Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e020ec9d-d13f-3a4c-938a-ff1d5d18c072.roa
File:                     e020ec9d-d13f-3a4c-938a-ff1d5d18c072.roa (raw, json)
Hash identifier:          CBE1KMCHsw9UjtwtzfT2mOKeMEFZk/644qskZ1vgAQA=
Subject key identifier:   83:2F:88:65:DB:80:EE:8F:2C:2B:A8:E7:9D:3C:F5:F6:0C:CD:19:DA
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E7BA95E5515508DB2363B180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e020ec9d-d13f-3a4c-938a-ff1d5d18c072.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        172.68.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:95:e5:51:55:08:db:23:63:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=441e31bb-f6b5-40b8-9f3b-1f92cd8185f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:52:11:b7:e0:1d:00:99:42:1d:2e:f5:9b:e7:
                    6e:e2:10:fe:46:ee:ac:92:21:8d:24:bc:f4:20:9c:
                    ac:c5:c8:e3:55:e9:64:ff:2b:d1:bc:fa:75:25:b9:
                    af:e8:66:05:7d:c5:37:ba:7c:5c:c3:82:44:73:8f:
                    6f:36:f6:ba:0b:dd:43:56:38:df:d0:fc:9a:e9:97:
                    5a:ad:eb:69:98:aa:dd:ce:de:15:89:00:a7:85:ad:
                    22:28:2e:d1:52:17:d0:79:13:5d:f0:78:4d:12:cb:
                    35:21:5c:23:43:17:00:78:4e:49:83:f9:87:6e:d2:
                    92:39:e5:d1:f1:84:00:57:c1:e2:cd:2f:d8:b0:95:
                    3b:6d:74:23:3b:25:30:4f:c2:52:bd:17:ab:35:cd:
                    2f:16:b1:08:00:25:c6:92:58:ea:a6:b9:fc:62:b0:
                    a4:09:e8:51:a4:d6:d4:43:fc:1c:61:0e:fa:4a:96:
                    5b:8f:22:a2:bd:cb:6a:36:19:08:2b:dd:6b:f8:51:
                    ca:e0:b8:c0:3e:34:78:b7:83:c5:6c:22:7d:a5:99:
                    0d:4f:c8:f4:b1:0a:26:dd:f9:77:ea:4e:51:14:b8:
                    77:0f:5f:8f:7b:a2:71:ee:84:e5:74:2c:ac:7e:b2:
                    cc:9d:e6:a7:c1:dc:c9:ac:4c:18:53:ef:11:b0:84:
                    0a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2F:88:65:DB:80:EE:8F:2C:2B:A8:E7:9D:3C:F5:F6:0C:CD:19:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e020ec9d-d13f-3a4c-938a-ff1d5d18c072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:5a:3a:fb:ac:5d:01:d9:1d:0d:3a:88:a8:8f:0c:18:e8:65:
         75:de:2f:c2:2e:02:26:3d:d1:ae:53:d9:b3:d5:6c:4e:d5:e4:
         df:ef:8e:8a:4f:c1:60:f2:54:63:f5:d0:a3:f9:54:ee:b7:bc:
         85:04:74:e4:3f:f5:93:cc:9b:89:50:ac:15:da:57:ed:78:df:
         10:a4:ae:9c:a9:c1:cc:f7:9b:53:8d:a8:de:e9:0a:a6:16:c8:
         c6:a1:b7:a7:80:47:d7:73:7c:e9:21:1c:42:0f:79:c8:d9:62:
         d8:0e:30:63:ee:0a:a8:24:4d:1a:c3:cb:da:8e:5a:2b:46:ac:
         37:1f:42:01:41:01:1a:21:3a:6e:00:af:69:55:d8:2a:74:41:
         2c:a5:d3:59:8b:1f:fb:48:b6:a2:bc:15:e2:fc:10:15:80:cb:
         58:fc:f8:8f:75:8e:dc:06:45:23:06:30:8f:3f:69:5b:2b:7b:
         09:e5:35:e4:82:f4:62:5f:e3:65:6a:82:3a:dc:12:96:13:53:
         ff:81:e1:a1:10:5c:68:76:3e:1b:4a:6a:ec:77:04:22:d1:3d:
         23:a9:1e:df:e4:ce:f7:20:a5:b7:34:a8:3b:9e:60:f2:a6:6a:
         b4:83:a3:e7:c4:d8:fb:60:cb:4b:3a:9f:53:d9:5a:b8:60:b5:
         fb:4b:0c:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnupXlUVUI2yNjsYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk
NDQxZTMxYmItZjZiNS00MGI4LTlmM2ItMWY5MmNkODE4NWY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVIRt+AdAJlCHS71m+du4hD+Ru6skiGNJLz0
IJysxcjjVelk/yvRvPp1Jbmv6GYFfcU3unxcw4JEc49vNva6C91DVjjf0Pya6Zda
retpmKrdzt4ViQCnha0iKC7RUhfQeRNd8HhNEss1IVwjQxcAeE5Jg/mHbtKSOeXR
8YQAV8HizS/YsJU7bXQjOyUwT8JSvRerNc0vFrEIACXGkljqprn8YrCkCehRpNbU
Q/wcYQ76SpZbjyKivctqNhkIK91r+FHK4LjAPjR4t4PFbCJ9pZkNT8j0sQom3fl3
6k5RFLh3D1+Pe6Jx7oTldCysfrLMneanwdzJrEwYU+8RsIQKnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIMviGXbgO6PLCuo55089fYMzRnaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTAyMGVjOWQtZDEzZi0z
YTRjLTkzOGEtZmYxZDVkMThjMDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQ7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHRaOvusXQHZHQ06iKiPDBjoZXXeL8IuAiY90a5T2bPVbE7V5N/vjopP
wWDyVGP10KP5VO63vIUEdOQ/9ZPMm4lQrBXaV+143xCkrpypwcz3m1ONqN7pCqYW
yMaht6eAR9dzfOkhHEIPecjZYtgOMGPuCqgkTRrDy9qOWitGrDcfQgFBARohOm4A
r2lV2Cp0QSyl01mLH/tItqK8FeL8EBWAy1j8+I91jtwGRSMGMI8/aVsrewnlNeSC
9GJf42VqgjrcEpYTU/+B4aEQXGh2PhtKaux3BCLRPSOpHt/kzvcgpbc0qDueYPKm
arSDo+fE2Ptgy0s6n1PZWrhgtftLDGA=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:23:42 2025 by rpki-client