Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f54f091f-4ed8-3d12-83a0-bb249b2b8e0f.roa
File:                     f54f091f-4ed8-3d12-83a0-bb249b2b8e0f.roa (raw, json)
Hash identifier:          fwK5dTnPGhLeVjAjOTsKfh62Sy6DUDpXV2yRt3AQrQw=
Subject key identifier:   DF:32:9E:D4:89:98:91:0A:14:DD:F9:84:49:76:28:10:57:CB:A0:BF
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849EA85485DDC127C6BDA622E80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f54f091f-4ed8-3d12-83a0-bb249b2b8e0f.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.69.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:48:5d:dc:12:7c:6b:da:62:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=556e52a4-6ac6-4385-b7f6-8b69b9804f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:18:af:49:dd:ff:9d:0b:a0:a4:6a:99:38:38:
                    dc:fd:54:77:7d:96:8d:cb:06:1c:8f:e5:7a:6f:6e:
                    97:85:35:c1:8e:98:b8:32:f1:3e:9f:b8:0d:3f:63:
                    df:95:71:4d:97:ed:43:ca:9f:37:b1:03:48:39:72:
                    5e:c6:10:c3:b8:d8:16:13:3e:c7:fa:0b:9a:0c:c2:
                    be:96:e0:fc:e9:c1:e8:f6:28:f4:fc:0a:a1:ac:f3:
                    e6:ed:f4:73:fa:d7:74:6c:a7:65:39:c0:da:d0:82:
                    84:5c:1a:55:55:ed:78:62:8d:e2:e8:f0:68:54:a3:
                    58:c2:ff:74:46:6f:18:31:a4:b2:86:f8:5d:b7:b4:
                    6a:32:af:0e:1f:7f:1c:88:f2:30:42:93:c7:22:25:
                    77:24:43:49:8a:07:62:41:ba:4b:d7:2b:74:52:1b:
                    50:13:84:3e:5e:22:c1:02:db:43:59:83:29:e8:21:
                    c3:70:7d:22:cd:aa:f5:4a:75:32:80:e1:c4:e2:a2:
                    21:8f:20:51:45:9f:84:ec:d6:8f:6d:ce:a8:05:44:
                    03:99:36:5c:a9:2d:22:5c:5e:a8:86:b2:c6:6d:2d:
                    6b:e1:a9:a7:31:5a:84:75:ea:42:b5:91:cc:3f:fb:
                    c3:46:cd:0a:7a:d0:50:72:48:72:48:64:0b:40:e5:
                    e7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:32:9E:D4:89:98:91:0A:14:DD:F9:84:49:76:28:10:57:CB:A0:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f54f091f-4ed8-3d12-83a0-bb249b2b8e0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:61:26:52:7f:d0:ee:41:c1:0c:36:da:83:3d:12:17:ad:04:
         2b:e6:5a:d2:86:a3:1b:33:07:63:ac:dc:83:40:6c:e8:14:87:
         5b:56:26:ac:70:3a:30:66:ed:70:65:2a:c9:e7:d5:7c:57:a5:
         77:eb:98:48:45:cf:b2:51:2f:ea:5c:6b:04:ba:11:f5:e3:42:
         4d:bf:58:e9:ce:dc:7c:31:bb:fe:b6:ce:87:a1:8f:1c:ec:d8:
         f0:e5:93:ab:36:b5:76:f3:97:5e:cb:1f:5a:48:b7:65:8d:ec:
         1d:f9:62:6d:fd:1d:95:91:a5:9b:db:a5:d7:86:e8:16:a4:e8:
         13:f2:44:b4:7b:27:e9:26:be:26:84:ff:b3:54:4c:24:8c:58:
         c3:6a:40:81:b8:f3:68:cd:39:2d:5c:30:00:d2:57:ed:ac:20:
         7b:04:b7:ee:12:f5:ea:03:ad:2c:9b:3f:85:88:b6:f7:d6:0c:
         d4:62:f1:03:2f:15:f0:eb:e2:06:f2:0e:08:60:7a:90:c3:02:
         e0:33:d5:61:93:a5:39:b8:28:48:db:e7:02:66:4f:0e:a6:bf:
         0c:5d:f8:11:f7:3a:28:2f:16:aa:77:76:38:eb:00:1e:76:96:
         a7:8f:a5:34:1c:6a:db:13:02:2b:9b:54:e6:a5:e1:db:75:81:
         f8:96:1b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:40:43 2025 by rpki-client