Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e7756d6d-9b0d-3326-bafd-b8dd1d147c2c.roa
File:                     e7756d6d-9b0d-3326-bafd-b8dd1d147c2c.roa (raw, json)
Hash identifier:          42+5guh2PvEqc4OwA2+8Udv30RHQkojRssVcK9xvUFE=
Subject key identifier:   3B:B2:1C:D9:AA:70:E4:7F:C3:C0:BF:3B:BB:13:70:09:B1:8A:0F:CB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E7BA922DEADE1D878B44E700
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e7756d6d-9b0d-3326-bafd-b8dd1d147c2c.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        172.64.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:92:2d:ea:de:1d:87:8b:44:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=f8f83295-8d1a-4805-8c9a-aa0d8bd89c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:81:f1:39:b6:39:a7:9c:f3:70:96:8d:4b:49:
                    22:1e:04:ca:75:c9:32:3d:6c:89:78:5d:d0:68:3a:
                    3a:30:cf:b8:e1:67:d4:6b:d8:8d:0c:61:5c:22:ee:
                    d4:b2:a6:b2:13:ed:c3:c1:3f:ff:4c:87:bc:48:c5:
                    15:89:7b:0b:0b:75:d2:a9:f3:42:04:61:cc:11:c9:
                    dc:c5:e1:55:26:11:7d:a3:b9:8f:4f:dc:ae:65:b1:
                    87:eb:05:7f:45:76:22:9e:fb:16:f7:5d:c5:81:96:
                    54:79:c3:58:a5:8f:3b:42:e3:89:aa:c7:e3:76:b3:
                    fc:45:95:62:4c:53:3d:00:f7:95:88:c3:fc:d8:9b:
                    22:f6:7f:e3:96:45:57:41:e6:da:4c:45:98:84:81:
                    50:60:87:a3:a0:30:30:33:2b:38:9e:08:62:9a:7b:
                    5f:4c:4f:99:be:ab:52:f5:8d:e8:96:fe:fe:4f:20:
                    d5:d5:cc:a6:5f:47:ba:b4:b7:16:6d:a2:40:f5:0b:
                    f8:10:f4:a1:fc:10:ba:b9:c7:72:f1:40:ab:0d:86:
                    d7:b3:2f:ca:74:4d:98:65:4b:e7:35:19:8b:71:a2:
                    af:c7:31:0f:26:61:a9:f5:f9:52:25:ed:9e:27:09:
                    d7:e3:de:00:af:06:e8:59:93:d9:25:54:79:50:bb:
                    5f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B2:1C:D9:AA:70:E4:7F:C3:C0:BF:3B:BB:13:70:09:B1:8A:0F:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e7756d6d-9b0d-3326-bafd-b8dd1d147c2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ae:47:2a:60:92:7e:41:17:30:36:da:b7:b0:92:95:9a:e6:
         7d:ab:12:78:1e:e8:1d:91:a8:e5:58:e2:a6:51:f5:4a:f8:31:
         1b:ea:d2:12:00:8d:78:36:77:cf:9f:0a:d9:2c:59:f0:4f:6e:
         44:a3:34:65:fa:bf:f6:92:6b:35:ef:42:08:56:32:cb:c7:cc:
         0c:c6:f4:36:4f:0e:d6:1c:59:61:bb:89:7c:33:02:bd:93:50:
         55:8e:38:d8:a6:15:e4:a5:28:67:48:f6:a5:6d:f5:a8:d4:5c:
         6b:18:47:9a:b9:d5:05:3f:d8:18:e1:52:22:01:de:c5:b6:54:
         98:08:f5:3d:dc:5a:2d:62:c0:91:f2:97:f9:36:f9:4b:95:b2:
         0d:c8:fe:19:84:5d:5f:ba:da:00:78:1c:42:33:07:92:69:db:
         7e:b3:d1:52:94:84:a9:bd:40:84:cf:b8:84:64:4f:ba:3b:3b:
         8d:66:60:6a:4d:54:99:d1:9b:f3:a3:49:fd:ec:31:d0:5b:18:
         d1:c7:3a:28:d7:c5:8f:69:67:66:54:02:b0:b6:5c:21:69:ba:
         5c:7e:c3:38:ca:2b:9d:1d:21:ec:74:93:70:06:8c:c2:a1:1a:
         37:4d:7e:ea:df:95:bb:3f:4c:16:00:6c:8e:aa:b8:a7:c7:3f:
         24:66:a5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:41:55 2025 by rpki-client