Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/83d3c129-8ecd-3b31-8f52-f199d8b7e300.roa
File:                     83d3c129-8ecd-3b31-8f52-f199d8b7e300.roa (raw, json)
Hash identifier:          J4VsDv2hxU77QDct+DQIAvJdMjkfIdERg12T2ElhYho=
Subject key identifier:   9E:3E:1E:B5:E6:EB:2A:79:7E:B0:39:C1:DE:94:59:05:E2:5B:A3:1B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC876746147BDA4F4CE94F400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/83d3c129-8ecd-3b31-8f52-f199d8b7e300.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        172.64.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:74:61:47:bd:a4:f4:ce:94:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=6e15affd-e786-4e9f-ba14-3bb71ac269c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:60:51:99:3f:5c:23:3c:3e:d0:f5:30:33:99:
                    3f:84:bf:63:d9:c2:ad:d8:ef:47:15:3a:36:9f:c6:
                    04:04:f3:0c:bf:45:1f:e1:71:39:d8:e1:da:33:af:
                    43:6b:10:9e:94:ea:58:19:e3:4b:0a:7f:e4:59:2a:
                    a1:d7:fd:1a:01:6a:10:9e:85:a8:f5:5f:b9:b6:3c:
                    30:e2:88:b6:7e:a9:1b:1d:0a:7e:95:e3:d1:86:75:
                    2b:82:42:cb:4f:1b:51:37:68:50:c3:67:3c:ce:a8:
                    be:75:a0:ba:72:05:6e:b7:ec:0a:52:23:7d:6d:5c:
                    ac:5f:05:78:9a:f5:79:9b:fe:14:0b:4d:70:a6:c4:
                    e5:29:27:ed:25:47:fe:09:05:cd:5a:f3:1c:08:62:
                    43:c9:25:f9:a2:4a:e3:5e:05:bc:e8:05:e5:ee:fa:
                    ff:28:d1:2c:aa:e1:97:c6:6b:45:ae:9e:00:8d:6d:
                    d5:f6:d1:e6:9d:2b:a3:64:8a:d3:cc:57:cd:f5:76:
                    73:21:5e:de:43:04:fc:f0:0c:67:72:4c:94:66:40:
                    6d:03:cf:fc:2a:d1:5f:3e:db:a9:9f:4b:bc:61:30:
                    c0:7f:0f:8c:2f:d7:a2:9d:61:93:d9:71:b4:8a:9b:
                    84:41:bb:25:3d:1f:35:63:26:5e:2d:8c:a1:ec:6f:
                    f0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3E:1E:B5:E6:EB:2A:79:7E:B0:39:C1:DE:94:59:05:E2:5B:A3:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/83d3c129-8ecd-3b31-8f52-f199d8b7e300.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:da:cc:f1:77:05:aa:65:c8:69:91:1b:b3:e0:bf:3c:2a:ea:
         e3:ce:b3:87:5d:f7:e1:5a:8a:ff:be:bd:ad:4c:31:fd:cd:b1:
         3f:cb:d3:d2:83:07:9c:fe:7a:b9:cd:99:27:aa:f7:d3:9f:22:
         cd:4e:71:6d:4f:7a:3a:89:76:b2:25:34:f8:28:7a:77:b9:75:
         26:9a:be:37:7f:aa:da:24:2b:c5:27:c8:29:1c:10:a2:99:78:
         a4:ad:bc:6c:a9:4c:40:6c:74:9f:dc:c6:a9:52:80:24:19:2d:
         d0:1d:e3:af:19:aa:20:c8:43:75:66:f2:1d:87:e6:67:41:4f:
         e7:2b:86:5b:29:16:36:be:d7:19:27:ca:e9:42:ce:ee:1a:5a:
         dd:e8:01:62:69:38:a2:d8:f4:57:53:e6:98:80:01:f7:80:19:
         c9:18:05:d7:8f:2e:68:3e:77:c4:e2:d6:6a:dd:98:b9:91:84:
         b6:cb:48:e6:af:ed:c8:5c:8a:88:06:0b:d7:be:9f:e1:92:6f:
         a0:05:72:8f:8b:47:2b:77:80:ba:f9:47:5c:a8:f6:c3:d3:d7:
         cc:25:0e:23:73:ee:1a:ea:be:3e:fc:ee:a7:e9:d5:f0:3a:4a:
         8f:fa:52:80:8e:ae:81:64:69:00:b3:9c:09:81:48:39:2d:da:
         c8:ee:7a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:11:45 2025 by rpki-client