Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e5868084-5d8c-376e-af1c-77fe0c67ae23.roa
File:                     e5868084-5d8c-376e-af1c-77fe0c67ae23.roa (raw, json)
Hash identifier:          VtAT0YsWQcbpQCBIIDZmhmMYFk0C7N/xTHmyWPTCV/k=
Subject key identifier:   5A:6E:CE:CF:53:E5:80:D1:DA:96:66:67:A6:02:48:C4:27:20:BD:53
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849F01A8AC544CF672BB2D77700
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e5868084-5d8c-376e-af1c-77fe0c67ae23.roa
Signing time:             Thu 22 May 2025 13:01:05 +0000
ROA not before:           Thu 22 May 2025 13:01:05 +0000
ROA not after:            Wed 20 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.71.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:1a:8a:c5:44:cf:67:2b:b2:d7:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 22 13:01:05 2025 GMT
            Not After : Aug 20 13:01:05 2025 GMT
        Subject: CN=c77510e2-6e31-4ac3-8788-a4631ebb4058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:78:a3:32:0c:0d:07:a9:3d:ac:c7:f9:68:a6:
                    7c:3f:0a:39:7d:a1:32:f9:66:9f:00:50:49:fd:1b:
                    21:ac:3f:3e:3c:e1:37:25:96:e2:66:69:0a:c0:3e:
                    6d:82:cf:77:41:c6:5d:7a:58:e3:b0:25:3f:58:f7:
                    ea:95:cc:59:42:2c:98:c3:de:6b:1b:e3:91:ad:74:
                    59:f4:1f:60:06:7b:ca:62:ad:ca:43:a4:0c:ce:ee:
                    28:9f:d4:e5:58:0a:0a:6d:d2:2f:ee:af:41:cb:bd:
                    47:10:fb:b0:e2:e0:f4:13:41:73:57:47:8f:bb:80:
                    fd:eb:63:6c:37:28:ec:33:b1:5d:4c:e2:00:5b:e8:
                    90:ee:ae:a4:b6:4f:ab:e4:03:5e:cc:3f:ff:02:91:
                    c1:12:18:be:44:a6:cb:4e:57:6f:3b:4b:61:4a:3f:
                    2a:78:85:e0:79:c1:ed:52:92:d9:1c:6b:1a:b4:e3:
                    e8:f0:1a:08:c5:17:79:8a:1f:2f:8f:32:43:50:09:
                    63:f0:09:5a:bb:a4:c5:b1:7e:51:7f:6d:ba:db:85:
                    d6:2d:7d:52:b2:db:89:31:27:14:8d:77:95:e0:a5:
                    46:34:7a:59:0e:20:fa:99:98:87:38:ec:4d:f6:a5:
                    16:c2:1c:50:aa:22:25:3d:43:12:c1:50:44:4d:c8:
                    8c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6E:CE:CF:53:E5:80:D1:DA:96:66:67:A6:02:48:C4:27:20:BD:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e5868084-5d8c-376e-af1c-77fe0c67ae23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:fb:d3:d2:d8:22:49:f6:65:fa:c1:c4:29:fc:a0:33:59:a8:
         89:a4:66:50:ab:fc:ff:d7:36:0a:9d:21:b8:24:36:6a:60:0c:
         97:12:94:1b:a5:47:ac:74:9f:c3:3a:74:e0:ed:75:cb:97:b2:
         35:cd:b7:dc:f2:e0:5a:ac:de:c5:c9:f3:29:49:53:e6:b7:3a:
         e3:97:4d:7d:79:bc:ec:90:10:1f:cb:84:1e:ba:36:64:02:43:
         e8:d5:91:85:b5:c6:d8:8d:1a:76:cf:58:0c:ce:4f:60:30:b2:
         02:91:d3:3b:35:49:b7:c4:0a:9e:65:a8:3d:42:86:34:91:8a:
         80:b8:c1:c1:4b:e0:2b:9c:95:dc:95:33:cd:d2:d1:c4:b0:0c:
         bc:10:78:56:99:e9:b0:de:d9:fd:dc:9e:03:94:45:a0:f5:0a:
         cb:41:22:4d:66:21:5b:55:fb:8d:39:58:a0:f8:d2:28:cb:17:
         e5:d5:75:93:b5:67:54:a2:7d:8f:73:83:3c:87:d8:d5:6f:45:
         3f:0f:f0:c2:a1:15:fa:15:2f:72:cb:bb:18:ca:3f:3d:df:9e:
         c5:93:5d:ab:a6:2d:53:f7:05:bb:9a:83:4f:f1:af:96:30:f5:
         40:d3:48:68:b4:7c:01:2b:11:2e:0a:7e:20:98:b2:3d:30:66:
         75:3c:22:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:24:02 2025 by rpki-client