Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1bce6a16-5da2-33c1-9595-563ed52a0f29.roa
File:                     1bce6a16-5da2-33c1-9595-563ed52a0f29.roa (raw, json)
Hash identifier:          1xkh24yIoaAPxXy6mcDhIe3JhnFdyRcEZ4ouFH/CorM=
Subject key identifier:   7A:86:25:94:84:40:7A:AA:24:64:76:76:65:4C:EA:03:4F:C3:AB:EA
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849EA853310DE16DFC324B68E80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1bce6a16-5da2-33c1-9595-563ed52a0f29.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.69.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:33:10:de:16:df:c3:24:b6:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=0c90749f-d3c6-4585-b0c0-b3e3fb388f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:98:3f:9e:9d:4f:41:8d:be:5c:87:55:8c:91:
                    e7:28:75:98:3d:ef:be:ab:b1:9f:5c:17:d2:77:f0:
                    7e:f3:4c:20:3f:2c:56:27:89:e6:10:d7:dc:b8:44:
                    ea:29:79:07:03:c1:e0:ce:08:6b:29:c2:06:b0:1f:
                    e9:e4:cd:32:c4:72:02:b2:da:a6:a6:03:fc:a6:46:
                    26:26:a5:b6:69:73:63:6e:4b:8a:c9:4f:48:d1:18:
                    40:63:09:ec:40:b9:14:fe:42:13:75:09:b1:70:49:
                    90:18:27:c9:1c:17:ce:05:f8:60:1b:b2:be:dd:7c:
                    25:87:98:35:c1:79:2a:5d:62:63:c7:61:c6:80:aa:
                    b6:3e:98:7f:11:e2:48:7d:94:07:5d:11:20:8d:42:
                    94:44:86:d4:31:ef:21:09:c7:78:e2:00:97:9f:54:
                    e0:55:ec:0f:4d:4c:49:76:5f:42:bb:d5:e7:9d:4d:
                    fd:15:e1:e7:15:44:e4:a7:ad:98:c3:64:17:56:42:
                    2d:64:68:5b:3f:b6:2b:23:9e:01:cf:37:a1:e9:97:
                    be:2e:1b:77:6c:9a:c4:73:95:aa:f0:d1:74:52:b0:
                    76:4f:5b:34:83:59:ee:40:59:c7:78:c4:90:d7:55:
                    25:97:f2:44:45:fc:57:6e:5b:af:a9:12:58:04:b0:
                    a0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:86:25:94:84:40:7A:AA:24:64:76:76:65:4C:EA:03:4F:C3:AB:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1bce6a16-5da2-33c1-9595-563ed52a0f29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:fa:90:34:d3:e4:56:d1:d7:eb:e3:fe:d9:8f:62:cd:97:8e:
         ea:45:51:0f:f5:ec:68:8a:7a:72:64:1c:b5:06:91:f0:9c:33:
         ab:e7:06:fe:53:dc:42:77:7c:6d:67:18:1e:f0:07:95:23:0b:
         1f:34:e8:97:81:6b:32:9d:c7:48:aa:ee:4d:c6:9a:fd:40:cd:
         f3:28:58:cb:8a:5a:5a:b4:de:1e:70:22:27:a7:32:87:83:ba:
         06:1d:0d:d8:0a:13:d3:e3:a2:0a:e6:c2:94:cc:1c:9a:d6:73:
         0c:6d:00:0d:ef:01:0d:e5:3f:09:1e:91:04:1b:77:55:d1:1b:
         19:5b:6b:a7:37:11:be:60:33:be:14:89:cf:a5:e5:2c:fe:fc:
         62:88:a7:cb:6c:38:b7:de:d4:46:ab:dd:18:56:1d:09:86:85:
         a5:e9:7f:87:69:a2:e2:8c:df:b0:f3:fa:d6:c4:70:94:26:9a:
         ef:bf:0d:18:cc:4a:f6:17:b5:7b:46:4d:48:3d:ce:30:62:71:
         24:0a:dc:9c:9b:93:21:68:44:82:2e:81:48:45:c9:6e:7e:51:
         70:16:86:c0:59:94:2c:19:13:e0:c5:b1:58:ca:74:bc:74:e5:
         81:e1:f8:a0:05:9f:30:5d:20:96:9f:89:80:72:2d:f6:7b:e5:
         c2:ec:93:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:44:56 2025 by rpki-client