Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea503a07-330e-3d72-8188-17594c9fada5.roa
File:                     ea503a07-330e-3d72-8188-17594c9fada5.roa (raw, json)
Hash identifier:          G4D+pbQKknl4JZOyHUArK1+maIVpNLmkqYlJLGiadZw=
Subject key identifier:   10:68:44:10:0B:17:A6:A8:74:1B:31:B3:C2:E2:EA:F4:62:C1:1D:63
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849071BFACCBB5E7F49AC2A1000
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea503a07-330e-3d72-8188-17594c9fada5.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        172.64.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:fa:cc:bb:5e:7f:49:ac:2a:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=a76a0e2c-64ae-43bc-8028-418b8a52f9e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:14:5b:1a:24:1e:53:40:12:8d:e6:37:28:a0:
                    00:82:b6:9b:49:8d:94:a4:a3:71:de:87:6d:91:1f:
                    01:c1:ef:be:04:6b:88:1e:c0:1d:94:12:14:42:0d:
                    f6:a7:b6:cb:2c:d5:23:f3:97:63:e3:64:25:c8:96:
                    15:51:f9:93:9b:77:ca:fd:86:16:63:cb:7b:30:8e:
                    f0:b5:a6:24:f8:0a:46:55:67:08:14:85:02:bc:bb:
                    55:c1:6a:9b:43:b8:db:03:f4:34:38:ce:e9:39:45:
                    1c:4c:db:78:88:68:8c:e9:39:56:53:aa:94:67:10:
                    c3:74:ae:1c:75:99:da:a6:a4:c5:26:ba:9a:81:be:
                    46:79:5d:ad:a1:8f:61:09:2e:0f:12:2f:71:66:df:
                    0d:68:29:59:0f:70:f7:b5:92:9e:10:0b:9e:2b:b2:
                    95:48:c7:7b:65:01:d7:88:42:27:3f:1c:8a:3c:51:
                    b8:05:0e:38:74:8a:25:9b:06:e2:5a:0d:45:03:04:
                    66:14:d9:a8:fc:14:8a:a8:1a:45:08:00:b8:1d:91:
                    54:5b:2d:13:49:e2:7c:21:e9:09:b0:12:59:d7:41:
                    5f:b5:5e:de:c2:be:33:8d:96:89:4a:7f:b8:dc:3f:
                    7b:3f:d5:31:ed:78:2d:05:d8:05:a9:ea:50:67:50:
                    ce:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:68:44:10:0B:17:A6:A8:74:1B:31:B3:C2:E2:EA:F4:62:C1:1D:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea503a07-330e-3d72-8188-17594c9fada5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:c0:3f:ef:d4:fe:ad:a2:d1:3f:41:ff:83:0b:75:31:70:f6:
         04:ec:50:3f:40:6d:89:03:e0:6b:79:17:0a:62:17:0f:d1:bd:
         dd:b5:f5:ff:bf:e5:59:7f:06:a6:9d:15:e0:07:cc:0d:ec:ea:
         82:f4:5c:ef:5c:d3:17:6a:cb:38:a6:74:ce:4c:34:3e:76:78:
         3e:14:cf:e5:cc:95:85:18:84:87:60:8f:02:19:eb:a4:34:bd:
         c2:76:8d:64:fa:78:0b:ce:95:dd:47:d9:be:5d:08:92:6d:38:
         1c:e0:75:a0:1e:58:79:23:cb:98:da:f0:c6:c8:15:af:1d:74:
         22:86:52:ca:d7:20:b5:7a:5f:56:d7:a0:41:78:3f:68:48:07:
         00:eb:d8:eb:75:da:c0:43:ec:4f:d8:ab:c4:e2:2e:b2:21:50:
         b7:1b:19:0a:30:72:ed:fa:03:ea:49:19:e8:01:cd:38:52:f7:
         f4:e5:a1:f2:32:b4:8e:18:1b:56:05:13:a5:be:ad:14:16:6c:
         94:17:7a:a7:7b:85:7f:2e:07:44:d2:e8:e3:72:4d:fa:fa:0c:
         c9:d7:e0:88:e3:a5:01:12:68:7d:61:99:62:8a:af:59:8e:3d:
         31:64:67:14:31:ad:b4:b3:5a:e0:0a:e1:37:99:c0:6d:41:db:
         2c:6a:ac:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:15:43 2025 by rpki-client