Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dffdc67c-6029-3781-8b8d-0197fd071742.roa
File:                     dffdc67c-6029-3781-8b8d-0197fd071742.roa (raw, json)
Hash identifier:          UI0RjNX0QMWTa8YPx54J3+MuAbIUb8FZ3B0mMflZOag=
Subject key identifier:   C1:56:79:0A:77:BB:82:87:EA:3F:D5:F1:B5:53:8F:99:F0:DF:12:9C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849CFFF855C4262C5509D989CC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dffdc67c-6029-3781-8b8d-0197fd071742.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     13335
IP address blocks:        172.69.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:85:5c:42:62:c5:50:9d:98:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=c1d4c5db-f7de-4bc3-bf62-b7a294813669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9f:0b:1e:71:c3:3f:55:15:6a:2c:8a:9a:f0:
                    07:b1:af:0e:a7:15:8c:45:79:0d:25:8e:7b:f6:46:
                    82:1d:46:6b:e2:56:94:5b:f8:c5:93:f9:dd:e6:c0:
                    eb:59:db:53:6f:0e:8c:1f:1f:db:77:04:12:73:ce:
                    dd:4a:ed:26:83:61:81:b2:02:60:a1:70:31:fc:32:
                    3a:5c:57:b5:1c:5d:72:16:43:2a:a1:1c:1d:bc:e8:
                    50:10:d2:b9:c0:ef:d5:9e:8e:68:21:18:ae:d9:ff:
                    3b:9f:cc:1e:de:bf:9b:5c:15:34:9d:86:a4:74:d9:
                    55:8b:9f:bd:29:37:63:af:f5:47:10:ee:a6:76:d3:
                    cf:38:ea:61:2a:62:05:1d:90:ff:17:a5:fc:57:72:
                    ff:47:5e:b1:9b:eb:af:09:b9:c0:3e:99:b3:92:39:
                    80:af:64:98:fc:9f:c8:8b:98:14:2d:dc:7f:3e:4a:
                    70:a9:13:e5:a2:8c:a9:c4:f9:70:7e:91:33:1a:3f:
                    ec:c5:04:44:f3:df:ac:fa:b8:38:4e:68:f4:6d:4d:
                    7e:95:d7:23:3f:a3:5d:1b:88:e2:4f:5d:a0:6c:50:
                    27:a2:99:86:88:e7:f1:4f:9c:09:4e:53:8a:8d:77:
                    a6:3d:87:bb:57:b5:f5:30:53:61:e4:d6:cd:15:26:
                    87:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:56:79:0A:77:BB:82:87:EA:3F:D5:F1:B5:53:8F:99:F0:DF:12:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dffdc67c-6029-3781-8b8d-0197fd071742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:3b:9c:81:8b:28:f7:e1:23:43:95:f0:9b:26:32:f4:be:f8:
         90:60:4e:2f:fd:61:ad:93:95:bf:b5:1c:f2:6c:79:18:f4:6d:
         96:1a:ac:d9:9a:4f:f6:1f:26:42:dd:83:f6:a9:53:d5:b5:06:
         aa:cc:aa:ce:82:c0:24:48:4c:76:64:de:65:9c:40:cb:28:08:
         49:d0:fa:72:48:be:4a:01:7f:8e:db:73:ed:7e:f6:bc:9d:0e:
         74:f2:79:ad:5c:6b:45:f3:82:30:7d:1d:bb:7e:b4:ee:07:05:
         9a:d6:5a:90:6c:b5:a6:88:61:62:76:e9:43:36:15:c9:8d:ab:
         59:ef:f3:c0:c8:26:49:89:1a:71:f0:56:3f:2f:75:97:56:be:
         41:82:8b:1a:b9:a1:a7:f1:04:b1:09:16:a6:51:24:ae:51:30:
         02:3e:44:cd:32:92:52:ae:ca:1d:9a:c7:b1:d9:85:d5:2e:2e:
         f7:72:91:a5:6e:7e:73:be:fa:6e:89:e1:32:07:7e:a0:d0:61:
         1b:49:b5:e3:32:c6:c2:bb:34:56:f5:ea:fa:0f:53:7c:eb:a9:
         33:16:10:a3:cf:39:37:2c:da:56:05:02:38:0e:32:86:4e:83:
         e4:7a:82:a2:fb:c3:e5:d3:d4:e9:94:f5:b2:dd:5e:d9:41:2e:
         04:c4:af:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:21:08 2025 by rpki-client