Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bd6aa06b-58c1-3898-a006-bb70908ee2b6.roa
File:                     bd6aa06b-58c1-3898-a006-bb70908ee2b6.roa (raw, json)
Hash identifier:          Zv1d686M49ycTy6zlp/BfQW6SiAOdcIFlhCEPmeVhzU=
Subject key identifier:   E1:0C:B3:91:7B:9D:9A:FE:4B:A6:E9:09:6F:7D:EA:43:F4:22:A3:5E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E7BAA0CE352D09693186F080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bd6aa06b-58c1-3898-a006-bb70908ee2b6.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        172.68.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:a0:ce:35:2d:09:69:31:86:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=c52a54e9-a7d1-4972-a2d3-d8d880b32a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:71:fa:15:38:e9:64:15:e0:6d:bf:d8:1a:1f:
                    6a:b7:c1:87:1a:45:9e:d9:fc:58:02:e4:61:7f:37:
                    c8:2c:e0:a0:72:e8:44:d1:b7:5e:f6:bb:a8:fb:76:
                    12:78:04:f6:93:e9:61:01:72:4b:07:62:ef:bf:c0:
                    03:a1:88:ca:f1:bd:5b:86:54:3a:c4:12:78:c4:bb:
                    3c:0f:a1:fa:3c:60:a1:11:0c:c0:bb:38:0b:ee:bd:
                    ed:88:59:a9:94:a3:65:7a:f1:0e:e6:75:c6:91:24:
                    71:d7:d7:9e:38:5a:5b:1f:76:a8:14:3d:a7:5f:de:
                    8a:b4:d6:24:3f:cd:b8:24:71:99:ed:92:4f:bc:3e:
                    92:aa:a7:d9:cc:18:63:1c:df:7e:e1:d2:a0:c3:0c:
                    c4:7f:92:87:40:f5:4c:15:44:09:23:f8:99:6e:92:
                    e8:c6:44:e6:26:72:04:d9:89:c5:dc:04:e0:22:44:
                    88:f1:56:b7:fe:fe:68:29:0e:fa:02:fc:10:11:a4:
                    b8:7d:d4:ea:09:88:68:c0:ca:32:b0:08:e9:12:97:
                    9f:a1:8c:10:21:da:a9:b8:c1:f3:30:1c:12:e4:25:
                    bf:72:d6:20:5d:60:90:cc:22:af:19:57:9c:9f:69:
                    b9:51:47:a0:67:19:b7:10:98:ba:34:59:39:8f:99:
                    6c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0C:B3:91:7B:9D:9A:FE:4B:A6:E9:09:6F:7D:EA:43:F4:22:A3:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bd6aa06b-58c1-3898-a006-bb70908ee2b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:2e:e8:78:2a:85:44:a3:c7:c4:ff:3d:83:9a:f4:5c:24:60:
         a6:cf:67:64:8c:64:cd:9b:ce:0b:3a:7b:f0:f5:ef:e3:3a:54:
         1a:d3:28:ab:f3:1d:66:df:82:fb:0c:ad:a5:d8:a7:6f:3e:39:
         0e:10:51:7e:45:7b:e9:b5:90:d5:83:7d:8b:de:ef:65:68:b8:
         ba:42:b1:71:1b:cc:4b:27:67:2a:46:f1:24:b9:08:80:60:23:
         e7:6a:eb:7c:cc:e6:99:39:80:99:2d:c9:cd:41:d8:3d:bf:90:
         a6:ef:76:8f:0f:d3:79:fd:e8:e5:8f:16:0a:30:64:9c:c7:01:
         5f:a5:00:d9:98:84:75:7c:ce:16:c5:f1:da:e8:99:fe:5c:82:
         d7:83:a5:08:d1:f2:6f:a2:03:d3:be:12:b7:40:b6:54:c4:f8:
         d2:9f:8c:6a:6b:b1:42:2f:c6:6d:e4:ba:39:7b:f6:30:0d:4c:
         aa:e5:e3:11:25:7f:b7:78:fe:ec:09:fa:aa:32:23:9d:7a:a7:
         a4:66:ce:7c:bb:07:00:6b:ef:fd:e5:68:74:53:51:19:55:22:
         67:c8:bc:08:85:44:01:53:9d:d8:c1:d9:9a:a8:65:bc:f0:aa:
         d9:93:39:65:7e:8a:f6:ea:57:25:23:06:14:47:d8:67:23:dc:
         9a:f9:f3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:10:17 2025 by rpki-client