Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75c0e043-e8a6-3765-bf4d-1dfa71f0793a.roa
File:                     75c0e043-e8a6-3765-bf4d-1dfa71f0793a.roa (raw, json)
Hash identifier:          pIY+6PayJCRMOG0qS7sB01HBQMLRSWHkfG0aGz6/ut4=
Subject key identifier:   0E:3A:8D:51:70:12:AE:71:32:CD:5C:75:D0:60:CD:76:7F:BD:E9:D6
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584ACF7105D089D99C2F170231E0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75c0e043-e8a6-3765-bf4d-1dfa71f0793a.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     13335
IP address blocks:        172.69.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:05:d0:89:d9:9c:2f:17:02:31:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=be0f50bc-0166-4115-a505-68619c0f6a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:02:7c:6c:c2:a1:5f:86:82:c6:51:aa:25:67:
                    f2:f8:40:85:6f:b3:e0:bd:40:e0:b4:d7:81:64:70:
                    57:9d:5a:3e:de:d7:34:18:4e:50:72:df:9e:d5:9b:
                    2b:83:ce:8c:85:bc:a4:aa:19:e8:38:c4:2b:39:0f:
                    50:ec:f0:f0:99:07:f1:8e:52:c2:c9:6f:13:60:d3:
                    7b:4a:00:bc:ec:a0:82:b1:2a:b0:ea:6f:c3:de:67:
                    7d:32:a4:d1:e2:fa:06:5d:f8:9e:28:fe:78:6b:45:
                    d1:8f:c5:26:db:eb:ca:bc:36:f3:28:2c:2a:4d:40:
                    14:df:7a:9e:bc:ed:69:01:00:dd:73:57:7a:82:f2:
                    24:ca:9e:85:31:89:0a:68:65:57:4c:56:e3:20:89:
                    18:c4:21:be:2d:0e:99:7d:59:78:07:0a:26:4c:52:
                    15:56:6f:5f:9e:6b:06:b9:9c:e1:6b:a3:95:20:8d:
                    62:23:bd:f5:82:0f:29:94:9a:4f:c6:46:ed:de:18:
                    e9:51:39:a4:7f:0e:3e:7b:88:8e:c0:69:52:93:59:
                    72:53:d9:bc:32:53:ef:32:5a:32:7e:6f:7e:bb:73:
                    75:86:21:ae:37:e9:45:08:10:ca:63:92:f5:3e:89:
                    9a:e8:e1:4c:bb:47:dd:57:80:91:6f:b8:f9:2d:25:
                    3a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3A:8D:51:70:12:AE:71:32:CD:5C:75:D0:60:CD:76:7F:BD:E9:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75c0e043-e8a6-3765-bf4d-1dfa71f0793a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ea:9c:79:cd:df:fd:13:77:1b:f8:99:c5:90:bf:37:a1:c8:
         e0:4d:d4:b6:6a:73:91:50:22:cf:f8:83:0d:9f:21:15:3a:56:
         a4:f3:38:cf:10:fe:5c:7d:ba:6d:68:8f:e3:d7:58:69:2d:d8:
         8d:da:b9:82:4b:f0:21:ec:8f:b3:7b:7f:0b:42:c5:6b:e7:1f:
         fa:04:cf:09:bd:51:d5:ac:b0:45:f5:ea:1b:f8:71:b0:02:ad:
         41:fc:c5:b7:4d:53:9e:66:d6:4f:96:bd:71:ca:e1:3d:11:6c:
         4c:ee:18:b5:be:8a:0f:59:06:84:a7:44:10:f9:ef:8d:97:27:
         4c:4e:f1:55:4b:97:df:24:86:df:04:59:8f:74:19:71:e5:34:
         f4:f1:15:8d:1b:1e:5f:93:3b:1b:e3:3c:4a:1f:f6:4e:14:22:
         a9:64:c1:6e:65:eb:8b:b8:d0:9f:93:4f:03:b4:f9:18:b9:db:
         37:c0:86:34:11:71:77:5c:8f:d9:5e:a2:0a:0e:fb:7f:62:50:
         b5:c0:42:03:2c:4b:bd:e5:a9:9c:95:b7:b6:bd:ef:83:3d:19:
         75:16:ca:c4:85:68:9d:ab:4d:48:04:ed:06:8f:be:cf:2b:fa:
         72:aa:cd:15:ed:44:69:5f:c4:1d:80:9e:27:e0:15:c4:19:72:
         e7:45:60:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:12:20 2025 by rpki-client