Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c0c024e7-905c-315b-a441-b169bbd8b49f.roa
File:                     c0c024e7-905c-315b-a441-b169bbd8b49f.roa (raw, json)
Hash identifier:          ifpeQxBf193rOpnQ5o1QxqxGdtftqswUlbjtYAaiXhg=
Subject key identifier:   AD:D0:58:40:22:9B:DC:A2:D8:FF:4E:F5:DA:47:53:E0:47:6E:C5:80
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858490B4C0A09BC26B54DCCD63660
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c0c024e7-905c-315b-a441-b169bbd8b49f.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        172.69.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:0a:09:bc:26:b5:4d:cc:d6:36:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=2268edb8-8576-4e3a-b55f-6c0bdab9d11e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1c:27:2d:6b:fa:72:7a:fb:6a:75:c0:2e:38:
                    bd:ac:9f:c3:af:9e:77:4b:8e:49:9f:35:ab:2d:09:
                    93:c3:da:15:62:3d:ce:5c:fd:8f:05:f7:68:47:3e:
                    3b:7d:25:c9:06:62:5b:53:28:00:6e:b4:0c:bc:66:
                    60:87:3f:15:6d:c4:cc:11:a4:7f:03:ba:9f:79:1d:
                    13:3b:86:9f:c8:bb:2c:60:57:5e:f5:5c:f3:bf:98:
                    96:3e:61:1b:cb:8d:b5:77:5f:9d:de:f6:8b:92:42:
                    78:17:c3:b3:1c:bc:0d:41:99:28:d9:e3:e5:a6:7c:
                    d3:94:d4:d4:9f:47:bb:88:db:51:af:35:24:d9:eb:
                    ea:91:31:df:37:63:e0:ca:a0:5d:0b:c2:0c:62:4a:
                    1d:72:63:5c:5c:82:ac:bd:eb:4a:97:46:59:c5:89:
                    8c:55:8c:84:c2:42:13:41:38:8c:2d:16:a1:85:2b:
                    f3:1e:52:72:12:18:72:97:18:8c:fa:9d:1e:9d:3e:
                    75:23:99:8d:ab:c4:dd:1b:dd:20:35:65:f7:71:d9:
                    e2:4b:bc:06:b0:58:a1:48:9f:a2:38:e6:11:cd:ab:
                    6b:88:3f:d8:b1:c7:d5:7a:13:ff:fd:31:a4:18:17:
                    59:51:f6:75:49:28:ef:9c:56:56:29:86:67:72:fc:
                    69:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D0:58:40:22:9B:DC:A2:D8:FF:4E:F5:DA:47:53:E0:47:6E:C5:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c0c024e7-905c-315b-a441-b169bbd8b49f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:1f:b8:7c:5b:ba:49:3f:c4:f5:27:4a:77:43:e7:e6:db:9a:
         9e:e0:07:6c:26:6e:c9:47:85:e6:09:b8:98:39:63:f3:53:92:
         0e:ea:0d:c7:8c:6b:e5:b8:ff:93:95:9b:f3:04:ef:3e:15:d4:
         0d:9a:04:2e:86:53:cc:9f:50:27:15:b6:15:09:0e:11:18:b3:
         2c:19:bc:ce:26:1b:28:51:34:6e:a1:1f:06:4f:aa:da:44:7c:
         66:11:c5:f1:4c:d1:a4:96:18:2d:0f:f8:1d:37:75:d9:a2:6f:
         ce:45:2f:a9:cf:a7:21:c5:44:17:95:7d:55:49:7d:c0:b0:bd:
         98:b2:7f:34:97:30:4e:0b:8f:a1:f1:39:cf:83:98:93:c7:e3:
         09:99:53:7a:ce:9e:c8:e7:22:7f:b9:5e:f5:0f:55:9b:84:a3:
         43:4e:1c:58:69:26:5d:8e:2f:85:47:72:1f:b9:14:a7:49:7f:
         c8:9e:6c:27:92:30:c4:e0:5c:ff:4e:8b:90:82:5f:64:66:d4:
         5c:a3:f8:0c:44:65:35:1f:77:2f:63:18:c5:14:db:18:ca:3c:
         ed:83:89:4c:c3:65:ae:b0:fc:81:33:b1:ed:c0:ea:48:b8:dc:
         c5:07:28:8f:7c:15:35:d6:73:e8:11:d9:a1:e7:61:53:27:24:
         29:72:04:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:22 2025 by rpki-client