Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d95b3da1-95d0-3a1b-9281-392ee1e73d34.roa
File:                     d95b3da1-95d0-3a1b-9281-392ee1e73d34.roa (raw, json)
Hash identifier:          PN+3sovaCPpJiSooW8duimp8gRyGZEfq6ELiibQ4j8w=
Subject key identifier:   B5:DF:C3:C3:60:F2:F5:9C:10:CE:88:85:FE:29:63:E4:39:81:BB:1F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849EA8533327A46D8D19C5E5B80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d95b3da1-95d0-3a1b-9281-392ee1e73d34.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.69.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:33:32:7a:46:d8:d1:9c:5e:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=50c822a9-b67d-405e-baa3-a4cde7a97b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:64:6b:68:2c:e5:86:3f:44:41:b5:23:66:e0:
                    a3:f7:de:b9:5a:9e:1d:8c:cc:87:96:4f:18:60:dc:
                    0b:b5:4e:ec:5c:fb:a3:fa:23:1e:61:a2:6c:ac:d1:
                    e1:5d:70:d9:a9:f2:2b:fe:87:b8:9b:d6:3c:4a:73:
                    25:d5:ca:fe:37:3a:78:aa:72:21:a2:bc:db:2a:06:
                    c6:e6:7f:a4:d0:01:a7:9b:d7:08:af:5d:3b:ba:77:
                    32:15:5a:81:7e:91:6b:c5:67:ef:e1:b5:0d:dd:d9:
                    79:6a:52:25:f5:e7:56:dc:bf:3e:af:bc:f6:d8:aa:
                    24:09:a3:0b:e7:dc:00:33:21:1f:d8:78:f1:dd:79:
                    e0:4f:f7:05:96:18:85:b9:8f:8a:f5:a9:7e:be:45:
                    8b:e2:b5:fa:de:5c:10:40:20:0f:01:80:ab:7c:30:
                    8f:62:20:9c:89:9d:a7:1c:77:5f:7f:9d:ae:eb:3f:
                    0a:e4:92:17:96:a9:e6:b5:3d:3d:d5:5b:11:35:b6:
                    66:a2:7f:7e:5d:9a:3e:41:9d:db:37:d2:ca:d1:f2:
                    38:db:74:6e:40:a4:34:ff:b3:13:d8:64:a8:1f:cd:
                    e1:6d:b3:a1:2f:22:3f:03:f6:6b:9c:eb:9c:11:38:
                    fb:70:30:7f:73:db:2f:a8:ea:9c:56:bb:20:75:29:
                    0e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DF:C3:C3:60:F2:F5:9C:10:CE:88:85:FE:29:63:E4:39:81:BB:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d95b3da1-95d0-3a1b-9281-392ee1e73d34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:9c:dc:9c:a8:04:53:0f:f0:8f:87:cc:b3:5b:1b:01:66:77:
         13:14:9a:05:93:f3:a8:e8:2e:ca:4c:df:34:50:23:e5:39:6c:
         da:3a:c0:24:cd:92:83:64:1e:c7:5b:a6:26:96:0a:91:39:8d:
         bd:90:3e:e0:6f:56:fd:c3:0f:3f:67:f9:46:e6:fc:b1:85:6b:
         d4:cf:b4:c8:3b:05:05:27:7f:3b:aa:42:f1:4c:9d:e1:09:53:
         c9:31:18:25:fa:e8:b3:fc:bc:1e:0d:d2:37:a3:e6:10:3c:14:
         da:53:f6:3c:bd:7c:17:20:98:8c:fd:22:59:ff:89:2e:bd:09:
         fa:bd:35:b0:06:bc:ec:c0:f4:fd:86:ae:c2:06:71:d4:bd:57:
         05:2b:65:a4:c7:cc:18:2e:ec:5f:d4:2b:8e:cd:5f:ab:58:e6:
         24:51:a6:5f:f0:1c:11:e0:cd:2d:59:ec:49:a4:6c:4a:4b:52:
         3b:ed:cd:a1:de:47:bd:8b:4f:0a:17:45:7f:ba:f4:a2:1b:a3:
         47:81:2b:62:46:02:30:6e:6b:3e:59:8f:df:a3:aa:91:f9:3a:
         3f:dd:b4:85:63:0f:fb:54:13:2f:e7:a0:08:64:77:fe:34:13:
         50:b7:d7:b9:d7:89:58:1d:ca:95:82:8f:83:44:48:22:dd:46:
         35:e7:f9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:41:34 2025 by rpki-client