Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9284f204-6163-3e08-8fa0-c12bfc4bc4ec.roa
File:                     9284f204-6163-3e08-8fa0-c12bfc4bc4ec.roa (raw, json)
Hash identifier:          Itg5Lt/pq1PtV/dy/gvcZknb9Yi0mfvdDVYCxI7bNN8=
Subject key identifier:   A1:77:AD:F5:78:36:C6:35:AD:FC:0C:04:4A:D5:3A:9F:51:67:CB:17
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC876776B25F454B8736EE180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9284f204-6163-3e08-8fa0-c12bfc4bc4ec.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        172.68.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:77:6b:25:f4:54:b8:73:6e:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=c051ef19-361c-4401-9478-f87f989b7371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b9:a6:4e:ed:a7:c1:e9:d1:b0:22:67:39:8b:
                    ea:7f:fb:0b:68:0f:03:03:91:f6:48:c3:55:63:f7:
                    08:34:33:2f:89:67:18:6e:43:69:e0:e6:fc:c3:b9:
                    99:87:01:83:65:82:0d:c9:4e:1a:aa:10:0d:49:d6:
                    c7:5f:08:bb:04:3a:7a:1a:14:cf:a0:41:25:9c:2b:
                    7c:21:7f:46:90:12:26:68:0f:1e:6f:6a:eb:fb:28:
                    88:21:98:7f:46:9d:b1:a2:00:0d:c2:ca:00:ec:db:
                    25:f8:df:0b:60:24:30:51:fc:f1:40:01:ee:41:e6:
                    79:97:24:91:e2:27:de:f5:2a:43:a3:83:b3:a5:90:
                    db:5e:ca:37:51:ec:c8:53:60:1e:cb:40:a1:cc:23:
                    14:02:47:b0:eb:5c:11:7e:21:7c:89:48:da:50:3b:
                    6b:d9:06:ab:67:a5:54:ea:3b:e2:95:e8:50:a0:c2:
                    4b:3c:4b:62:b5:7b:36:42:9e:3b:7d:b3:af:2c:ea:
                    21:0f:35:a5:01:ac:bc:9f:dd:b7:1d:9a:86:a9:13:
                    1f:92:c0:bc:3a:85:3e:55:71:05:4c:78:04:27:c9:
                    ce:00:92:85:e7:ad:ac:bd:f2:14:7f:f7:74:44:13:
                    d4:04:37:b3:00:41:5a:ae:e1:27:fd:05:cd:c1:d5:
                    6e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:77:AD:F5:78:36:C6:35:AD:FC:0C:04:4A:D5:3A:9F:51:67:CB:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9284f204-6163-3e08-8fa0-c12bfc4bc4ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:75:ff:71:20:53:7f:06:20:17:ad:cf:61:48:6d:b2:df:74:
         e4:34:0b:5a:3f:83:a0:37:8e:8f:63:e9:68:87:2f:87:53:f7:
         5c:4e:c4:d0:6a:be:91:66:55:d4:1d:f2:22:36:ef:de:b1:5e:
         ae:04:0b:b9:72:f2:17:ad:d6:79:e1:18:89:40:4e:6c:36:23:
         41:62:51:aa:a2:56:f5:03:51:7d:7c:21:29:be:df:5a:19:f2:
         52:da:15:d7:4b:c2:4d:81:92:38:09:62:2f:0f:fd:78:c3:4b:
         d0:bb:2f:f9:cd:4e:87:8c:24:41:17:c5:00:68:dc:60:b8:23:
         7b:a6:27:c2:ce:e0:33:cf:a1:0e:83:5b:e1:58:40:36:85:d3:
         e4:db:99:eb:e7:3f:da:55:8e:be:46:c1:36:ca:b7:dd:c3:6b:
         40:7e:e1:fd:8e:17:49:26:b2:a2:ab:ab:8d:70:a6:98:6b:a1:
         4f:b3:6c:a0:98:89:ab:d9:1d:ca:c0:75:2c:1b:6f:fb:e9:a9:
         df:78:be:eb:6a:3d:15:96:25:9b:45:a6:93:d2:32:3f:8a:18:
         b3:76:b4:34:f0:b1:14:81:19:30:ea:1d:c1:42:86:a9:b9:75:
         cc:0c:fe:32:67:04:1a:d8:0c:d9:9f:9e:29:3c:c3:82:01:a5:
         ea:fd:9b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:12:14 2025 by rpki-client