Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d37b01ea-840d-387d-9164-1755cbd40754.roa
File:                     d37b01ea-840d-387d-9164-1755cbd40754.roa (raw, json)
Hash identifier:          nC+/+Q9zInz2dTg3wCzlokj9MmnK14Lg/P0Qd3Yz65I=
Subject key identifier:   7E:EC:D8:11:87:3A:DE:D6:24:D7:62:FD:7D:66:9E:C6:F3:C4:D7:8A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858490B4C125C3965D723562B4480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d37b01ea-840d-387d-9164-1755cbd40754.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        172.69.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:12:5c:39:65:d7:23:56:2b:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=be322db8-76bc-4763-8da9-4078cdf14c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:57:39:f6:9b:d8:30:5a:cd:16:d3:e8:2d:4b:
                    1b:93:d8:ee:80:e3:cc:9f:65:59:40:87:e2:48:37:
                    03:00:25:22:08:76:4a:5c:5a:55:76:5b:38:cf:2a:
                    99:23:3a:d6:1c:a1:98:9b:9f:e8:da:6a:2e:47:52:
                    d8:84:a9:be:d9:88:3f:7c:b4:0b:c5:40:b5:ee:fb:
                    b3:b1:ea:4e:e2:2b:da:95:9e:7f:3e:bf:fb:53:cd:
                    0c:f3:6d:f5:86:32:9a:20:24:f0:6b:da:73:1d:d8:
                    6f:05:6d:54:77:1c:54:14:3b:07:7d:82:f6:ba:ee:
                    75:10:14:fb:65:11:53:e6:b1:45:a6:1d:1e:a5:12:
                    b6:9f:c0:9e:0d:49:cf:d5:6f:ed:3c:90:cb:aa:95:
                    30:67:b4:e0:a2:b2:da:d0:c1:fc:4b:28:38:4c:f3:
                    ae:d5:8c:c2:d9:d6:33:cf:67:15:64:1e:18:45:af:
                    db:b3:22:d9:fb:a5:bf:4c:20:33:16:4e:b0:c2:e1:
                    8f:f2:0a:f2:95:ad:ba:ac:d5:75:60:07:de:ac:4b:
                    40:75:0c:93:42:b8:c4:08:47:39:88:9d:bf:b6:54:
                    45:b4:88:2a:0a:3f:6d:ee:a9:ff:c5:09:ac:3d:33:
                    75:fd:3b:f5:fb:f5:a2:11:65:65:64:f8:ff:70:3f:
                    8d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EC:D8:11:87:3A:DE:D6:24:D7:62:FD:7D:66:9E:C6:F3:C4:D7:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d37b01ea-840d-387d-9164-1755cbd40754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ca:c8:26:9d:96:7e:90:ca:2f:6a:05:89:89:0f:17:e9:32:
         9f:29:cc:dd:d7:fd:e7:0a:eb:e9:81:32:32:d4:42:22:1b:25:
         15:a5:ac:d2:71:2f:7a:53:de:fd:d0:60:c1:8b:99:81:63:a2:
         95:70:a0:52:c6:27:b4:77:df:55:07:0a:65:05:c4:d1:35:85:
         ae:5a:6f:00:5e:7e:c0:13:f4:09:f6:99:19:66:b9:33:d4:46:
         18:d4:08:4a:28:98:4b:d8:ff:e5:dc:41:1a:41:93:a0:62:4c:
         9c:ae:27:0b:79:5c:0b:00:40:58:27:d4:34:59:d3:cb:01:0d:
         ce:88:56:c1:3b:5a:ea:a3:9a:38:ca:7f:f6:5e:b4:bc:f8:22:
         c8:ea:8a:4e:fb:50:97:74:b5:92:08:2c:64:29:5a:f6:44:59:
         76:50:1f:49:8a:74:7d:da:71:fa:a5:e7:4d:75:a8:5d:fc:7f:
         5d:c0:06:e2:60:3f:73:51:a2:dc:8f:a8:13:f5:97:40:13:4f:
         fe:44:b7:33:93:22:19:35:37:00:4d:a1:f8:b9:35:2a:9a:6b:
         4f:37:b5:76:29:14:dd:2f:d0:17:ff:74:60:0f:eb:e0:6f:50:
         22:f1:54:26:ec:cc:64:89:2e:35:2e:68:c5:66:0c:13:f3:6a:
         d3:a8:63:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:30:36 2025 by rpki-client