Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/77ab796e-54fd-332f-a5b6-90cb2da21116.roa
File:                     77ab796e-54fd-332f-a5b6-90cb2da21116.roa (raw, json)
Hash identifier:          nrq1ATzV6hgtxn8OdOEkigZcFwf36JDAkynWh6PYa3k=
Subject key identifier:   9A:EF:81:7E:E8:5D:EF:F1:B8:63:AE:A0:BD:ED:2C:45:44:14:5F:82
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AD0D65FAFFCCD6363E386F600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/77ab796e-54fd-332f-a5b6-90cb2da21116.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     13335
IP address blocks:        172.71.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:5f:af:fc:cd:63:63:e3:86:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=d7951d4c-c248-4d8c-a89e-e52e548f93c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b3:9e:7b:72:f9:bc:ce:de:90:48:1b:24:1a:
                    7e:b0:9a:89:3e:62:d8:76:c6:f2:7d:0c:55:f5:7a:
                    04:71:23:c5:15:e8:30:a7:69:c3:99:2e:13:30:88:
                    ef:d1:a2:82:6c:47:f1:92:28:c3:be:59:cc:e0:f9:
                    e4:8b:e7:d9:15:07:dd:c5:06:fc:b0:1f:47:29:5e:
                    2f:f6:f1:16:dc:fd:2c:0d:aa:60:e4:bc:67:bc:29:
                    8b:7f:67:97:65:71:1c:57:6c:c9:38:eb:7d:9e:24:
                    fd:b3:5b:10:f4:54:ce:1a:bb:8d:0a:46:f5:d7:a6:
                    0b:93:c1:c8:34:06:55:54:e4:c3:96:1e:c3:08:a6:
                    22:49:4d:fb:5c:3c:86:e3:7a:69:61:f7:33:8c:a9:
                    30:2e:46:70:47:ad:09:cb:02:c0:3d:15:62:cb:6a:
                    59:3a:a6:fe:3f:a4:47:bb:a1:d9:b0:ef:16:10:f5:
                    6d:f6:c0:75:15:30:ac:ac:87:7d:a8:85:52:42:0f:
                    c1:98:06:2e:53:d0:1c:26:19:ed:f2:5f:41:e3:e9:
                    8c:27:80:2f:0f:39:d8:7a:32:b4:d3:d6:d2:ce:77:
                    f8:72:09:d6:22:0e:80:4c:67:1f:e4:87:72:db:aa:
                    a6:7f:d7:18:81:03:6e:3e:88:23:e6:ec:c7:ef:8b:
                    24:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EF:81:7E:E8:5D:EF:F1:B8:63:AE:A0:BD:ED:2C:45:44:14:5F:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/77ab796e-54fd-332f-a5b6-90cb2da21116.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:72:b6:78:4f:86:ae:ed:dc:9d:81:9f:d8:b0:01:37:36:f6:
         48:9d:72:fd:bd:50:c9:8c:83:f1:c7:65:60:57:3d:c7:c1:08:
         76:b4:f1:98:77:70:e0:12:88:ab:c3:bf:39:51:11:c8:16:74:
         79:a8:ba:be:84:ed:94:fc:84:ba:37:32:34:bd:60:c5:bf:53:
         58:87:5e:99:1e:88:93:e5:28:6b:ef:af:5b:14:9f:ba:0e:5c:
         a4:16:df:56:06:40:84:f3:dc:20:92:1a:80:1a:57:23:92:34:
         4f:06:a6:72:64:d8:12:a5:ba:ae:d5:8a:65:b9:11:bc:5e:1a:
         b0:96:2c:90:32:c2:09:d5:e7:de:83:fa:88:a1:14:9c:da:89:
         4c:dc:2b:8c:84:b5:7b:67:59:cf:15:43:d2:5a:30:89:fd:ab:
         8b:23:ce:c7:3f:07:dd:76:79:a4:4e:5d:9d:a0:d9:00:98:cf:
         13:6b:3a:21:40:47:60:18:f5:4f:2d:64:5d:8f:a7:3f:12:3f:
         8d:03:a0:f3:9e:d7:a9:11:c7:2c:03:79:d9:b1:66:eb:b3:82:
         8b:b4:a8:04:54:a3:70:63:ed:43:e2:c6:3b:62:69:99:44:37:
         24:42:87:19:88:af:48:a7:7a:f9:7a:96:79:19:e5:8c:42:59:
         62:d2:41:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:11:05 2025 by rpki-client