Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea0635db-db2c-3730-995e-583ba6d17c2a.roa
File:                     ea0635db-db2c-3730-995e-583ba6d17c2a.roa (raw, json)
Hash identifier:          Ei1fD3JgRYExvQGVfOxOzsHBlzvbV809uAZ0r9DJ9xU=
Subject key identifier:   F4:2C:5A:D4:19:92:D9:40:9E:1E:07:99:24:EB:81:11:41:8D:AB:24
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584ACF710A122E1C8C2C4EC7D180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea0635db-db2c-3730-995e-583ba6d17c2a.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     13335
IP address blocks:        172.69.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:0a:12:2e:1c:8c:2c:4e:c7:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=34598baf-8f0e-4480-919e-57d3fe4e9360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:56:a5:52:db:bc:37:32:5e:35:10:01:51:c9:
                    8e:a1:63:72:39:4d:55:ef:0a:1f:7d:09:ad:de:13:
                    0e:9d:1c:d0:0a:fc:24:75:0b:7f:eb:d3:9e:53:9f:
                    ea:2b:85:fb:ff:98:3a:05:47:eb:95:05:b5:79:da:
                    c8:76:f5:b3:69:a4:77:8d:f9:c6:d1:c9:b5:8c:fc:
                    64:94:28:ae:e5:e2:bd:9f:d0:c5:3d:cd:93:c3:4b:
                    2e:d8:82:9d:16:87:91:2a:bf:94:f1:54:ac:ad:9d:
                    2f:b3:ea:ec:c0:53:f9:96:2e:75:5b:62:f7:3f:8e:
                    10:50:2e:c6:fd:e2:24:6f:c2:f6:b5:93:8d:9e:6a:
                    25:07:7f:5b:27:8f:f5:01:a5:63:f5:17:f8:c0:7d:
                    fb:11:b6:ef:19:e2:41:2f:e4:78:25:88:78:4b:1a:
                    c7:0b:64:95:dd:ac:99:16:cb:20:58:54:e1:e5:34:
                    6b:37:40:12:b0:bd:9d:eb:1b:c8:f6:8f:9d:b9:94:
                    d1:26:be:c6:c4:06:37:ad:77:6d:9c:60:99:2b:80:
                    56:74:9b:b4:3c:42:63:13:de:e8:76:e0:e2:34:3c:
                    92:44:d3:00:e9:47:45:81:bd:c6:5b:5d:c8:c8:5b:
                    5b:8c:cf:e5:be:2c:4a:09:bc:b2:c4:96:5e:f9:33:
                    25:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2C:5A:D4:19:92:D9:40:9E:1E:07:99:24:EB:81:11:41:8D:AB:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea0635db-db2c-3730-995e-583ba6d17c2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:44:8a:41:17:94:24:2a:61:a0:fd:3e:cb:f0:58:d3:b7:da:
         be:07:c7:40:2d:36:5e:15:8e:c5:da:69:27:3b:b4:9a:20:cb:
         49:a1:99:c6:60:04:6e:38:56:20:b6:27:97:6a:ef:f0:6e:89:
         95:11:69:1c:c2:ad:9f:af:d4:d6:62:59:7b:15:b8:0a:b8:e5:
         07:7d:ce:32:9f:67:54:9b:a9:ec:ac:fe:af:b0:8f:10:0b:c3:
         d7:18:fe:5f:62:79:5a:4d:f4:4a:99:7c:0a:cd:9d:c7:ae:ee:
         56:e0:f5:fd:2b:a8:a8:a8:ad:c5:05:1b:b9:f1:87:7b:f8:47:
         b8:ef:a8:02:9a:55:52:78:c7:50:08:1a:ed:7b:08:46:15:ed:
         81:c9:87:38:ed:eb:1f:45:fb:97:6b:4b:52:0c:55:20:c7:57:
         32:8e:cb:6e:db:ef:b5:46:2a:d5:69:4f:9a:4b:ce:7e:bb:01:
         92:71:41:6d:89:e6:29:5e:36:39:b1:e9:35:85:18:84:77:8d:
         1f:2f:a3:e8:de:78:7c:e4:7c:25:03:c5:6d:40:e2:ff:87:88:
         08:e4:03:cd:ca:0b:f5:2a:94:d0:e5:9f:ee:ab:e9:72:6b:ba:
         ec:cf:58:31:54:69:67:c3:b2:5c:a9:cb:92:69:68:c1:24:a0:
         67:b0:73:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:41:51 2025 by rpki-client