Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b4d8ae5-ba66-3f6c-bf77-49ed8dbac98c.roa
File:                     6b4d8ae5-ba66-3f6c-bf77-49ed8dbac98c.roa (raw, json)
Hash identifier:          K4VYzgwzaJ5hJClCRQ2CYSMP3gtWxPVMiuOkVv3Ru6k=
Subject key identifier:   AF:C5:43:68:6F:06:97:70:8F:E8:38:72:30:12:F8:CA:A1:83:A7:0B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC876682AF1ADC2C5A8C20CE0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b4d8ae5-ba66-3f6c-bf77-49ed8dbac98c.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        172.67.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:68:2a:f1:ad:c2:c5:a8:c2:0c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=6655bab8-7c20-46b2-b7a9-e0cc52d48436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:df:11:90:62:4b:11:40:92:85:3c:d8:9a:9b:
                    c1:3a:45:ba:36:9b:f2:f0:90:3c:7c:28:de:16:3c:
                    2e:c6:78:02:d1:14:fc:d6:1d:3b:1f:c3:76:6a:3e:
                    a9:50:26:10:d5:12:80:77:ce:6b:7e:9a:4e:50:e2:
                    74:04:3c:3b:07:c3:66:32:0e:44:a1:e5:17:93:a7:
                    3a:b5:2c:37:74:42:d1:1f:ea:b6:ad:6f:3e:63:22:
                    4b:b4:0d:8e:64:fa:67:33:4f:0f:e8:f4:42:24:40:
                    31:ea:f6:30:26:6e:50:09:c7:e4:19:e2:6b:de:5f:
                    35:af:a5:0d:d7:62:24:0c:02:2a:13:de:39:36:e2:
                    02:02:ec:41:7e:ea:62:0f:f3:57:77:be:b5:12:e9:
                    f1:5a:e8:5a:3e:bf:01:5a:0d:e3:b1:02:e0:16:27:
                    b0:ec:d1:24:2b:1c:32:f5:88:62:24:13:f9:fb:55:
                    7d:04:53:04:aa:56:57:e1:b2:d1:e1:92:53:27:44:
                    fb:b0:d5:cc:54:04:37:96:eb:15:cd:93:16:7d:d2:
                    99:f2:70:81:01:2e:40:58:f0:ee:66:dc:e5:13:b7:
                    90:62:f2:57:0a:85:f5:20:e4:20:70:b8:9a:4d:56:
                    01:74:7f:db:a2:5f:96:33:47:04:13:46:39:0e:20:
                    40:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C5:43:68:6F:06:97:70:8F:E8:38:72:30:12:F8:CA:A1:83:A7:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b4d8ae5-ba66-3f6c-bf77-49ed8dbac98c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.67.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:00:65:a4:b1:00:81:b2:3d:4c:57:15:42:96:48:4b:b0:11:
         ca:c2:d2:d4:21:1e:d3:d0:cf:34:f7:78:8d:28:a2:34:e4:89:
         ac:7d:f9:d2:0d:e9:ff:77:02:1e:58:34:4d:25:9b:a6:da:74:
         02:31:bc:e9:25:c7:26:e8:46:49:21:ae:1c:a3:88:c3:2a:41:
         a4:5d:3c:33:c3:3c:93:88:9a:b5:d2:18:4f:2b:c2:7d:c8:0c:
         67:1f:17:d5:89:95:6d:92:0e:a3:2c:73:42:29:56:d8:64:2b:
         08:55:2a:03:31:bf:14:7c:15:39:33:f8:03:5a:c8:46:f7:c4:
         22:96:c1:73:76:f0:98:55:be:a8:4a:97:22:67:26:1c:e2:c5:
         73:28:6a:b6:3e:5b:a4:26:a7:47:f9:db:de:f8:9e:34:66:8c:
         26:7e:88:16:ca:81:78:7f:76:d9:51:13:5b:59:58:84:c2:20:
         0d:14:31:7b:55:e6:23:11:b4:b4:60:cf:88:61:67:54:70:43:
         47:15:53:08:7c:8d:22:3b:29:d8:16:5f:17:49:f8:65:5c:11:
         80:89:c5:4f:9b:9a:d1:91:8f:69:1a:91:20:fa:43:3d:33:cb:
         b1:38:97:69:be:e6:88:1c:e7:f8:83:e0:2d:71:77:c6:4b:91:
         42:f6:c8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:07:54 2025 by rpki-client