Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae577d54-2270-3f5c-b015-e15447a7aeab.roa
File:                     ae577d54-2270-3f5c-b015-e15447a7aeab.roa (raw, json)
Hash identifier:          GFOX3nkogd4k6qAqhzOF38GwHF39STzoaEn8YNiOIZQ=
Subject key identifier:   A9:04:18:2C:92:12:43:64:CD:E9:2F:88:26:27:F8:E0:B1:39:8B:69
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E7BA9D45765CBD07E4813D00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae577d54-2270-3f5c-b015-e15447a7aeab.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        172.64.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:9d:45:76:5c:bd:07:e4:81:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=dc46db6f-10f6-4aa3-8383-c9832ea8ba9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:81:4a:f3:44:de:75:f1:71:7a:30:78:d8:01:
                    d4:09:6f:d0:e8:c2:78:37:1b:67:75:1b:b4:26:45:
                    7d:c9:b4:49:84:5f:5b:cb:0b:b5:9a:f6:19:f9:c9:
                    32:82:ac:a7:46:cb:ce:3e:6c:a3:11:1f:59:76:2f:
                    48:7e:90:6c:9f:f0:ff:6a:2f:43:51:a7:45:01:e3:
                    95:e9:1f:dd:a5:3e:a8:37:4f:76:d5:17:59:19:fe:
                    a7:5b:eb:c4:2d:21:18:19:2c:f1:76:b1:2d:27:61:
                    fd:2b:5d:1b:30:23:3f:32:01:1d:1e:dd:4a:85:1c:
                    0e:9d:e2:4f:ee:6c:71:ef:de:77:da:88:63:09:c0:
                    b0:cd:89:dc:0f:42:7b:40:50:da:1b:5e:29:19:e0:
                    a1:54:be:87:c3:3e:8a:ef:76:c2:7d:c2:4f:73:7d:
                    b8:72:6c:57:10:96:c8:5c:c5:ec:15:f5:27:f0:a3:
                    fb:b1:05:4f:bc:f7:45:3d:ba:86:cd:db:1f:51:e5:
                    f7:08:f0:31:f8:8e:4e:9d:af:00:ad:90:80:0d:81:
                    38:7b:17:94:1c:c2:9a:30:83:c7:00:e8:9a:78:0f:
                    2f:20:79:0a:8d:bd:19:87:28:37:65:f5:65:07:7c:
                    1e:c7:12:36:74:4e:fe:b9:28:f3:1b:ef:ae:24:d1:
                    81:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:04:18:2C:92:12:43:64:CD:E9:2F:88:26:27:F8:E0:B1:39:8B:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae577d54-2270-3f5c-b015-e15447a7aeab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:9f:9b:ab:70:c5:83:81:39:cd:8c:42:fd:1b:c9:9c:1a:69:
         a4:46:90:93:73:5d:24:0b:c9:63:14:c2:bb:e5:e3:0e:34:7e:
         e7:8e:47:ca:61:8b:2a:74:3c:63:b5:fc:94:9e:66:fa:98:a9:
         ca:60:66:77:3b:80:44:97:f3:0f:e4:43:10:d6:07:fb:d5:11:
         62:52:46:5d:48:10:2a:b4:72:21:c1:94:62:1a:2f:2c:88:b9:
         1d:d2:6d:a1:64:3b:30:a2:54:1f:81:82:cd:45:63:93:31:ce:
         34:61:95:c2:72:df:90:b7:c3:38:98:8f:8f:26:f1:9b:4d:e5:
         cd:37:4c:df:ec:b1:52:03:88:40:2a:fe:27:a9:24:d8:2a:2b:
         c9:42:72:06:06:2c:b6:96:94:0f:23:9f:a8:02:62:2d:e5:8e:
         ab:18:e9:e2:d7:31:40:0a:31:b3:7d:fc:64:6a:43:ab:ae:a8:
         df:d2:88:88:8c:b3:d3:7e:88:ea:09:b2:9d:54:c9:4c:17:70:
         c7:40:5b:87:e6:ab:d8:d8:4f:4e:9d:b9:56:b2:b5:60:47:d4:
         3d:9b:97:30:22:43:ca:4c:dc:ce:93:6b:51:a7:ad:c7:e4:17:
         4f:8e:36:cc:0a:7b:cb:1d:33:a7:c6:b7:74:f6:26:6a:7f:04:
         87:cb:ea:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:23:24 2025 by rpki-client