Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c02c0b70-f5dd-3b32-ae28-5c296fc72edf.roa
File:                     c02c0b70-f5dd-3b32-ae28-5c296fc72edf.roa (raw, json)
Hash identifier:          za4FzYNatCYLSFHX1vgcE3hPWLS8EeqH1yxRLir1Gn0=
Subject key identifier:   7C:0C:4C:C1:B1:C1:0B:A1:72:10:24:46:BF:55:30:9A:92:69:B4:6C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849EA8530639E43E59873EB2480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c02c0b70-f5dd-3b32-ae28-5c296fc72edf.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.68.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:30:63:9e:43:e5:98:73:eb:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=b7f635c8-3d66-4445-a3b8-6da0f7ad1e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a7:fb:8a:9d:7d:b3:94:8f:fc:7b:af:36:38:
                    22:6b:3f:73:b8:98:8f:5c:35:c7:03:3f:8d:33:da:
                    f8:4a:6c:4d:98:34:b4:f1:fa:d5:ce:5b:a8:3b:93:
                    f2:50:7d:b9:11:34:7c:3f:6d:02:a9:ff:e9:0e:f9:
                    61:6a:57:f3:0f:b9:b3:a7:50:7f:89:9c:41:1f:0b:
                    28:95:22:9e:8d:1c:1a:9c:14:2e:ba:85:23:1c:1e:
                    1c:bf:e8:23:7a:ba:69:7c:e0:9b:6e:8d:0a:b7:c5:
                    8a:1c:e8:51:ce:b9:66:d6:7a:f2:2c:a9:6b:a6:96:
                    f2:99:14:d8:79:a2:1b:b9:16:e5:87:8b:fb:8d:21:
                    9f:f7:0a:17:82:cd:3e:63:aa:aa:b0:78:10:d4:fd:
                    ca:ec:ac:f1:c9:c7:b1:5e:17:d8:80:e8:83:af:29:
                    49:27:19:70:fb:45:82:7e:2c:bb:88:bf:f9:17:db:
                    9b:af:0b:65:3c:33:89:f5:da:89:83:71:81:ba:7a:
                    37:d8:e9:f0:c6:d9:4c:98:a4:c2:8a:aa:30:6b:a3:
                    be:58:c8:cc:1d:c7:0b:95:ce:e9:fa:cf:19:2d:bf:
                    29:33:3a:d8:11:01:3a:6c:24:20:5b:2c:fd:30:bf:
                    96:8a:9d:8a:6e:11:6a:cc:94:96:be:ab:08:27:c6:
                    b2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0C:4C:C1:B1:C1:0B:A1:72:10:24:46:BF:55:30:9A:92:69:B4:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c02c0b70-f5dd-3b32-ae28-5c296fc72edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:56:9a:8a:4d:54:9e:34:52:cc:82:dc:b7:d7:e4:b3:ca:2e:
         5c:99:33:49:b1:32:2a:9d:f6:14:8a:6b:9b:42:6c:06:3f:ee:
         01:06:cf:20:e5:84:8d:67:4b:f5:ac:60:4a:7d:42:20:b2:46:
         fb:f1:8e:04:da:e6:97:38:e6:9d:ed:a5:20:20:72:fc:4a:c4:
         6f:23:41:f4:e5:60:b0:64:81:25:18:ff:bb:2a:91:6d:1d:cd:
         29:35:1a:e8:08:78:d3:86:6e:13:f4:99:b1:a6:db:6a:eb:f3:
         fd:f7:a1:1e:50:68:01:78:6c:7a:72:cc:ad:14:51:5c:c0:f7:
         97:5b:b0:dd:73:f8:30:58:b7:ac:53:bc:fd:18:6b:70:98:7a:
         83:a5:51:e8:88:b4:ff:b5:7d:1b:62:20:4a:7d:b8:87:94:6a:
         41:8a:64:8b:88:60:61:cb:e9:7b:bf:73:b6:ef:47:af:b2:89:
         8f:49:da:b7:25:d3:1f:1c:e6:97:d1:1b:e4:b1:93:6b:4f:ba:
         90:0a:87:15:ac:8b:0c:0d:cd:6d:42:be:04:69:49:21:91:6c:
         09:c7:05:d6:01:f1:af:27:6d:ee:9f:12:3b:9a:fc:b0:69:3a:
         f9:7f:21:52:0c:d2:fc:d1:a0:e7:7b:12:d7:65:bb:1b:b7:69:
         4e:e7:8f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:41:02 2025 by rpki-client