Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2a8eafe-075b-3a00-b39b-9c8729eb0653.roa
File:                     c2a8eafe-075b-3a00-b39b-9c8729eb0653.roa (raw, json)
Hash identifier:          I3WMJQUNED+5z2pHRULpGGJpDYEDrFeCzzz7x/R4Ckk=
Subject key identifier:   67:F5:0A:17:B7:DB:BE:2F:F8:03:07:73:46:AC:91:6C:EF:54:65:E2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC876768896CB559A1328F700
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2a8eafe-075b-3a00-b39b-9c8729eb0653.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        172.68.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:76:88:96:cb:55:9a:13:28:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=e7f887e5-3932-4457-88ce-e0509adf601b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5f:d7:c5:5e:54:d1:56:80:5d:41:34:54:c3:
                    17:51:8b:ae:23:e1:47:5e:dc:f0:62:cd:ef:99:b2:
                    9e:de:68:16:a8:d5:19:24:71:74:7f:cd:97:2d:f3:
                    c2:ff:5e:a4:9c:56:49:64:a5:cb:54:3a:99:34:06:
                    2b:b0:e0:c7:7b:1e:70:9d:bc:d3:ab:a2:e8:b7:ed:
                    1d:38:f5:16:be:08:45:dd:f5:69:ac:ae:d4:35:0c:
                    3a:25:1e:1e:e5:75:d6:fb:4c:8b:18:ac:3f:4b:4b:
                    a4:8e:63:7d:65:53:54:16:a5:d3:55:55:17:5b:0d:
                    2e:a5:0b:d0:c0:68:e5:ce:35:80:9e:35:21:df:b4:
                    06:ee:09:46:ab:5b:7f:7f:c3:d0:0f:d7:72:08:03:
                    14:32:a8:8d:f2:ec:02:cf:e2:00:3b:32:66:fb:f0:
                    ea:74:f0:00:ee:ac:7c:54:0d:de:10:c1:07:b1:fe:
                    17:b3:d8:ab:28:76:a6:06:79:27:26:55:57:ac:51:
                    67:6c:11:34:27:cd:0d:43:c2:a7:7b:dd:d9:ae:ac:
                    65:69:65:f4:d8:d9:21:d8:05:84:5c:13:0c:42:6f:
                    ec:0a:8a:a5:f3:f2:80:0d:3d:04:15:94:70:1c:94:
                    5a:3d:10:1f:e9:85:c9:fb:05:0e:f7:04:0e:e5:d4:
                    ba:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F5:0A:17:B7:DB:BE:2F:F8:03:07:73:46:AC:91:6C:EF:54:65:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2a8eafe-075b-3a00-b39b-9c8729eb0653.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:37:93:a5:a7:22:37:cd:94:41:95:52:6c:9d:5d:3f:8d:a5:
         bc:eb:98:7e:e9:a4:31:17:07:bc:ae:d4:c9:4e:41:03:3c:eb:
         d4:92:43:4f:25:19:9f:e3:99:61:b3:37:09:20:ac:2c:8d:48:
         33:21:74:4c:4e:98:12:5a:fc:f6:2d:78:34:57:c9:c4:06:4b:
         79:a0:e0:ca:6b:ea:14:eb:03:c3:b8:00:c6:89:46:ee:24:c1:
         2c:9e:7a:dc:0b:93:9e:25:0e:80:f1:7c:f5:d7:88:ea:d7:46:
         74:ae:3a:eb:18:50:3e:24:95:05:ba:99:83:7a:4f:a3:e8:a2:
         02:87:c4:8d:a4:a3:d8:83:7f:8f:5d:c4:ba:84:4c:d0:07:e6:
         7f:1d:f1:5d:56:3c:d7:cd:e4:7b:47:a1:d3:d9:9a:1f:24:1a:
         17:95:f8:2d:9c:0e:5f:f9:38:9d:24:56:ec:a9:ec:01:a1:c6:
         b6:0f:77:d2:0a:9b:f0:c5:06:a2:62:b9:12:32:0e:31:26:a3:
         d4:cb:6b:72:31:0a:ae:6c:3f:52:fa:54:7a:f3:07:e2:a8:1b:
         63:97:66:1a:fc:89:6f:10:c1:7c:2a:7c:b8:0a:9c:ac:7b:e0:
         d9:77:d3:c7:53:af:ff:5f:f2:4f:83:87:06:63:bb:41:06:00:
         a9:7b:a2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:05:28 2025 by rpki-client