Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1684d200-d4b2-39ff-af93-08705a3bdcb4.roa
File:                     1684d200-d4b2-39ff-af93-08705a3bdcb4.roa (raw, json)
Hash identifier:          9zt8ds9OCsum7y+1gWar4nVH7dUiPo1OWI0hfcWZLsk=
Subject key identifier:   69:24:50:56:C9:47:4E:5B:89:06:93:52:5D:9A:14:86:30:CD:2C:E3
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849EA8531F0FE18025A708A5500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1684d200-d4b2-39ff-af93-08705a3bdcb4.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.69.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:31:f0:fe:18:02:5a:70:8a:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=af41a5da-223b-411d-9166-9d43de23e09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1b:c1:09:c2:55:68:14:2e:83:cc:4c:a4:ea:
                    40:dc:bf:a8:48:9a:fe:53:64:50:35:3c:66:4c:95:
                    16:33:f9:72:dd:71:79:80:45:4e:da:91:dc:93:ce:
                    56:97:fc:6f:23:62:e4:bb:5c:b5:2f:7f:4b:f3:b6:
                    b1:11:fc:f4:d1:53:27:59:92:a4:eb:60:b4:ef:5b:
                    c7:6b:ec:10:f2:06:18:02:bb:2e:b7:71:fc:f3:6e:
                    c6:6d:00:db:cb:1e:4a:aa:64:a5:e2:17:ca:2e:dd:
                    c2:c0:5d:1d:e3:38:05:6a:5c:bb:a8:a5:11:e6:45:
                    b0:5c:f7:54:99:08:29:84:03:be:b1:4e:e9:82:96:
                    27:d8:fc:ed:88:fc:32:c8:34:91:13:7f:d6:ae:53:
                    95:5a:cf:b4:6f:cd:6d:78:f7:40:a6:06:4c:c7:16:
                    2e:67:97:7d:21:ed:4d:6f:5e:9a:49:f2:e3:66:47:
                    9d:20:4a:46:ba:d1:70:da:12:cf:0d:f3:fd:77:97:
                    58:9c:cd:ec:71:1f:e5:d5:40:69:ab:a7:63:78:60:
                    1b:9d:f6:a5:ae:6b:43:af:ac:76:84:5e:c5:f0:1c:
                    3d:ef:a6:bd:5b:21:55:0c:a1:60:03:2e:a5:16:6e:
                    11:4a:d4:05:7e:01:87:c8:df:2e:15:a6:74:f9:c9:
                    a9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:24:50:56:C9:47:4E:5B:89:06:93:52:5D:9A:14:86:30:CD:2C:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1684d200-d4b2-39ff-af93-08705a3bdcb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:c8:c1:7d:23:98:be:76:23:25:c1:b9:5f:d3:00:39:80:79:
         8f:58:03:32:f9:3f:4b:b2:7e:b9:6f:66:ec:34:01:d7:98:e4:
         90:cc:ad:eb:b3:86:fe:88:b5:9f:c8:b6:31:73:cb:1b:97:fa:
         74:dd:41:05:e9:16:88:19:ae:58:d2:fb:5b:80:25:eb:f5:c6:
         34:86:d2:06:38:65:3e:6f:65:41:ce:0f:e4:35:68:f7:45:b0:
         be:19:c4:7f:70:24:35:b1:ab:17:72:8c:7b:09:a1:75:c1:17:
         6e:fa:09:2b:00:73:87:c7:46:dc:dd:9e:03:93:b4:e9:af:27:
         d1:ec:13:c0:56:6e:3e:0b:e9:95:4d:38:47:3d:b1:f3:2e:51:
         cf:6e:f7:f9:3e:db:65:ea:c7:1d:b2:24:37:64:ad:e3:70:e0:
         05:4a:4c:42:14:04:30:95:1c:43:b9:72:a6:ca:b9:17:a3:72:
         5c:13:4b:d8:5c:ee:dd:ca:56:01:be:d5:5e:d9:2e:ca:6d:c7:
         0a:1e:b3:d9:01:7d:b8:63:86:c8:70:17:36:88:48:b8:70:f8:
         59:f0:16:42:8e:5f:07:a1:59:24:77:87:c2:ce:db:c8:ac:16:
         a9:c6:20:9f:ed:dc:42:11:ae:f9:be:92:21:54:5b:4e:d6:6f:
         02:58:9a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:24:09 2025 by rpki-client