Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3130963c-df9d-36a6-8817-cf2d677d9c7e.roa
File:                     3130963c-df9d-36a6-8817-cf2d677d9c7e.roa (raw, json)
Hash identifier:          Kueqj+GvFc8koJ0+Cr4giluF6zeqWF16E3CCnOFHGW0=
Subject key identifier:   08:50:43:A4:F0:6F:69:EB:F6:21:C2:CE:27:AE:A2:5D:72:B8:49:52
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849D9C4F492119E2A2EC6028300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3130963c-df9d-36a6-8817-cf2d677d9c7e.roa
Signing time:             Wed 14 May 2025 13:01:03 +0000
ROA not before:           Wed 14 May 2025 13:01:03 +0000
ROA not after:            Tue 12 Aug 2025 13:01:03 +0000
asID:                     13335
IP address blocks:        172.69.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d9:c4:f4:92:11:9e:2a:2e:c6:02:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 14 13:01:03 2025 GMT
            Not After : Aug 12 13:01:03 2025 GMT
        Subject: CN=d79e5cc1-c407-4463-ae4d-0d50552feefe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:35:4e:3f:97:d1:98:ed:3e:db:fb:76:8f:04:
                    52:ae:3f:86:9a:41:c8:04:eb:2c:0e:5f:8d:65:4c:
                    25:37:6d:e9:b1:de:20:ab:e9:f6:2b:22:d6:f4:47:
                    db:e4:88:cd:3c:0b:bb:9f:f7:8c:a4:7c:4c:08:bb:
                    f3:1b:92:f5:a7:3f:2d:b5:84:6a:c2:29:6e:22:5e:
                    d9:8d:51:64:bf:8b:ea:fc:70:92:75:0a:f0:5c:e6:
                    36:93:60:f4:b2:74:14:ff:f1:1b:96:7c:e7:8e:3a:
                    11:93:9a:0b:c2:a0:c2:6a:3b:b1:56:0f:84:d5:95:
                    ce:06:33:bc:a3:a9:3d:fe:c5:ad:f2:05:38:e1:30:
                    8b:c6:22:09:4d:ef:df:08:66:1e:11:af:db:f0:73:
                    1f:0e:b6:ae:65:17:f6:fb:49:35:52:b5:27:76:fe:
                    c1:c1:dc:28:71:21:81:c6:d5:53:ea:05:3c:aa:38:
                    5f:e1:7c:9f:b4:78:c5:ba:f1:d5:97:8b:8f:1b:b7:
                    f1:46:6f:a5:c7:9c:10:98:6f:eb:84:38:87:89:00:
                    b5:8d:87:1c:a8:25:5f:42:da:9d:d2:69:92:fd:4f:
                    70:ec:ee:e7:4b:c7:9d:ed:1c:f8:47:2c:fb:68:44:
                    63:52:51:69:d3:7d:73:29:0b:0d:f1:24:a8:de:61:
                    e5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:50:43:A4:F0:6F:69:EB:F6:21:C2:CE:27:AE:A2:5D:72:B8:49:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3130963c-df9d-36a6-8817-cf2d677d9c7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:96:a5:40:f5:a2:c6:16:a8:81:89:3b:36:73:eb:7c:49:a2:
         fe:a0:16:a8:5a:8f:ef:9f:1c:3c:01:cd:ce:c3:61:d2:d0:b2:
         b3:01:cd:5a:5d:7b:cd:84:55:d3:0c:4d:c4:3f:4a:ac:19:ec:
         09:a0:d9:2d:26:17:0e:b7:9f:b0:ef:fc:5a:f9:23:b6:a3:0d:
         7b:20:99:1b:d8:0f:ee:9a:de:e9:7f:e5:ba:7e:ed:a7:cc:ff:
         de:88:45:6f:b2:cb:16:39:4a:90:41:f6:f2:46:3a:ba:0b:54:
         8b:81:ae:22:11:1f:10:86:17:38:d1:12:f6:0e:3d:9b:7e:4c:
         04:30:c4:01:3f:c0:b7:e7:ca:67:37:68:72:84:bb:85:19:42:
         89:c8:91:11:d9:e9:a4:3b:90:f1:a1:ea:8a:42:1a:96:45:bf:
         10:12:26:28:68:39:5e:0b:c3:3a:ba:f7:df:8e:6a:b9:a2:e8:
         70:b4:b0:aa:e1:fb:a7:15:41:67:e9:a5:85:16:dd:58:3d:fc:
         d2:1e:e4:89:0b:ea:38:be:63:16:3c:54:35:80:ab:d7:ec:47:
         ef:8e:23:6b:71:1b:0e:e4:32:75:cc:9a:61:77:af:84:d3:f2:
         f5:f2:6d:b0:7c:30:14:8f:6c:90:84:15:cc:7b:df:08:94:4e:
         0b:d9:6a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:25:18 2025 by rpki-client