Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bfc2b50c-4641-3a58-816b-d5534b803751.roa
File:                     bfc2b50c-4641-3a58-816b-d5534b803751.roa (raw, json)
Hash identifier:          lu7bZYNqBleOu2PKXzw91UiTL3NXlIcqUJkJHfASe1Q=
Subject key identifier:   DE:49:94:71:8A:69:4C:5E:A9:93:A9:E2:5F:2F:50:BF:7B:27:9F:2D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849EA854AB79BA18D837A24BB00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bfc2b50c-4641-3a58-816b-d5534b803751.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.69.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:4a:b7:9b:a1:8d:83:7a:24:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=ef8abd31-f3f4-4307-b334-0755b3ec7e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b3:6c:8e:d7:da:5a:64:2c:42:5f:97:2c:80:
                    e0:a2:9b:d2:25:4d:aa:a7:9e:80:52:16:fd:e8:b5:
                    16:62:0a:43:fe:40:a0:45:ad:f3:bc:5a:52:a4:05:
                    ba:10:d4:aa:06:65:cf:3c:9a:7b:6a:eb:60:24:83:
                    db:e9:e1:e0:b1:b8:8f:d0:52:99:7f:a4:70:bd:04:
                    75:a5:dd:79:86:07:a6:85:06:48:11:4f:24:92:b1:
                    40:52:86:ae:f0:4e:88:c6:13:a5:e7:4c:88:26:2e:
                    3d:f2:70:98:3b:f0:2d:88:ab:e1:c0:f4:a5:42:2f:
                    be:cb:68:61:1a:9d:a7:ec:0b:3c:43:e4:12:f9:b3:
                    ff:fe:ac:76:cc:22:57:88:4b:19:8d:f9:f1:bf:6d:
                    03:11:59:8a:1c:0d:1d:d4:3a:51:e6:1c:bb:c4:86:
                    c1:df:2f:30:8b:18:43:3a:72:a5:c8:45:1f:46:01:
                    0c:79:b8:8c:65:a6:3a:45:95:d5:f1:10:0a:dc:c2:
                    64:01:5f:ed:e9:80:72:e7:07:26:39:f3:2c:e0:45:
                    b1:1c:88:3b:8b:68:61:73:d6:c2:d9:ba:f2:d9:1b:
                    8a:13:0a:a1:96:0c:8e:67:a7:fd:c0:df:03:0a:a9:
                    b5:7b:2c:7f:f9:aa:6a:84:30:5d:9a:5d:a0:6b:6d:
                    94:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:49:94:71:8A:69:4C:5E:A9:93:A9:E2:5F:2F:50:BF:7B:27:9F:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bfc2b50c-4641-3a58-816b-d5534b803751.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:10:fc:ea:b2:a9:84:3e:b1:d1:fb:2c:bb:33:08:31:6b:08:
         99:8f:0d:c7:ad:79:d5:b7:53:d5:c5:a5:18:a5:2c:3e:b6:6c:
         1d:70:9c:a2:a4:ff:20:c3:ac:b7:09:96:a2:6a:3b:57:6c:da:
         9e:20:74:0f:4d:83:f5:be:ef:52:35:a2:63:33:33:a3:00:52:
         29:ed:87:28:e8:8d:3d:64:9a:79:05:c8:a7:fc:64:7e:44:c5:
         85:b0:2d:e4:e5:54:94:11:9d:91:32:9c:7c:6b:7d:03:b3:ea:
         9c:81:7a:2c:29:f5:12:21:0d:ca:b1:b6:43:53:ef:dc:50:53:
         c6:53:d5:2b:7d:0d:2d:fc:73:e4:18:8b:84:c9:29:11:5f:5a:
         10:b8:4d:f5:7f:9c:33:34:01:fc:9b:2e:c9:b7:34:bc:1c:57:
         a1:38:ad:e2:3b:20:f4:8e:1a:f7:4e:87:47:f5:ad:88:f6:4e:
         b4:c1:5a:fd:44:a3:d6:d1:ff:72:7a:41:11:1f:70:39:54:8d:
         dd:25:d9:8f:48:f4:90:58:3a:2c:8e:91:c5:37:ec:e1:80:42:
         3a:36:fe:35:80:c6:ff:6d:62:33:50:c5:68:da:ef:56:3b:62:
         0c:42:8d:54:ce:4f:d3:27:8e:48:56:97:9a:57:1a:6a:cd:fc:
         2f:cf:cb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:47:57 2025 by rpki-client