Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa6381ea-eabb-3e18-94fb-575bf9617826.roa
File:                     aa6381ea-eabb-3e18-94fb-575bf9617826.roa (raw, json)
Hash identifier:          y7CTZWz2LruNBhs8ycFK30yMobrx/Hs7LmQdZTRAt3g=
Subject key identifier:   0F:B4:AB:30:7C:A5:93:FE:32:33:31:49:37:F5:DF:AD:DB:9D:D3:08
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC71112D6D7ED0A19A58628A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa6381ea-eabb-3e18-94fb-575bf9617826.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        172.69.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:12:d6:d7:ed:0a:19:a5:86:28:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=b5bc6e80-a51f-47cf-8fb7-138b2f6dec62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:14:db:6a:d2:7a:be:ae:97:73:36:7a:b3:f9:
                    d8:4f:28:60:0e:10:5e:bd:a4:96:3a:2c:55:11:64:
                    61:42:ad:20:78:5f:a0:b5:a8:ce:df:b4:f8:c2:5f:
                    0f:92:c4:dd:c4:50:4d:1a:86:5b:fa:30:64:2f:ef:
                    0f:89:ea:6a:87:84:2b:c8:b7:8b:d4:1f:2a:8a:0d:
                    d4:40:66:0a:5d:93:73:6d:33:93:8b:50:bf:6c:55:
                    8f:a3:39:fe:12:8f:ef:28:69:2c:c9:7f:75:5f:87:
                    ce:ae:c8:79:12:a9:7b:46:4a:08:7a:b6:d0:51:c6:
                    44:aa:61:a9:ce:c3:0e:55:05:8a:48:51:fd:48:9b:
                    c7:42:d1:ad:2a:6d:5d:8d:76:b2:47:9b:ea:31:3c:
                    bd:78:33:4a:93:7d:73:86:61:59:e9:eb:fc:e1:72:
                    29:15:92:d8:1e:41:70:16:03:95:af:ce:89:91:cf:
                    e4:d7:d3:e1:b3:4d:bb:e0:f6:58:15:30:c2:52:8e:
                    84:5d:fe:59:f0:13:45:9d:4b:af:da:65:28:0c:e2:
                    34:cc:6c:d0:7a:e9:db:03:cc:f5:be:2b:1c:22:11:
                    f7:04:7b:90:ef:91:3c:4e:1b:35:8a:9d:64:11:f2:
                    b0:d4:03:4f:28:2f:1e:c6:45:c3:32:ef:84:f1:b7:
                    12:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B4:AB:30:7C:A5:93:FE:32:33:31:49:37:F5:DF:AD:DB:9D:D3:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa6381ea-eabb-3e18-94fb-575bf9617826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:e5:74:86:e1:bc:42:56:28:46:e8:79:07:53:18:18:a6:e5:
         79:3b:fc:76:f3:a3:9b:42:08:21:61:44:a1:66:7d:b5:d3:e8:
         ae:97:7a:da:d2:22:35:c3:95:28:d2:2a:c3:f9:ce:f4:e6:db:
         44:34:d7:1b:eb:41:43:4d:07:40:be:fe:54:a0:6b:dd:9b:e4:
         51:57:3f:b6:33:c5:e6:b5:6f:d2:69:8e:4f:2c:78:d7:72:8e:
         3f:71:33:da:7d:4d:48:dd:b8:d9:2b:fd:3e:6b:12:23:e7:2f:
         b6:ab:fc:41:31:63:08:14:e3:5d:0e:77:28:4b:a5:2b:5f:5b:
         b6:b0:5b:69:e4:d3:3b:cd:cc:60:58:ed:61:2a:04:f0:32:be:
         8c:da:d3:9e:45:14:01:6e:da:e6:94:38:ce:ab:e3:10:fb:cf:
         ea:81:9a:14:f5:60:e6:76:e2:5b:4d:e1:e5:72:3f:44:00:99:
         bd:08:6a:db:f1:c5:37:36:37:3e:27:9d:cf:60:61:f0:48:f9:
         1b:63:e2:0f:aa:1c:72:fa:19:8e:7d:21:a1:28:f2:83:72:86:
         7e:74:fb:e1:51:82:39:be:16:f1:0a:29:e7:d0:32:d9:ca:fc:
         f5:5f:02:6d:99:e1:c7:bb:ea:5b:07:4a:c4:e8:0c:0a:ea:cb:
         a5:a0:3c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:35:26 2025 by rpki-client