Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6fc1e1b0-0a8f-312f-8823-d4a80efa784b.roa
File:                     6fc1e1b0-0a8f-312f-8823-d4a80efa784b.roa (raw, json)
Hash identifier:          pb1wzb1VjerqMVzLUWVWD6oMUIO3Q/7+mv226WTLkv4=
Subject key identifier:   2A:02:0B:BC:03:BE:3C:DF:D4:6B:DF:15:15:35:A2:D6:8A:ED:54:F1
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584ACF7107A689CF5A7D7C496F60
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6fc1e1b0-0a8f-312f-8823-d4a80efa784b.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     13335
IP address blocks:        172.70.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:07:a6:89:cf:5a:7d:7c:49:6f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=6e6e2765-b208-4b4f-98da-f8af466a5f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7f:af:fb:ae:d0:c0:fb:06:7e:12:a5:7d:e1:
                    4a:e8:29:00:e0:d4:00:ed:b5:f2:f1:8f:38:d0:61:
                    d2:a8:b9:83:c9:73:1a:2b:e1:f1:3c:94:78:66:e6:
                    96:b5:c6:68:ad:5d:23:bb:cc:e4:24:1a:25:8f:b7:
                    b0:fa:50:48:09:c6:23:95:e1:a4:3a:3b:f3:5f:d7:
                    62:cd:11:1b:32:57:58:18:42:56:97:3e:f3:dc:05:
                    c1:10:58:d9:02:3f:ec:57:d6:56:10:d6:02:10:2c:
                    de:5b:20:a0:c2:d6:2f:1a:09:3a:50:04:ba:cf:c7:
                    f0:d8:40:8f:c2:a6:34:29:53:a9:db:50:50:15:81:
                    0e:9a:25:49:3a:31:67:dc:f2:23:91:e7:16:55:71:
                    12:eb:27:a0:01:ec:d5:af:84:e0:b7:a3:af:9a:9f:
                    5c:44:a6:47:53:b9:fe:91:92:8d:42:fc:75:09:65:
                    35:4f:9d:9c:bb:1b:6e:19:11:90:44:50:f4:a5:a2:
                    d9:03:a3:5e:7f:4f:94:e7:2f:03:1b:f3:3b:f0:82:
                    54:ce:a4:91:07:84:24:d2:4a:b4:97:ae:90:5d:d6:
                    86:44:ca:38:86:11:67:dc:09:54:08:94:d0:f4:13:
                    8f:a1:5b:c1:94:03:67:85:32:0d:10:b5:48:97:2c:
                    34:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:02:0B:BC:03:BE:3C:DF:D4:6B:DF:15:15:35:A2:D6:8A:ED:54:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6fc1e1b0-0a8f-312f-8823-d4a80efa784b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:64:60:df:75:cb:20:6f:9f:f7:43:15:87:69:e1:58:1e:a1:
         6b:07:b4:31:14:24:77:36:8d:8d:48:30:68:3f:c7:bc:f0:f1:
         92:04:57:66:89:96:fd:3f:88:19:b0:0c:c3:8e:3d:99:6d:46:
         ff:60:02:13:f2:f4:9e:2d:77:fa:97:82:42:60:42:f2:e7:6b:
         8b:69:e0:b5:25:83:86:b9:07:97:e1:80:82:57:f3:aa:22:3f:
         32:d9:9e:0b:d2:4e:f3:92:95:51:fe:05:57:24:d7:f9:6e:e7:
         42:60:6f:c9:f5:e0:56:77:b5:79:33:50:05:60:12:4b:11:1d:
         03:2a:e3:4a:64:2e:00:e1:1d:6d:ad:ef:92:b4:1e:0d:92:fa:
         67:ac:9e:2f:c5:fc:bf:b1:9c:b8:30:db:4d:7e:1d:1b:09:75:
         41:63:71:9c:25:ec:7d:34:c2:0f:3e:92:6c:b6:a5:f5:c4:db:
         7b:da:1f:dd:72:40:e8:77:b2:78:3e:24:e9:b0:f7:1d:63:5f:
         78:43:dd:d6:86:c5:79:53:20:d9:01:6a:dc:56:4f:01:3e:99:
         d9:bd:77:a3:d4:1c:3a:9a:15:3e:98:02:c5:5b:75:70:e2:2b:
         db:d1:d4:3a:a1:86:a9:ff:ff:73:3a:16:b6:2c:ea:3a:24:02:
         99:69:cf:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:53:16 2025 by rpki-client