Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/107f9b08-201e-3e97-82f9-340293e18e7a.roa
File:                     107f9b08-201e-3e97-82f9-340293e18e7a.roa (raw, json)
Hash identifier:          SPFXYUZq7F5QpuOXvS04bjg33tH/Xh7K2KMJ7N3dEBQ=
Subject key identifier:   F2:EE:78:73:2C:14:34:44:A0:BF:4B:2B:F4:A1:25:AF:82:34:7B:E8
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E7BA91337C0D56B628D09580
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/107f9b08-201e-3e97-82f9-340293e18e7a.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        172.64.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:91:33:7c:0d:56:b6:28:d0:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=afc618bf-390c-4ef7-85c4-8275da429fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:34:ec:71:1c:ac:b1:1f:4a:2a:66:58:b9:f6:
                    e3:61:c4:47:16:00:a0:10:b9:04:dd:54:15:f5:92:
                    9c:ac:59:04:0a:ff:65:e2:c8:10:94:e1:ae:b7:0c:
                    c3:63:0f:62:17:67:5b:da:bb:11:e2:b8:68:fd:eb:
                    43:d8:7a:28:43:f5:4a:27:02:0e:f5:96:4b:36:f6:
                    39:e5:58:a4:a7:96:00:c2:43:5f:09:d2:04:1d:6c:
                    bd:e1:55:74:2b:ed:ba:09:b4:d0:43:a5:a1:a4:1c:
                    ba:6d:25:0b:7d:dd:96:9d:b0:a7:a4:da:4f:f0:9f:
                    93:07:c4:1f:39:d9:66:09:c2:28:04:ff:1b:68:3c:
                    d6:c7:76:2d:bb:09:c0:17:0b:b2:46:0e:df:21:2a:
                    7c:56:7c:6f:83:35:69:5c:79:22:d8:ef:5d:86:dd:
                    05:a2:70:c4:22:67:f7:0a:50:a3:e0:e1:f0:04:55:
                    22:b5:b5:cb:ca:ce:64:f7:4a:58:4c:01:90:de:ac:
                    30:7f:be:9f:ed:b2:8c:e7:18:4e:4a:74:37:21:d8:
                    3e:44:22:c3:f7:84:f3:33:71:8e:47:1b:bb:90:eb:
                    ed:fb:3f:93:62:92:7d:3a:c6:80:65:4f:d6:5f:54:
                    1f:75:c8:36:cb:fd:0d:9e:bd:25:45:85:db:21:8c:
                    f4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:EE:78:73:2C:14:34:44:A0:BF:4B:2B:F4:A1:25:AF:82:34:7B:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/107f9b08-201e-3e97-82f9-340293e18e7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:08:2b:1b:62:ee:69:da:0f:95:1f:ca:47:ea:84:54:db:b8:
         e9:e7:66:62:3f:50:d9:4b:c4:1d:61:77:9d:3b:f3:b6:86:71:
         65:41:88:09:6b:b5:05:1a:6b:59:63:05:b4:15:42:23:e1:d9:
         0e:e9:23:4e:bf:7e:29:b7:fa:19:8c:1b:1c:e8:65:20:3c:9a:
         33:22:e5:3b:71:7d:b2:29:ce:6b:53:dd:b0:89:96:94:6e:db:
         e0:a0:12:a6:11:9b:18:a0:14:82:32:9c:b3:1e:cc:13:f2:a0:
         7c:aa:27:6a:38:f8:6a:ca:cb:b4:2a:02:88:5f:de:1a:c6:5b:
         d7:cf:19:c6:2c:8d:83:7f:96:3b:8a:68:0e:30:89:cb:33:81:
         06:f1:2a:86:67:0e:46:f3:6a:d1:13:f2:73:8a:2c:cf:f9:16:
         f4:0a:aa:ab:87:80:50:c5:ae:83:4f:10:cd:32:3a:e5:fc:e8:
         4a:d4:d4:6a:6d:a3:74:d2:47:1b:8b:05:c3:01:b5:2a:30:a5:
         82:40:f9:27:3e:af:5c:30:36:11:82:1e:30:e0:91:6e:50:74:
         d3:be:df:29:23:f1:15:84:33:2f:39:11:ea:d6:fd:7f:e8:84:
         93:2e:d9:6c:f9:c0:7b:ca:78:dc:f5:d8:9c:87:65:91:1c:15:
         7b:fa:65:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:23:40 2025 by rpki-client