Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dffdc67c-6029-3781-8b8d-0197fd071742.roa
File:                     dffdc67c-6029-3781-8b8d-0197fd071742.roa (raw, json)
Hash identifier:          fDBAxF27zsgsW5UA/0KOLANBbVDI+y/ZJapJB9KlCb8=
Subject key identifier:   B6:24:0A:36:AE:0D:B0:B7:93:A1:03:E6:16:13:A4:DC:2B:A2:13:47
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584B91776B721F023862D0468DE0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dffdc67c-6029-3781-8b8d-0197fd071742.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     13335
IP address blocks:        172.69.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:6b:72:1f:02:38:62:d0:46:8d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=37ec4d97-2698-453d-80fc-0a23b369dba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2f:1b:96:98:0f:9f:f7:ea:1e:54:fc:44:83:
                    30:18:bb:d0:c6:ef:cd:1e:e1:c1:94:36:c0:b4:2b:
                    b7:52:b2:17:03:d7:34:dd:41:17:72:6e:6b:c6:ef:
                    8b:f2:ac:1d:ae:bd:42:02:b5:5b:be:e3:18:ca:93:
                    b6:e4:d4:cf:2e:37:6e:a1:20:d0:38:45:cb:ea:63:
                    9b:56:6f:77:44:66:02:f9:10:f6:e1:cf:41:67:47:
                    10:97:7e:ec:35:ca:e3:27:ba:bc:f7:bf:52:e1:17:
                    e5:ac:82:ad:45:46:88:1d:1f:75:cd:1b:08:48:a5:
                    3f:cc:d3:4a:63:e1:37:b9:f8:b4:db:51:cd:3a:8b:
                    6c:d9:0f:26:0e:cf:2a:98:06:66:07:e3:33:21:6e:
                    11:77:5a:a6:a2:83:fb:c3:cf:4b:b4:22:81:d9:b2:
                    7d:97:34:ca:9a:b2:09:d3:a6:74:eb:a2:28:6f:ea:
                    80:ae:58:a8:32:05:0d:38:1a:7f:d3:1d:22:f2:26:
                    e8:09:f3:6a:ba:4e:3f:9f:3c:67:da:6f:4d:3b:47:
                    28:b1:91:b9:bf:2b:3d:35:02:34:4f:97:47:eb:5c:
                    a3:18:2d:72:7f:76:5c:ff:9a:d9:fc:1f:76:0b:00:
                    38:2c:56:99:e0:70:67:d4:7b:75:2a:9b:e1:1d:bc:
                    58:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:24:0A:36:AE:0D:B0:B7:93:A1:03:E6:16:13:A4:DC:2B:A2:13:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dffdc67c-6029-3781-8b8d-0197fd071742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:57:4f:db:e3:f7:ae:33:76:ec:0e:8f:56:f7:f7:9b:55:34:
         7a:dd:de:8f:ef:73:54:b9:ab:65:80:35:38:40:cb:87:da:f3:
         28:ce:4e:f8:ab:8f:be:11:bf:77:1b:be:53:c4:bf:15:70:d0:
         2c:09:58:3b:2b:61:d5:87:fb:00:db:a9:51:7d:1a:be:a1:49:
         66:4d:e3:54:c0:b0:18:20:e2:c0:4f:71:f9:8d:6f:34:f4:ae:
         f6:10:22:6b:dc:69:0d:99:7d:f9:fb:2b:81:87:37:c8:22:f4:
         96:39:0c:9b:59:61:45:81:28:29:a1:fa:ea:d2:54:6d:ca:f9:
         bd:8b:16:7b:aa:6f:d6:33:b0:b6:ee:ab:0c:8d:a2:92:bb:d0:
         17:79:f9:60:3c:3c:d1:32:d8:4a:28:d9:25:7f:75:45:8b:68:
         0d:f2:72:74:28:a5:ef:33:12:c5:4a:64:8f:15:52:b6:63:0d:
         86:b2:3a:12:3c:bc:0c:9f:80:2e:8f:03:d1:b7:82:3d:5b:a7:
         53:56:d0:6d:57:87:14:26:b8:54:c4:bf:4a:7f:65:6c:37:fc:
         6e:58:60:3d:87:89:31:26:11:86:ad:25:e0:1a:15:24:e6:66:
         47:2a:71:b8:e7:1d:2b:0e:bb:e0:17:50:89:0d:f9:b3:41:06:
         87:cb:46:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:59:34 2025 by rpki-client