Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1814f2cd-323a-3d9b-a46f-55e6773121fe.roa
File:                     1814f2cd-323a-3d9b-a46f-55e6773121fe.roa (raw, json)
Hash identifier:          L2MPiI0zBAGJQ8eTrYGUVRzufImHgswCzrZgnNL8ypo=
Subject key identifier:   42:E6:0B:1A:84:B2:40:EB:70:2E:39:8E:B8:19:10:78:99:96:83:7F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849EA85354D4DAE4EEE1F80D4C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1814f2cd-323a-3d9b-a46f-55e6773121fe.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.69.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:35:4d:4d:ae:4e:ee:1f:80:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=7a976739-fef7-4979-89f6-015c0394f383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f1:2a:a2:f8:f3:a4:f2:a9:50:6e:b3:fe:47:
                    9f:30:6e:3d:18:db:d5:d7:4c:f7:d9:50:17:bb:47:
                    f6:83:a4:51:45:18:77:29:9d:f4:1e:55:3e:79:bc:
                    86:8c:8d:e4:fd:c9:c9:d2:b7:99:a5:c5:14:4d:86:
                    1e:9d:0f:ce:be:7c:b5:f8:4c:82:58:1a:04:ae:eb:
                    ef:1f:eb:18:54:c2:29:40:55:23:67:2e:b1:d1:01:
                    25:6e:6c:e2:1f:64:31:0e:7f:f6:da:9a:af:17:9f:
                    04:24:94:38:16:5e:4d:0c:2c:99:46:a3:a3:e0:44:
                    2f:dc:f8:12:50:22:bd:f3:68:bf:c8:cd:a8:b1:4a:
                    11:98:f8:d1:3d:87:5d:e4:c1:a7:59:5f:29:7e:56:
                    ac:05:94:e2:90:35:52:87:9e:cf:8a:69:7e:ba:eb:
                    50:fc:86:87:50:aa:02:65:bc:cc:6e:2e:72:31:61:
                    6d:c0:e6:27:a7:5e:c6:c4:c9:59:c5:e7:15:0c:ff:
                    1f:71:46:c0:b3:a9:68:9f:79:cc:91:3a:b4:7c:bc:
                    a0:50:67:48:d7:ef:11:26:ba:62:74:a0:ff:af:9c:
                    ff:81:b5:95:a6:5d:43:47:41:7d:97:41:e6:66:19:
                    a7:a8:f9:37:f8:0d:35:cd:99:eb:62:3d:3a:bb:4e:
                    96:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E6:0B:1A:84:B2:40:EB:70:2E:39:8E:B8:19:10:78:99:96:83:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1814f2cd-323a-3d9b-a46f-55e6773121fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:0c:47:c3:80:34:0f:56:1c:68:59:77:31:f6:4a:bc:46:4b:
         2b:23:9d:c2:e4:ea:e6:92:55:4d:84:a9:c8:5c:5e:79:45:23:
         8c:1b:8b:91:4b:8e:c2:74:53:83:60:fb:bb:65:62:ea:21:ec:
         15:43:35:09:f7:b3:72:31:1d:6b:d7:ea:88:2d:3e:17:0e:d0:
         5a:4b:20:99:79:c7:8c:34:80:ae:61:ed:05:6c:b3:99:a5:e5:
         08:53:22:88:68:47:19:35:0b:c0:78:b9:f2:c4:c5:37:26:11:
         ea:bc:2c:2f:5c:64:d6:38:e8:97:05:d4:bd:0c:35:e9:b6:fc:
         32:e6:dc:63:25:9c:8f:24:33:1d:d8:ba:f3:91:9c:3c:41:9c:
         9c:77:a1:0d:e8:1e:f4:76:d9:eb:32:c4:50:db:c0:43:40:53:
         c6:44:b7:4e:75:20:06:e8:9c:e6:69:35:47:2e:e2:98:a2:56:
         e2:31:d7:6d:61:08:76:ad:be:b0:d9:cb:fc:86:d2:f2:11:8c:
         7e:23:75:0e:fd:c4:59:9b:09:43:6c:21:02:e0:7e:67:b0:73:
         87:53:81:8b:31:c4:ed:86:b2:01:82:83:ad:16:56:3c:bb:88:
         c1:ce:ee:34:bd:70:2f:78:5a:20:76:3f:77:a4:b9:f9:e8:8b:
         04:7c:08:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:50:41 2025 by rpki-client