Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8178f9ff-f72b-351a-b064-631c01946efd.roa
File:                     8178f9ff-f72b-351a-b064-631c01946efd.roa (raw, json)
Hash identifier:          yZ4j/kNC0Vh2rHI71TYddSO7OSoWZgs1CnsUjJi/uK4=
Subject key identifier:   91:75:B0:30:33:5C:9D:BC:4D:9E:6D:B7:47:BC:3B:EA:EE:F9:D6:FB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584ACB411A168F9B8D99E4200780
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8178f9ff-f72b-351a-b064-631c01946efd.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        172.69.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:41:1a:16:8f:9b:8d:99:e4:20:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=dafd6ffb-51d9-4984-9d24-f5781154ba34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:86:52:25:98:0d:f4:2b:6e:2b:9e:43:e0:81:
                    7e:91:6d:c3:f9:6d:cf:bb:98:17:bb:19:56:0a:15:
                    7a:e5:c2:cc:1b:e2:a6:13:02:cb:14:f9:ad:f0:7e:
                    fb:b6:9b:71:db:51:68:f8:66:17:10:bf:3a:ab:0c:
                    61:0a:bc:ea:2d:ea:7a:ed:5b:6c:d7:cd:cb:7d:ba:
                    13:0c:cb:b6:48:b2:2a:c0:e5:ed:01:0d:04:22:88:
                    89:69:3b:27:30:34:03:c4:48:dc:99:4f:80:e7:a3:
                    bb:66:e1:7b:4d:01:9f:4c:ee:df:f9:bb:57:ac:45:
                    d5:50:27:6f:4b:9f:6a:0d:fe:47:41:e1:ce:85:6d:
                    56:27:e3:86:e9:b2:61:4d:f9:95:f9:ef:db:d3:9f:
                    76:d2:e7:9b:bf:fe:04:b7:cb:1f:39:ca:72:42:ae:
                    df:91:4f:23:7e:65:a7:b7:40:1b:78:95:1b:64:36:
                    24:d8:df:0d:1d:84:82:61:9c:d6:15:47:fd:ec:26:
                    fa:df:d2:59:0a:6b:92:af:cd:59:4f:28:75:61:26:
                    69:1f:7c:20:90:0f:c3:74:00:c0:fc:9b:e5:8b:5e:
                    28:0b:0d:e1:8f:d5:ff:13:f5:7f:39:82:f5:ac:b0:
                    41:2c:3e:11:17:7d:f6:58:cf:3b:fc:0b:08:6e:20:
                    58:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:75:B0:30:33:5C:9D:BC:4D:9E:6D:B7:47:BC:3B:EA:EE:F9:D6:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8178f9ff-f72b-351a-b064-631c01946efd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:7e:77:b4:92:ef:b4:ba:6e:cb:f1:d1:c2:67:5e:48:37:de:
         1a:9d:06:7d:67:2e:4e:3a:ca:64:ba:aa:57:c4:c5:9c:f2:b4:
         a1:b1:4f:12:3f:a3:94:3e:83:93:4c:e6:61:86:b8:14:c5:e0:
         3b:92:fd:87:ba:69:1d:7d:f3:b9:88:89:d5:d0:e5:13:54:ef:
         5e:e7:bf:a6:94:44:6f:be:95:a8:32:3e:9b:c5:89:4f:d5:c1:
         84:cc:61:44:6e:94:c2:f9:52:c4:f5:32:e4:90:6c:99:c5:81:
         a9:3b:ae:b3:14:6d:ed:86:b9:75:fe:41:59:dc:d6:8f:6d:e4:
         79:87:d0:22:c2:48:44:3f:e9:54:3d:47:d8:11:b2:7c:eb:49:
         d4:c4:8f:43:06:28:13:e8:47:7e:a6:6f:bd:e0:14:a0:4d:ba:
         f7:c0:fc:0f:dc:62:59:11:8e:39:cf:78:37:de:e6:84:9c:c8:
         d1:0a:cc:85:95:ec:c5:da:e8:c6:94:6e:92:58:3b:29:bf:a8:
         d5:6a:c7:83:f8:52:96:b1:82:99:ee:63:d7:19:bf:2c:2f:c1:
         8f:1d:a9:de:d9:fc:f5:39:85:8c:58:3b:21:51:58:95:26:16:
         94:08:d1:52:ca:81:9c:28:01:8e:2d:6c:d9:e5:ef:f9:db:c6:
         fc:7b:da:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:12:02 2025 by rpki-client