Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cad706ae-b7dd-3f7c-8794-f5ff4e7509a2.roa
File:                     cad706ae-b7dd-3f7c-8794-f5ff4e7509a2.roa (raw, json)
Hash identifier:          beZZUM3dSZX0qR+GsWWRXD6JPAvTMB1SzoGdyB8GYmQ=
Subject key identifier:   E3:1E:1D:7B:62:9C:DC:D6:B6:B4:4B:77:92:62:07:D8:6D:7D:FB:B9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849F01A994DB20DC96CF9C33BC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cad706ae-b7dd-3f7c-8794-f5ff4e7509a2.roa
Signing time:             Thu 22 May 2025 13:01:05 +0000
ROA not before:           Thu 22 May 2025 13:01:05 +0000
ROA not after:            Wed 20 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.71.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:1a:99:4d:b2:0d:c9:6c:f9:c3:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 22 13:01:05 2025 GMT
            Not After : Aug 20 13:01:05 2025 GMT
        Subject: CN=155fc731-6b88-4507-9b10-a620208bdbc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bc:7d:18:79:04:27:da:ab:89:0e:e6:27:97:
                    39:e9:58:e9:31:d3:4b:62:11:92:5e:d7:83:aa:4e:
                    db:ed:3d:95:4f:81:46:48:dd:36:12:5e:39:db:67:
                    4c:ee:04:e4:ad:9f:5a:91:7b:c5:dc:6d:9b:d6:e2:
                    07:ae:8a:bb:18:a5:79:c6:9a:cc:6d:f1:6b:00:15:
                    f6:3d:c0:0d:e8:29:d8:53:dc:b0:70:83:85:cb:a3:
                    95:88:12:f4:97:de:f4:22:73:06:bd:df:57:f1:4a:
                    c7:09:c6:89:08:ad:47:95:b3:f6:4c:bb:b3:6d:ad:
                    5e:8d:33:bb:32:0f:a9:fb:19:cf:71:d3:57:4f:f8:
                    ca:cf:a5:fe:a6:e2:69:f3:d3:9b:ec:52:17:6d:c1:
                    00:4e:2b:87:08:98:50:48:fc:dc:c8:19:ef:d4:8e:
                    65:7f:07:27:73:b7:a5:b8:b8:43:56:19:31:08:ad:
                    bf:ee:78:1c:54:f1:48:c2:54:1a:85:d8:fc:f0:ba:
                    37:8e:46:bf:ec:b4:dc:e1:45:8e:46:71:6b:2e:f2:
                    43:c1:61:c9:01:28:1f:4b:3d:b5:2f:01:5a:70:99:
                    91:23:87:41:b4:46:17:53:56:3c:c5:c9:c6:76:ab:
                    a9:e1:65:c8:27:cd:4d:6c:4f:a3:2f:87:62:60:a1:
                    0d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1E:1D:7B:62:9C:DC:D6:B6:B4:4B:77:92:62:07:D8:6D:7D:FB:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cad706ae-b7dd-3f7c-8794-f5ff4e7509a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:88:7e:81:18:e8:2e:53:31:46:40:77:cb:cc:ff:23:75:bc:
         ee:f2:58:e9:05:77:c9:d4:1e:cf:6b:8d:04:b5:8c:b6:c8:7d:
         4f:f6:21:ff:e5:b7:20:19:bd:29:b7:b6:68:ff:e0:a9:b0:6c:
         51:74:cc:11:07:cd:7e:f3:d6:d7:be:94:27:50:ac:b6:23:64:
         95:e7:9b:2c:b4:67:7d:23:d2:da:c1:91:9f:7e:2d:e3:1d:f5:
         8c:85:8a:e6:2b:d3:6e:a4:c4:e2:59:b3:5a:2f:1d:c2:9f:db:
         ac:4e:41:89:cd:0a:eb:aa:de:96:d0:a7:65:aa:94:2c:40:18:
         40:dd:4b:97:ec:ee:22:47:de:99:ea:da:58:94:aa:96:b3:04:
         35:87:0a:6e:90:b9:a3:7d:a3:20:24:99:55:ec:59:89:09:8d:
         dd:3a:de:d4:35:37:61:dd:07:60:76:d2:68:49:9d:04:b3:86:
         76:58:f4:7d:0c:3c:e3:b8:9e:e6:10:83:11:d3:e7:0c:6c:06:
         77:5b:ed:5f:c6:df:d9:9b:f1:16:f0:94:c9:a6:a6:cf:2c:2e:
         65:32:08:f7:2c:0e:91:d4:d3:a7:7c:50:b4:36:77:cf:de:d5:
         b6:af:65:12:d1:e8:d5:00:14:55:6c:1a:2f:00:f3:11:1e:91:
         fc:91:95:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:36:59 2025 by rpki-client