Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f98533c0-f6ab-3219-8d9c-204e91265536.roa
File:                     f98533c0-f6ab-3219-8d9c-204e91265536.roa (raw, json)
Hash identifier:          DrBIV8XmmBalmHJM6BSiAbo1g/888YlB+gaf/RWMaA8=
Subject key identifier:   10:49:9B:F2:02:6F:B9:4C:7F:89:91:F5:DA:69:08:D9:DC:A4:14:2C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E6550C8D91E3550FFDC05AA0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f98533c0-f6ab-3219-8d9c-204e91265536.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     13335
IP address blocks:        172.69.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:55:0c:8d:91:e3:55:0f:fd:c0:5a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=cc2cf15e-7a5a-4089-af25-657ebbf35331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e9:32:70:22:d2:1b:c4:60:52:75:2c:c1:42:
                    f0:08:0a:07:ef:bc:b7:55:a6:91:00:a4:cc:26:0e:
                    d4:42:f5:80:5c:af:6b:29:b1:e2:ab:74:4c:69:3e:
                    7f:84:97:27:d2:d0:3b:e3:fa:18:40:70:84:7d:01:
                    37:15:c6:e9:a0:ec:b3:5c:03:1b:a2:66:ce:10:bf:
                    0d:71:03:a3:9a:9f:46:0f:0f:f6:28:29:37:eb:ab:
                    36:6e:e7:7f:15:18:ab:d7:1e:bb:57:cc:86:fc:a4:
                    fc:49:d9:c0:e4:61:a9:1f:53:12:a9:61:c9:ea:ef:
                    57:45:28:5a:e4:7e:d4:61:7a:4b:91:8b:9f:f7:53:
                    6b:d8:2c:3b:f1:e8:3d:cf:98:ca:d7:ee:70:01:2f:
                    42:e5:15:6d:bc:c7:73:50:ad:30:22:0e:f4:a4:4c:
                    19:6d:d9:a5:39:17:be:86:04:cd:e3:6f:14:9d:fe:
                    64:11:8a:7f:7d:6d:eb:8a:cc:51:93:5e:4f:56:c3:
                    18:47:87:23:ac:ad:a8:42:43:90:be:19:91:31:cc:
                    36:32:68:e0:4d:47:65:49:48:6a:91:27:6e:6a:49:
                    2e:28:a6:ad:5c:60:0e:a2:24:df:bf:1e:44:60:ec:
                    87:3c:9d:d4:d9:d0:60:36:bb:b9:33:61:fd:7e:21:
                    d1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:49:9B:F2:02:6F:B9:4C:7F:89:91:F5:DA:69:08:D9:DC:A4:14:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f98533c0-f6ab-3219-8d9c-204e91265536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:3e:52:ae:b8:e7:55:8b:83:8e:a1:51:e0:1d:b2:4a:ac:63:
         cf:a6:b8:b5:f8:45:af:f0:19:fd:e3:c9:de:d9:12:84:f1:c8:
         e4:03:01:43:23:8c:cf:ab:4f:1e:ad:13:3c:3b:f0:16:c6:dc:
         e9:52:9d:cf:c0:63:17:78:ce:db:45:b2:19:7d:09:dc:a2:9e:
         6e:8b:a3:73:28:f3:5a:b5:9b:e8:fb:7f:bc:53:ff:de:d2:a3:
         33:c6:3f:dd:17:7d:9e:63:97:01:cf:83:b4:09:a5:70:57:4f:
         00:ab:0a:04:db:86:60:dd:66:c7:af:dd:03:a0:6e:42:d9:ce:
         35:ba:22:8a:d8:33:e0:71:82:bd:c0:1d:82:c0:74:f2:45:d6:
         af:1e:0d:8f:10:6e:d9:41:4d:7c:8c:3e:4a:fe:ee:57:9f:e5:
         f9:4c:aa:36:6d:aa:cf:3f:d5:1e:48:4f:84:8c:47:69:1d:29:
         16:cf:78:b4:76:13:12:76:f1:d7:b7:d6:4a:6e:d8:ae:04:f2:
         3a:9a:aa:0d:a7:d0:93:c4:27:c3:0c:ca:e1:fa:3a:f5:83:c6:
         3c:0e:a4:bc:b9:bd:67:e0:37:3c:5f:c2:7c:f2:1d:3f:ce:7d:
         4c:c2:c4:ed:c1:5e:e2:af:c2:59:57:43:f6:1d:97:0f:db:40:
         14:4e:d1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:06:35 2025 by rpki-client