Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f97d195f-2ede-3bf5-88b3-dfd772c54088.roa
File:                     f97d195f-2ede-3bf5-88b3-dfd772c54088.roa (raw, json)
Hash identifier:          9JIoJFufAKqNiITa5OJO5UaH1Fq5xKwiLQicnzIlUuI=
Subject key identifier:   D6:0B:25:32:0F:E2:FC:2F:A3:86:1B:E9:C4:89:E3:7D:AE:DC:2E:B3
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849EA854747C671A2F24F441880
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f97d195f-2ede-3bf5-88b3-dfd772c54088.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.69.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:47:47:c6:71:a2:f2:4f:44:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=478e90ab-2ab1-4f4f-892b-a85e3540457f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b0:b2:d6:6d:42:bc:75:3f:2b:e8:2f:04:3c:
                    1b:93:f9:2b:25:f3:c1:2e:16:b5:93:7f:b5:c9:22:
                    75:cc:6c:0c:bd:a5:d4:d7:85:72:b3:f3:45:d5:71:
                    a2:2b:71:28:e1:de:95:13:a3:5a:2f:24:9c:6c:78:
                    c9:05:4d:a1:9f:13:7b:7a:70:0d:b0:93:01:ca:21:
                    cb:90:9a:2e:31:97:6f:8d:76:29:7b:22:89:18:e0:
                    3e:3d:ca:00:58:bf:c2:6e:6c:e6:b3:30:64:33:27:
                    d6:65:a5:80:9e:4c:f4:12:4f:7f:f4:44:72:00:40:
                    f6:11:96:52:ba:8a:e7:39:d8:20:d2:32:aa:6f:fb:
                    c3:c0:92:13:e9:7b:49:ae:59:3a:b5:e9:d1:0a:b9:
                    15:03:ce:0d:35:09:de:02:44:13:f8:1f:4e:03:8e:
                    e2:4b:f4:70:82:44:63:e1:f7:b6:00:33:5b:f4:42:
                    a7:3d:1f:c9:31:13:5a:67:c5:38:29:de:c3:5c:af:
                    64:b4:19:4d:ab:e7:b7:a1:ec:c3:cb:75:51:b3:85:
                    14:70:4e:4c:98:71:6a:b7:f0:25:ee:8a:18:bb:56:
                    66:d8:dd:26:76:f6:e3:df:84:29:a2:7e:79:44:78:
                    aa:0a:06:b6:77:e8:00:be:0f:a2:ef:de:9f:a9:75:
                    2f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0B:25:32:0F:E2:FC:2F:A3:86:1B:E9:C4:89:E3:7D:AE:DC:2E:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f97d195f-2ede-3bf5-88b3-dfd772c54088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:c4:4a:3b:a1:f0:2d:cf:a7:b7:ab:bb:bf:11:11:b2:ba:ec:
         ab:72:ca:a9:eb:f4:9e:22:12:4e:b3:9f:9c:a2:3d:bf:9c:14:
         b2:0c:37:2b:31:c9:eb:bb:d8:d3:8d:a3:21:5e:ac:91:1a:d0:
         1f:8e:39:97:d0:e9:60:71:93:e4:5d:69:9d:45:31:34:5e:a1:
         36:ff:f8:9e:89:61:e8:5e:f2:7b:03:28:d3:b6:ae:77:d0:7e:
         ec:10:0a:f1:78:1e:fd:4b:09:d8:4f:2e:bb:c0:5d:c9:77:6a:
         f3:5e:5c:5a:c3:63:c8:a2:9a:d0:1e:6e:06:25:d5:66:38:f8:
         03:f6:b7:99:07:eb:6e:68:b6:d5:4a:32:37:01:06:3b:d9:d1:
         a1:25:96:6a:0b:e7:ea:70:4d:ee:16:0c:37:d0:92:54:d7:0a:
         b0:c0:9c:ed:05:ec:b7:c0:0b:20:92:27:34:0d:c8:2f:6b:67:
         0d:6f:c5:08:ce:22:00:11:f2:f1:90:49:1d:d1:73:01:26:a7:
         fb:2b:29:20:b5:6c:83:35:8c:88:68:3e:39:bf:7d:6f:99:ca:
         1e:29:e0:ce:9a:83:5b:da:0b:e0:f9:39:8e:bf:8f:b3:2a:3b:
         07:1b:e3:e2:56:53:14:fe:9a:d1:2e:38:c5:1a:9a:fa:01:8d:
         10:79:94:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:55:49 2025 by rpki-client