Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c449f163-1ff7-3527-822d-bbca2261b6dd.roa
File:                     c449f163-1ff7-3527-822d-bbca2261b6dd.roa (raw, json)
Hash identifier:          bd0TFmEd/zhThR2Q1QNo+F/jUglYY4UyjTnlPFD4FVw=
Subject key identifier:   50:0D:11:2A:89:38:52:70:7E:3B:55:5A:AD:6B:A3:09:C3:D0:69:36
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849EEB50A0FB3A352C3E0D28F80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c449f163-1ff7-3527-822d-bbca2261b6dd.roa
Signing time:             Thu 22 May 2025 01:00:51 +0000
ROA not before:           Thu 22 May 2025 01:00:51 +0000
ROA not after:            Wed 20 Aug 2025 01:00:51 +0000
asID:                     13335
IP address blocks:        172.70.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:b5:0a:0f:b3:a3:52:c3:e0:d2:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 22 01:00:51 2025 GMT
            Not After : Aug 20 01:00:51 2025 GMT
        Subject: CN=bb3f9bb7-f63a-4f45-b5be-197d287046dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3c:b8:3c:dd:ed:98:09:d2:7f:77:e6:b6:c6:
                    d2:bb:ef:bf:3d:02:61:28:8f:5b:e0:7d:45:d0:d3:
                    53:62:3c:a6:ef:14:c2:18:10:2f:6a:eb:06:49:c3:
                    cd:ad:61:d3:e4:fb:c1:54:8b:1a:33:4d:80:e1:62:
                    2f:32:9d:08:5c:6c:b4:23:14:0e:6d:1b:e4:cb:f0:
                    1e:1d:02:a6:8e:7a:cf:ba:66:06:84:74:ee:99:e8:
                    0b:60:ef:c9:7a:b6:75:56:65:e0:0c:f0:3f:6a:1e:
                    d2:87:58:67:58:1e:50:3e:47:ae:9f:35:1f:36:4b:
                    6f:ce:3c:d1:83:e0:95:01:96:98:bb:25:70:3a:1b:
                    c5:2a:d8:a6:80:d3:3b:55:17:55:b0:30:49:26:db:
                    09:4d:0a:4b:82:7f:63:20:ac:da:30:d2:19:33:f9:
                    c7:60:ce:35:c8:ed:ef:1c:78:1a:60:e2:2c:10:90:
                    24:a1:ef:5b:5c:ea:20:65:c3:79:f1:62:56:67:67:
                    33:ac:98:9a:d7:f8:c4:9f:7f:24:f1:61:29:85:2d:
                    2f:a9:fc:8d:e1:21:6c:8a:27:a8:0b:af:50:99:d2:
                    ac:eb:36:e5:5a:b4:f9:8b:93:2b:94:c5:79:83:d7:
                    b0:c2:dd:f3:6e:8d:8c:dd:62:8f:3c:a5:f3:82:93:
                    75:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0D:11:2A:89:38:52:70:7E:3B:55:5A:AD:6B:A3:09:C3:D0:69:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c449f163-1ff7-3527-822d-bbca2261b6dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:05:f4:08:83:66:39:b9:23:de:b3:f9:7b:11:c4:60:b9:9f:
         d9:df:6f:9f:a9:c4:0a:1f:13:61:41:5e:2e:46:8f:80:25:a7:
         02:e8:93:90:fe:7f:9e:00:e8:8c:a7:9a:c9:7d:fc:2d:3a:6d:
         c9:10:03:24:1d:85:79:32:6e:f4:ca:25:fe:b6:e0:91:3f:06:
         b2:b2:92:3e:ed:fd:2f:20:bb:84:f3:f3:fe:8a:5b:03:4e:57:
         ca:b8:85:2d:9f:b7:9c:b7:88:6c:d5:36:a2:91:73:6d:27:e3:
         98:f0:39:2a:81:30:80:4b:3d:af:e2:19:1a:0e:1c:8f:85:db:
         01:4b:e3:07:e4:3e:89:ec:93:00:cb:f5:4c:b8:d5:8b:fa:5c:
         17:76:4f:64:2f:b8:a7:a9:74:fa:18:a8:d3:45:cf:11:28:8e:
         59:14:5c:ce:cd:63:20:88:b8:a1:67:6c:75:9b:31:38:30:a1:
         1c:c8:ae:b5:2d:d2:06:61:6f:76:9b:d1:00:c9:d1:eb:01:1e:
         ca:17:66:9b:67:67:8d:b9:19:cc:09:05:f8:4c:50:9a:25:ff:
         7d:a0:b9:bf:74:04:97:a1:3a:3f:5c:50:15:91:4b:e1:bf:1c:
         35:35:71:de:90:cb:93:d3:f6:d4:04:5a:51:48:79:39:98:3e:
         0c:99:d2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:07:31 2025 by rpki-client