Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf461c65-6fe2-31e6-aed4-b7bd0efbe0a5.roa
File:                     bf461c65-6fe2-31e6-aed4-b7bd0efbe0a5.roa (raw, json)
Hash identifier:          ER4INjUNYXkBMq3qMPdL+E5Ybt74Q95i374B9y6jAiQ=
Subject key identifier:   CE:37:49:92:D3:18:4E:35:AC:4F:4A:E4:59:7F:EC:FB:1E:1E:62:19
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858490F7BF57FF71D41D537D59820
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf461c65-6fe2-31e6-aed4-b7bd0efbe0a5.roa
Signing time:             Mon 03 Mar 2025 02:00:39 +0000
ROA not before:           Mon 03 Mar 2025 02:00:39 +0000
ROA not after:            Sun 01 Jun 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        172.69.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0f:7b:f5:7f:f7:1d:41:d5:37:d5:98:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  3 02:00:39 2025 GMT
            Not After : Jun  1 01:00:39 2025 GMT
        Subject: CN=3a1876c0-c1d3-4bdd-8167-36310c3226ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e2:50:de:51:45:ea:85:72:fe:67:e0:60:9e:
                    ba:88:53:6e:f7:5a:a5:d3:39:de:be:8b:4f:dd:cc:
                    8a:b9:4d:ab:61:fd:79:d4:36:6f:6e:69:16:b3:ea:
                    b1:dd:3f:aa:3c:05:d8:ce:82:7a:3a:28:60:2b:8f:
                    cc:aa:ce:94:d0:07:df:bf:ee:5d:42:af:b9:ec:b0:
                    7f:01:3b:58:b4:08:5d:be:4b:46:f2:40:76:35:fd:
                    40:d1:94:e2:ec:8e:4a:ea:31:dd:f0:1c:e0:59:ad:
                    97:e2:e3:d5:bc:74:18:17:2b:de:5c:e3:9f:c4:b7:
                    68:d7:c9:34:2e:cd:cb:e5:91:17:c0:77:8f:ce:c8:
                    14:de:d4:05:11:a6:8d:d9:74:60:4c:5e:2e:73:56:
                    af:75:62:2a:89:62:86:bb:3c:aa:60:c8:77:29:11:
                    ab:1e:9e:ae:d7:2f:0e:6d:35:3e:f2:62:6a:2c:90:
                    58:71:c7:db:f8:3b:47:a3:0e:9a:80:e8:88:54:b2:
                    64:56:c3:8b:2d:45:dc:e3:52:03:fb:43:5e:3b:c5:
                    18:ef:31:62:a2:fe:92:2b:fb:19:15:3f:61:f4:5a:
                    e7:f1:70:c0:ee:5b:34:8c:5f:91:5b:4e:e6:3a:80:
                    de:52:cb:37:f3:e2:93:0d:b3:a8:bf:9b:38:1d:e9:
                    2a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:37:49:92:D3:18:4E:35:AC:4F:4A:E4:59:7F:EC:FB:1E:1E:62:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf461c65-6fe2-31e6-aed4-b7bd0efbe0a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:55:6f:cf:02:3d:84:93:d2:72:02:1f:e1:bd:01:59:7d:96:
         04:19:8b:e8:c6:65:2a:7e:3f:fb:85:8d:74:db:90:99:b8:ec:
         be:40:7b:d3:20:84:86:59:26:e8:ee:10:de:ab:61:5b:37:69:
         8c:05:38:13:e0:15:f0:5c:fd:4b:c2:fa:79:d8:de:0f:dd:0c:
         fb:b4:28:b1:c2:b5:10:de:31:0c:e6:a0:1d:65:42:b6:a2:49:
         88:77:40:ba:2a:c7:ae:91:77:6e:fe:1d:05:ed:d5:d7:ff:d2:
         01:f7:87:d1:ef:25:f6:3e:00:d5:ff:fb:dc:b5:c2:66:65:62:
         d1:10:a3:cc:db:b1:ee:dd:95:bc:cf:21:fd:87:59:b4:53:8a:
         3a:0c:11:fa:1f:de:da:74:35:e9:a2:d0:ae:56:67:71:8e:a7:
         e7:41:c5:55:fb:dd:e5:8e:58:d3:28:f7:a9:dd:a4:e3:1a:31:
         4e:42:b7:2a:83:40:fe:2b:d7:47:11:c7:59:eb:bf:8e:00:a1:
         4e:67:dc:20:b1:70:bc:98:5b:60:ca:76:68:cb:af:3c:bd:64:
         fb:3f:61:f6:1b:5d:1f:5c:0d:ee:35:00:b4:42:9d:c3:9f:24:
         58:f9:29:f2:d8:d9:0a:7e:d6:07:92:ec:0c:6e:bf:24:0b:95:
         90:7f:68:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:34:16 2025 by rpki-client