Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa0cc9d0-de42-39df-90be-776c39262fb4.roa
File:                     aa0cc9d0-de42-39df-90be-776c39262fb4.roa (raw, json)
Hash identifier:          Q+PQrRdGRLCRO16IrjVOVSwF7eNId0qDrdklpOu2Chw=
Subject key identifier:   BB:8B:4F:9D:2B:0A:6D:77:14:DB:91:40:F8:EA:F7:01:D5:82:05:D0
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584A6290B462CD699E9C35977B34
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa0cc9d0-de42-39df-90be-776c39262fb4.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     13335
IP address blocks:        172.71.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:b4:62:cd:69:9e:9c:35:97:7b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=a8b36633-09f5-4101-9995-ec691c5ce093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:83:32:12:5b:3c:77:dc:f6:ba:dd:0f:b4:ae:
                    46:98:d2:b4:e0:f3:2c:df:4e:5c:a7:7b:48:35:56:
                    0f:0f:1f:54:0b:29:1d:9a:b6:ca:1c:5f:0d:e2:cb:
                    04:42:5a:e5:29:f8:e5:80:84:e5:b2:c4:93:79:85:
                    1a:42:5c:43:89:e9:ca:49:c8:76:30:59:70:93:6a:
                    f5:b9:dc:99:80:c8:fd:6d:d4:ff:18:92:a3:29:1d:
                    6c:1b:15:a5:0f:75:05:36:c6:8c:62:81:c8:96:59:
                    20:44:76:29:7b:47:73:44:72:9e:53:71:dd:72:b5:
                    27:ef:37:b0:62:89:72:4e:30:c9:b2:6b:bc:91:1d:
                    1b:11:df:8b:2d:dc:47:6c:b3:fc:b6:54:cf:9e:70:
                    28:f0:73:17:c1:31:50:69:8c:07:04:bc:97:4f:a9:
                    72:03:ae:72:3f:01:24:80:6a:2a:c7:8c:3c:98:0e:
                    e0:d2:58:3a:16:76:c4:20:69:10:ca:3c:57:12:02:
                    b4:6c:25:60:58:c2:05:cc:6e:42:5d:2c:f0:78:87:
                    87:56:97:54:f1:c9:25:63:d5:0a:6c:36:70:c6:5c:
                    30:1d:eb:3d:a5:7a:a1:09:d0:a9:f7:63:12:70:12:
                    07:db:d1:6e:ec:c7:7a:13:51:e0:0b:6f:54:6a:99:
                    bf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:8B:4F:9D:2B:0A:6D:77:14:DB:91:40:F8:EA:F7:01:D5:82:05:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa0cc9d0-de42-39df-90be-776c39262fb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:13:ee:fb:47:c9:98:f5:84:de:29:e8:eb:e5:a8:87:36:13:
         64:4c:4e:cf:fc:97:ae:2c:a8:f2:f6:4e:a1:48:27:32:b4:ed:
         75:72:89:8b:b9:a0:db:9e:4b:81:ab:db:d4:51:5f:a2:19:0d:
         70:1f:d1:8b:9d:ea:ff:b6:86:56:93:ba:ec:20:3c:06:22:18:
         aa:f2:7f:8a:ee:36:bc:1f:41:74:7d:83:b5:39:7e:fe:84:38:
         76:a6:6b:b0:cf:5c:1e:fc:bb:6b:f8:89:92:39:5d:9e:b2:b2:
         7f:c7:04:54:48:23:88:1c:94:c3:e4:59:9d:15:d3:dc:0b:d1:
         1b:45:1a:75:6c:49:d8:e4:fc:e9:20:6d:cd:7e:ed:a2:0d:73:
         07:15:18:9a:e5:f3:df:d2:c2:55:5f:75:14:69:b0:79:c9:bf:
         d8:ce:c8:2b:ae:16:89:b2:89:9b:73:f4:ec:82:17:8d:f8:97:
         18:f0:c8:9b:f4:76:e9:5f:f1:d4:8f:d6:01:d7:7c:69:cb:1b:
         17:ff:2c:d2:dc:62:2a:7f:5d:67:10:71:6a:6d:90:78:e4:1a:
         c7:26:7d:24:de:27:6a:3d:e8:f1:d4:4e:c9:9d:4a:3c:8f:11:
         bb:04:75:14:a0:d7:18:a6:c8:d4:b2:26:5b:27:a6:3c:76:00:
         ee:db:36:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:57:27 2025 by rpki-client