Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/16306233-3242-3b23-a221-343dbebddf28.roa
File:                     16306233-3242-3b23-a221-343dbebddf28.roa (raw, json)
Hash identifier:          07EsYDGyiZ3OjBu9QJeoH/gvfYFN9ECRxpN9crTrloE=
Subject key identifier:   B7:50:46:24:3E:3A:F7:BE:1A:6B:5C:5F:69:3B:F8:D3:80:38:BA:9B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BA9328BE8E02CF47ED035B200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/16306233-3242-3b23-a221-343dbebddf28.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     13335
IP address blocks:        172.64.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:8b:e8:e0:2c:f4:7e:d0:35:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=4833954b-d03d-4b18-9477-fe9353ae9ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:86:e8:fd:95:78:84:d7:75:7a:a8:20:0c:ab:
                    11:9c:9f:96:9c:8d:b9:ab:b0:f9:88:5e:d2:d3:45:
                    22:fe:09:78:af:5c:2d:42:96:d9:68:8e:c2:b8:e0:
                    02:bd:80:ee:3e:04:92:0c:57:be:cb:d6:aa:d8:02:
                    e8:7a:a0:c0:b6:35:ef:ec:5b:fc:45:83:54:27:f6:
                    ad:06:ad:08:57:01:33:dc:91:e0:b9:53:5b:f7:e1:
                    cb:f3:aa:32:d2:ae:48:02:a7:d9:81:3a:99:9b:de:
                    18:f6:55:41:21:b8:26:5e:8c:05:6a:ea:ab:e2:43:
                    65:01:6c:22:e5:6e:a3:0d:54:2b:b7:a3:cf:d4:0f:
                    bb:41:f1:6f:9c:90:d9:fc:e6:35:19:46:cf:2b:31:
                    1c:53:ef:a2:19:36:76:ac:6f:02:85:a5:3b:4a:4b:
                    eb:b0:b5:91:9d:1a:68:6e:fa:fa:72:5f:b5:57:24:
                    43:50:b1:5c:36:b5:2b:e1:2d:7c:d2:e0:5e:d4:f6:
                    97:7c:9d:56:20:3e:5b:5e:7c:8b:76:83:c9:71:bb:
                    27:d7:c4:7c:cd:f4:bf:09:a9:2f:bd:c2:4b:e3:ec:
                    a2:21:73:ad:dd:2c:a2:1b:07:68:30:07:e2:88:de:
                    5e:bd:68:4a:21:94:3f:b3:9c:c3:68:7c:8b:03:43:
                    d1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:50:46:24:3E:3A:F7:BE:1A:6B:5C:5F:69:3B:F8:D3:80:38:BA:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/16306233-3242-3b23-a221-343dbebddf28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:18:78:2b:2a:4b:01:f6:05:21:01:c2:e4:e9:d9:08:8b:c2:
         71:c3:58:b4:0a:11:c7:b6:d7:7e:83:d0:bd:f5:2a:6e:b8:b7:
         67:b1:d3:ae:e9:42:ee:de:63:fb:48:1a:ee:f5:84:fb:fa:bb:
         ab:fa:22:d9:a1:f1:0a:cd:26:f6:0b:6b:fe:23:f2:ed:09:5e:
         1e:11:5a:a9:c1:af:77:07:eb:41:e0:d9:26:22:93:b1:d7:74:
         15:92:5a:64:6a:05:f7:44:35:c8:63:1d:81:f0:7c:5f:d6:64:
         ae:78:d0:f5:5a:62:7b:ee:8c:b2:d3:c3:4c:e3:8d:85:24:f4:
         f8:30:11:f9:19:fd:32:c7:b9:f8:98:1e:b6:79:98:e7:f1:e0:
         34:c0:68:4c:b2:18:49:ca:03:d5:9a:f7:20:7b:f4:7f:88:68:
         68:d5:67:00:2b:e1:af:15:df:c4:d3:c3:94:34:47:6e:65:69:
         50:05:c3:9c:5a:b1:a6:42:08:62:cc:11:e1:60:b5:71:a2:55:
         61:28:5c:05:ac:cd:30:ec:c2:8e:be:0d:af:71:ea:8e:f2:b0:
         51:12:b8:c8:9e:93:b9:47:9b:10:31:e3:37:b4:0b:b6:5e:9b:
         ab:fa:b3:94:07:60:f8:7f:03:7e:21:af:a5:ba:b6:10:79:e5:
         f3:f6:76:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMovo4Cz0ftA1sgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk
NDgzMzk1NGItZDAzZC00YjE4LTk0NzctZmU5MzUzYWU5ZWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIbo/ZV4hNd1eqggDKsRnJ+WnI25q7D5iF7S
00Ui/gl4r1wtQpbZaI7CuOACvYDuPgSSDFe+y9aq2ALoeqDAtjXv7Fv8RYNUJ/at
Bq0IVwEz3JHguVNb9+HL86oy0q5IAqfZgTqZm94Y9lVBIbgmXowFauqr4kNlAWwi
5W6jDVQrt6PP1A+7QfFvnJDZ/OY1GUbPKzEcU++iGTZ2rG8ChaU7SkvrsLWRnRpo
bvr6cl+1VyRDULFcNrUr4S180uBe1PaXfJ1WID5bXnyLdoPJcbsn18R8zfS/Cakv
vcJL4+yiIXOt3SyiGwdoMAfiiN5evWhKIZQ/s5zDaHyLA0PRWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLdQRiQ+Ove+GmtcX2k7+NOAOLqbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTYzMDYyMzMtMzI0Mi0z
YjIzLWEyMjEtMzQzZGJlYmRkZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEBJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFYYeCsqSwH2BSEBwuTp2QiLwnHDWLQKEce2136D0L31Km64t2ex067p
Qu7eY/tIGu71hPv6u6v6Itmh8QrNJvYLa/4j8u0JXh4RWqnBr3cH60Hg2SYik7HX
dBWSWmRqBfdENchjHYHwfF/WZK540PVaYnvujLLTw0zjjYUk9PgwEfkZ/TLHufiY
HrZ5mOfx4DTAaEyyGEnKA9Wa9yB79H+IaGjVZwAr4a8V38TTw5Q0R25laVAFw5xa
saZCCGLMEeFgtXGiVWEoXAWszTDswo6+Da9x6o7ysFESuMiek7lHmxAx4ze0C7Ze
m6v6s5QHYPh/A34hr6W6thB55fP2di0=
-----END CERTIFICATE-----
Generated at Sat Nov 1 12:34:27 2025 by rpki-client