Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a2a0e4f9-01ab-3e77-8ce9-e2d31d42ce36.roa
File:                     a2a0e4f9-01ab-3e77-8ce9-e2d31d42ce36.roa (raw, json)
Hash identifier:          0pN9s3m2YCU4CZyRylytxX+e6UV1B97v0bfNPwpPQWI=
Subject key identifier:   31:B1:F7:6F:67:32:CA:F9:CD:91:ED:E3:E5:48:8E:EB:8B:34:DA:E7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849EA854827A2EF9A758038F3C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a2a0e4f9-01ab-3e77-8ce9-e2d31d42ce36.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.69.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:48:27:a2:ef:9a:75:80:38:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=c6674f73-14c4-43f9-92bc-96f8b8e04008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ab:8f:14:b2:f5:ca:c3:f8:36:fe:db:e3:c2:
                    c9:df:24:19:1f:ca:c8:7a:24:c9:4b:73:cb:00:de:
                    3a:3f:43:44:dc:1f:89:a1:65:69:22:a7:a9:48:36:
                    dd:03:e4:93:0d:c0:ec:2e:b9:85:f4:0f:d6:65:35:
                    00:c1:b1:c1:30:a8:12:8b:be:ad:82:31:a0:b8:89:
                    fb:6b:38:e7:95:84:de:65:37:c4:c2:19:8a:3e:0f:
                    d6:5b:14:32:d5:5e:50:32:8d:f6:54:fc:ab:20:76:
                    71:f8:b9:b3:10:bc:44:fd:c2:50:b9:75:7a:e9:79:
                    c9:65:20:b9:02:7e:12:96:bb:91:b1:19:68:8e:88:
                    31:a3:53:0a:60:e1:8d:51:fd:e1:45:85:42:f7:84:
                    f5:83:f4:42:e0:90:b7:c1:60:da:cd:16:5a:68:4a:
                    7a:78:c0:20:d5:bc:0a:e2:e4:d6:2f:79:08:55:be:
                    b9:dd:bd:f2:dc:b5:fc:9d:79:08:ad:dd:1c:9a:7b:
                    72:56:ae:9d:e4:55:1f:84:0f:aa:7f:e6:87:4e:35:
                    35:d2:96:c3:20:b2:2d:3c:ed:0d:8a:ed:6d:e0:28:
                    5d:77:90:17:e6:0f:56:58:79:b0:e7:8b:7b:58:68:
                    2f:e9:78:7b:87:6e:da:38:2f:11:ca:80:0f:dd:10:
                    25:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B1:F7:6F:67:32:CA:F9:CD:91:ED:E3:E5:48:8E:EB:8B:34:DA:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a2a0e4f9-01ab-3e77-8ce9-e2d31d42ce36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:63:1b:da:47:7d:57:de:8f:56:ff:24:a3:8b:33:41:0a:00:
         a2:02:d5:08:8d:ca:25:9e:94:97:6d:61:ba:52:77:b5:90:5b:
         73:0c:63:aa:b6:b7:a2:89:74:53:ed:e0:29:37:5b:35:5b:75:
         cc:48:c3:95:eb:fe:a7:30:8e:24:fd:46:44:63:ad:77:d2:e9:
         25:0c:3d:b9:38:41:c5:95:43:e5:df:65:b4:50:1c:8e:62:31:
         a4:8d:fe:3a:35:15:a6:e2:04:0a:0d:0a:c0:82:ac:ff:b5:51:
         b9:87:34:49:79:d3:77:26:c9:51:2d:53:ce:30:bc:dc:b2:dc:
         e4:f1:28:d2:31:21:1b:2c:16:5b:b7:46:02:ed:27:9f:d0:ba:
         0c:c6:05:da:44:cc:69:35:69:95:f9:c0:44:23:30:c1:4a:53:
         31:ff:62:b7:1d:5f:f6:d7:e0:41:23:05:9a:32:fe:f2:fd:ec:
         9e:d8:ba:ee:c1:44:25:7e:5f:05:81:d6:e9:e2:89:87:f0:e5:
         4f:be:1d:8b:7e:97:ad:82:c3:ff:2a:96:d4:13:d4:e0:6e:c1:
         4a:c6:06:d6:02:02:66:c0:c0:28:3f:bd:dc:af:16:05:3c:58:
         03:1a:d5:44:fe:c0:3f:24:23:32:0b:2f:f6:4d:99:df:b7:c1:
         9d:0b:c1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:58:45 2025 by rpki-client