Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75ab6e08-76ba-3923-8171-f1ff0de818f1.roa
File:                     75ab6e08-76ba-3923-8171-f1ff0de818f1.roa (raw, json)
Hash identifier:          NHvpGA49khxPm+iX+46n8OFiOHeBTQzpzFGwHPAqfEM=
Subject key identifier:   E3:E3:37:12:15:02:08:ED:03:8C:0C:7B:57:97:A7:B0:41:66:DA:DF
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584ACF7106A13DD86252C350EE40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75ab6e08-76ba-3923-8171-f1ff0de818f1.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     13335
IP address blocks:        172.69.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:06:a1:3d:d8:62:52:c3:50:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=86b119ed-dfb3-4b5a-800c-9a0216faf085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e8:3a:6a:df:a3:bf:61:8b:82:fa:94:1c:8c:
                    29:f3:74:76:b4:2e:55:33:db:57:8f:91:c2:90:7e:
                    0f:20:26:6b:60:b5:65:00:71:11:08:d1:f7:8d:a3:
                    61:a4:e3:fd:d2:3d:1b:6f:4d:8d:cd:9e:5d:25:f2:
                    38:bc:ae:be:92:4b:87:d0:88:00:bf:9a:7a:9c:4d:
                    a6:63:87:65:c9:79:a0:44:ac:38:ce:9b:0a:5d:d6:
                    34:07:13:0d:5b:0b:d9:46:ce:81:b5:47:97:52:73:
                    e5:98:df:8c:9a:f1:3b:95:e7:13:44:60:30:35:aa:
                    c6:94:b9:39:9e:3a:13:70:45:c4:6e:1d:35:c7:37:
                    e2:f6:80:28:d1:b7:2d:36:22:5c:e4:82:c2:6c:68:
                    c0:aa:d0:a7:c8:66:f6:b9:bb:a8:0b:cf:07:e6:35:
                    2e:15:5b:31:ab:18:66:55:70:17:60:0c:4d:3d:10:
                    b6:af:6e:10:0c:02:ec:db:d0:97:3a:66:3d:3e:e1:
                    4c:56:08:a0:9c:be:d6:72:9d:eb:6f:46:e0:32:ef:
                    f3:e6:40:56:79:70:0e:8f:92:99:bb:6d:65:09:56:
                    f8:97:b0:97:0e:d5:97:d9:eb:b4:54:12:68:54:4e:
                    c5:8c:36:26:b4:d7:d8:f5:26:9a:7e:fa:16:97:24:
                    c9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E3:37:12:15:02:08:ED:03:8C:0C:7B:57:97:A7:B0:41:66:DA:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75ab6e08-76ba-3923-8171-f1ff0de818f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:78:53:71:5b:99:79:30:28:43:cb:a9:64:b7:ce:ba:73:32:
         a1:d4:a8:bc:fe:16:75:24:ac:52:68:07:01:2d:e5:d0:d8:3d:
         e2:3a:a0:3b:2f:dd:fb:9d:59:3a:c0:16:78:8d:7c:5c:d0:d5:
         ab:d7:99:71:a4:e6:57:43:c2:0d:79:83:9c:16:50:8b:27:31:
         84:e8:8e:9c:ba:28:1b:91:65:b9:0d:8f:94:2c:ba:d2:52:9d:
         08:2d:dd:f0:1a:63:be:e9:d2:58:39:ac:d6:24:1d:aa:79:3a:
         b9:cb:8a:3d:83:8b:69:53:2b:01:31:bf:a4:53:59:68:59:b5:
         57:09:1d:fd:12:db:b7:73:0d:5e:a8:cb:eb:2d:64:f6:8a:4e:
         19:e5:7c:44:77:f3:22:58:19:36:b6:a6:78:df:4d:35:f7:11:
         3b:aa:1d:77:0a:6a:9f:52:0e:7f:1b:b0:75:eb:b0:4a:73:98:
         01:42:85:5d:9b:92:30:ae:58:98:39:27:b5:7a:de:d0:21:cc:
         b7:64:4d:cc:47:9c:72:09:d6:65:78:78:0e:34:7f:6a:8d:0f:
         5b:e5:4d:d5:6d:03:85:f8:07:48:9d:df:94:57:35:50:72:28:
         2a:66:f8:55:cd:5c:22:ae:ae:8f:f6:e2:70:99:71:ca:dd:0c:
         7e:c5:02:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:11:35 2025 by rpki-client