Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/18b5c07e-0374-316b-9db4-5f1c6ddf13ce.roa
File:                     18b5c07e-0374-316b-9db4-5f1c6ddf13ce.roa (raw, json)
Hash identifier:          j3v80H8aI3Zi4A/3dB9wNn+RrsHaZNxP1vC/bHVGciE=
Subject key identifier:   4D:54:CB:9A:FC:4E:A3:16:29:D6:91:C3:A4:DE:F8:10:E0:CA:B0:7E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584A4DA05381DA151064AAC43320
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/18b5c07e-0374-316b-9db4-5f1c6ddf13ce.roa
Signing time:             Wed 25 Jun 2025 01:00:49 +0000
ROA not before:           Wed 25 Jun 2025 01:00:49 +0000
ROA not after:            Tue 23 Sep 2025 01:00:49 +0000
asID:                     13335
IP address blocks:        172.68.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:a0:53:81:da:15:10:64:aa:c4:33:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 25 01:00:49 2025 GMT
            Not After : Sep 23 01:00:49 2025 GMT
        Subject: CN=5fd32e2c-2acf-4d9b-8261-10d457138852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9d:5b:a9:06:f7:8b:bc:ef:b2:9a:bb:d4:57:
                    b5:a7:2e:9a:22:5d:3a:90:79:8f:c4:b7:83:27:f6:
                    2e:5c:24:50:a4:b4:c9:bd:30:f1:49:85:54:b2:9b:
                    c7:08:73:0f:83:97:44:e7:f2:b0:2c:36:d3:f6:4f:
                    aa:0e:2c:7e:ef:f3:2a:87:9f:77:a5:6c:0a:06:08:
                    0c:1d:95:24:04:68:1d:30:21:dc:8a:5a:7e:72:e4:
                    ed:0d:e0:26:51:e8:1c:5d:c4:cc:ea:4c:81:fb:1a:
                    fb:de:3e:fb:f9:fc:c0:3e:06:e8:88:ea:8d:89:a2:
                    e0:19:d1:ef:d4:71:ac:df:de:1b:28:b9:c1:65:b5:
                    a4:99:df:69:44:47:1f:b4:ec:16:5a:72:36:ce:2d:
                    99:42:3d:f0:98:ca:3a:48:e8:d2:d1:87:7d:d1:76:
                    58:d5:92:ee:8c:25:00:e5:67:2c:a4:f4:82:5c:83:
                    d4:b5:df:04:49:d1:45:62:f0:61:99:1f:81:34:9b:
                    f5:c7:bb:97:8d:bc:0b:cc:4e:99:39:f0:63:b8:c7:
                    d4:11:71:9e:ba:e8:95:88:bb:b3:4c:71:3e:1c:65:
                    ea:f8:4e:2a:7b:0b:88:cd:85:ab:98:e6:e0:e5:60:
                    c0:8b:f5:a3:7d:fb:44:f8:2b:94:66:72:2c:f3:20:
                    b9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:54:CB:9A:FC:4E:A3:16:29:D6:91:C3:A4:DE:F8:10:E0:CA:B0:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/18b5c07e-0374-316b-9db4-5f1c6ddf13ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:12:30:e4:86:5f:b0:9b:06:f6:9b:6b:0d:30:bb:8c:24:0b:
         e1:32:ef:a1:2b:f4:b2:5a:b0:ac:75:ff:d8:a5:7d:7b:88:73:
         b3:f9:db:12:cf:5e:23:3a:56:a5:13:a2:d3:35:30:d4:41:64:
         a7:f5:bb:6d:1f:53:29:b6:4c:ad:31:dc:d7:63:50:d0:91:d4:
         dc:3c:3f:45:2b:07:1b:2c:7a:fe:93:c4:5b:28:92:00:89:a7:
         a2:da:5b:7d:d4:1e:9a:eb:60:0c:53:7b:51:47:08:a8:b9:a8:
         a8:c7:cc:b0:84:51:6b:9f:0c:76:28:c5:18:67:f8:22:5c:f7:
         d8:ad:85:0c:a2:bf:b5:d9:33:e6:2f:0f:74:e3:6b:53:93:b5:
         2a:80:e7:2d:ab:26:7b:fc:84:e2:8b:fc:c1:fc:a4:1f:ae:04:
         6d:b7:fe:a0:f4:ba:28:f4:fd:ae:0a:fe:7f:5c:bc:ca:e8:22:
         b3:f4:ec:64:ce:9a:0d:48:26:6c:bf:04:95:11:fd:12:71:9c:
         b3:b9:21:1c:29:6a:ed:e8:5f:85:ce:d9:ea:1b:cd:b1:d4:ea:
         5f:5b:10:99:79:6f:bd:89:ba:02:23:12:83:c7:89:59:52:fe:
         7c:74:66:17:7c:2f:49:e9:ce:c4:d9:b1:59:95:05:6e:a0:6c:
         ef:91:2b:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpNoFOB2hUQZKrEMyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDYyNTAxMDA0OVoXDTI1MDkyMzAxMDA0OVowLzEtMCsGA1UEAxMk
NWZkMzJlMmMtMmFjZi00ZDliLTgyNjEtMTBkNDU3MTM4ODUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu51bqQb3i7zvspq71Fe1py6aIl06kHmPxLeD
J/YuXCRQpLTJvTDxSYVUspvHCHMPg5dE5/KwLDbT9k+qDix+7/Mqh593pWwKBggM
HZUkBGgdMCHcilp+cuTtDeAmUegcXcTM6kyB+xr73j77+fzAPgboiOqNiaLgGdHv
1HGs394bKLnBZbWkmd9pREcftOwWWnI2zi2ZQj3wmMo6SOjS0Yd90XZY1ZLujCUA
5WcspPSCXIPUtd8ESdFFYvBhmR+BNJv1x7uXjbwLzE6ZOfBjuMfUEXGeuuiViLuz
THE+HGXq+E4qewuIzYWrmObg5WDAi/WjfftE+CuUZnIs8yC5yQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE1Uy5r8TqMWKdaRw6Te+BDgyrB+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMThiNWMwN2UtMDM3NC0z
MTZiLTlkYjQtNWYxYzZkZGYxM2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALkSMOSGX7CbBvabaw0wu4wkC+Ey76Er9LJasKx1/9ilfXuIc7P52xLP
XiM6VqUTotM1MNRBZKf1u20fUym2TK0x3NdjUNCR1Nw8P0UrBxssev6TxFsokgCJ
p6LaW33UHprrYAxTe1FHCKi5qKjHzLCEUWufDHYoxRhn+CJc99ithQyiv7XZM+Yv
D3Tja1OTtSqA5y2rJnv8hOKL/MH8pB+uBG23/qD0uij0/a4K/n9cvMroIrP07GTO
mg1IJmy/BJUR/RJxnLO5IRwpau3oX4XO2eobzbHU6l9bEJl5b72JugIjEoPHiVlS
/nx0Zhd8L0npzsTZsVmVBW6gbO+RKxw=
-----END CERTIFICATE-----
Generated at Mon Jun 30 18:02:13 2025 by rpki-client