Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e5ee2147-5549-3aa7-b3f2-69ea681237dc.roa
File:                     e5ee2147-5549-3aa7-b3f2-69ea681237dc.roa (raw, json)
Hash identifier:          y3acrGTs0vO8Ahjrvf7me+ygujCGKm7kVp8F54h8dfo=
Subject key identifier:   51:18:BA:57:58:EA:B4:4C:17:80:F6:85:8D:38:63:F8:F4:5E:F9:D7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849F01A8D9B236C0BE9F65A6380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e5ee2147-5549-3aa7-b3f2-69ea681237dc.roa
Signing time:             Thu 22 May 2025 13:01:05 +0000
ROA not before:           Thu 22 May 2025 13:01:05 +0000
ROA not after:            Wed 20 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.71.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:1a:8d:9b:23:6c:0b:e9:f6:5a:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 22 13:01:05 2025 GMT
            Not After : Aug 20 13:01:05 2025 GMT
        Subject: CN=56483177-c048-4fe2-8d05-5e56741d4243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d6:42:12:05:b6:22:73:9d:5f:eb:71:5c:9b:
                    e2:f0:88:cd:fb:4f:98:00:a5:2c:ce:94:8f:56:8d:
                    cb:e0:d4:c1:0f:af:b0:b2:fc:ac:5a:fd:cb:46:03:
                    7c:d9:e0:8d:bf:05:1b:fc:9c:f8:1b:ff:87:c5:65:
                    58:63:79:e3:a2:02:de:b7:c3:2d:93:0a:40:d1:67:
                    c1:4b:52:5d:aa:58:4b:66:02:8b:b8:5c:04:e9:9b:
                    78:10:53:7e:e0:ab:72:98:a2:45:05:8a:90:00:9d:
                    d8:13:0e:e5:0b:fc:fd:26:ab:ca:97:fb:e2:92:c5:
                    4a:36:27:21:49:7d:c0:ba:30:b5:b1:48:dd:94:c1:
                    55:1d:b6:f4:5e:12:da:fc:0c:0f:40:29:fd:ba:13:
                    b3:9e:03:dc:b4:7d:4f:6e:85:0b:ee:88:76:ef:5b:
                    22:d7:66:97:04:61:63:17:24:08:24:c5:26:04:a4:
                    1d:a2:d6:af:85:cc:46:ce:bc:1d:06:a8:66:4e:67:
                    5a:64:3e:30:84:4c:54:75:18:3b:dd:f6:ea:fc:19:
                    e3:fc:ac:43:4c:39:e5:b9:44:3b:9b:95:70:6f:62:
                    01:04:f2:ac:5d:b9:17:1d:dc:cd:31:3b:0c:70:ed:
                    d3:20:2f:25:19:9d:26:1c:c0:12:93:48:64:7c:4f:
                    03:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:18:BA:57:58:EA:B4:4C:17:80:F6:85:8D:38:63:F8:F4:5E:F9:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e5ee2147-5549-3aa7-b3f2-69ea681237dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:42:ec:ad:1c:39:2c:45:fb:66:99:9f:a0:b9:7a:f4:cb:d7:
         14:85:4f:27:c6:19:ff:a4:e9:9b:d9:d8:c1:3d:ab:35:4e:38:
         d1:c5:02:27:3b:8e:d7:5c:ea:23:40:41:ea:29:c4:81:f7:e2:
         46:cd:a9:26:80:70:07:c1:66:8c:e9:8b:28:aa:d9:33:7d:7d:
         0f:17:48:32:10:16:70:17:37:34:98:e9:28:ed:d0:ad:83:d6:
         95:30:0f:c4:bb:52:2c:9c:17:22:2d:ef:02:7a:40:80:c3:40:
         bf:ee:4a:a1:d8:7d:20:c6:a1:63:8e:ee:b6:06:e9:dc:cb:cd:
         cd:fc:90:55:c6:6f:a2:d7:bd:90:39:0c:1e:45:84:3b:04:c0:
         1d:60:d1:07:dc:11:03:ef:99:e7:ce:8d:5a:fc:83:e1:3a:87:
         bc:53:69:0b:34:91:77:f7:65:27:aa:1c:1a:b5:ca:22:d1:62:
         eb:11:0c:ce:32:af:3e:70:bb:ec:5a:c9:2c:0c:af:63:ee:81:
         af:40:ff:a3:f0:89:41:4e:10:39:26:1c:78:95:2c:81:9c:cb:
         43:92:61:e3:d4:93:83:06:18:d8:b4:f0:58:18:87:12:eb:3d:
         4a:d3:c8:b2:23:a3:b0:6a:e9:0b:46:50:8f:26:c5:87:b1:6b:
         17:e6:1d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:55:17 2025 by rpki-client