:9a:d1:
         e5:c1:84:a9:50:6e:10:71:27:ec:9a:1d:cb:30:cc:05:7d:6f:
         5a:3c:84:b1:3e:12:9b:97:82:ae:b2:dc:5b:4d:e1:f4:5f:80:
         a7:c4:02:88:9b:97:c9:06:e2:77:84:a4:70:20:4b:d9:27:cf:
         89:04:33:33:e7:69:3f:4f:8d:dc:29:cb:64:f5:93:48:56:e1:
         06:13:49:1b:37:f6:e1:e4:be:05:fb:57:3b:5b:bd:fd:39:05:
         35:42:29:9f:2c:c7:aa:0a:42:c0:51:18:9b:7c:35:0d:0c:76:
         03:77:12:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:44:07 2025 by rpki-client