Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f6eecbb4-052d-3264-ad79-96643e3fe7e0.roa
File:                     f6eecbb4-052d-3264-ad79-96643e3fe7e0.roa (raw, json)
Hash identifier:          Tb5QsXraQQjKhQU6C1cYwnxk5Rn9q9JEnTLQKSmHbog=
Subject key identifier:   60:11:DE:89:81:FD:5C:78:D8:FB:E0:AA:D8:8D:B2:54:7D:73:BC:B1
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584B620218086461C27451756B80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f6eecbb4-052d-3264-ad79-96643e3fe7e0.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     13335
IP address blocks:        172.68.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:18:08:64:61:c2:74:51:75:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=aea0550e-56c6-46d0-bf71-60fbe359320d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ef:74:fb:2a:e5:eb:8d:9c:04:e2:df:34:c0:
                    a1:d1:e8:8d:3a:17:b4:11:06:aa:5f:97:e1:2f:ca:
                    9b:ae:5b:6a:76:bc:ec:0c:26:99:f8:d5:1f:69:ce:
                    3a:ad:d1:8a:8f:bc:bd:6a:ea:89:76:d8:69:a0:4c:
                    1c:dc:ca:d1:5e:e6:2f:b6:5e:bb:71:2b:1c:08:b8:
                    73:60:49:95:fd:9b:c3:31:b2:46:75:f5:3b:6e:cb:
                    7e:df:ac:c6:55:48:d4:ff:d3:27:39:30:6d:ef:43:
                    bc:1a:8b:c1:f4:84:91:5a:75:6b:ec:94:02:41:8d:
                    73:be:5e:4a:b5:db:60:e2:75:4e:1a:24:ca:08:63:
                    bd:07:8e:1c:b5:67:95:65:31:b5:0e:a7:a4:93:2a:
                    92:6f:d3:9d:c2:0c:7e:d4:9f:41:3e:65:5e:af:03:
                    3d:47:28:c3:6a:21:79:94:76:9a:92:4a:d7:95:6d:
                    1b:8c:5b:99:90:e2:76:0c:b4:0e:1e:ca:f5:0f:b4:
                    e1:28:b3:2d:c6:70:21:9f:c1:ff:e6:c4:01:60:27:
                    a3:17:b6:ad:26:c2:61:4f:4e:40:90:d8:56:09:36:
                    31:69:ef:77:cb:a5:84:34:d2:f6:e8:be:3c:a5:70:
                    12:e8:24:a8:05:08:42:b8:3f:62:ce:1e:02:24:e9:
                    2b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:11:DE:89:81:FD:5C:78:D8:FB:E0:AA:D8:8D:B2:54:7D:73:BC:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f6eecbb4-052d-3264-ad79-96643e3fe7e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:b8:54:4e:89:cb:0f:26:ed:0a:bd:36:b8:ca:2c:37:b0:ac:
         09:21:80:bc:4e:80:b1:1b:34:4f:0a:14:b4:4a:f0:d3:09:05:
         61:76:1e:ff:85:b5:3f:37:e5:31:b0:c8:95:10:7c:e3:bd:ad:
         44:6e:4f:ad:01:c5:25:f8:0f:ed:f4:e0:8e:85:b3:d9:18:e7:
         0f:4f:bc:6e:bb:9d:08:5a:90:6a:95:03:ff:b3:2b:66:9e:58:
         63:14:f8:ca:e0:58:f6:eb:94:ce:03:cc:19:f4:4f:19:ee:a5:
         e2:8c:46:57:cc:cb:2d:56:2a:fa:49:38:aa:32:0c:73:5e:72:
         24:d8:9f:b4:80:22:97:13:8e:e9:00:67:62:9b:32:4f:bd:0e:
         c5:61:45:bf:63:6c:19:4e:1d:25:1c:5f:4b:9e:9e:f4:d8:e5:
         7d:c8:c7:1a:07:56:e2:56:e3:3d:33:9f:e0:fe:6f:6b:c8:ba:
         c6:be:49:9b:60:da:c9:f1:d6:ae:d2:2d:de:46:d8:d8:42:d7:
         43:75:fd:52:53:6c:5a:62:25:42:93:8d:41:d9:22:41:99:4a:
         9b:53:55:3f:fc:9f:79:c9:6a:c0:15:dc:53:e0:b0:6e:e8:fb:
         36:94:94:ac:cf:41:5c:9f:6c:fc:43:65:87:7f:f5:a3:39:90:
         f1:cd:60:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:52:56 2025 by rpki-client