Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/46f012df-fbac-3e5c-97e9-2d3c6ed0ec1d.roa
File:                     46f012df-fbac-3e5c-97e9-2d3c6ed0ec1d.roa (raw, json)
Hash identifier:          qfrU1InIJd+w4EwsbCWUm/7Qqy584euWyl4PbO5g35M=
Subject key identifier:   D7:31:68:A3:8A:B0:3C:9C:A5:D2:7E:42:73:C5:05:8C:08:2E:62:3F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E65501F7A552101B2B66A800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/46f012df-fbac-3e5c-97e9-2d3c6ed0ec1d.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     13335
IP address blocks:        172.69.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:55:01:f7:a5:52:10:1b:2b:66:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=188d4432-c349-4e64-a2a2-7ad3acaa8e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ad:f6:d3:00:95:a6:73:77:d8:78:16:8b:10:
                    fe:f2:2c:ae:d7:f2:ed:58:d4:dc:ae:2a:a3:7c:41:
                    ae:14:f5:14:56:d6:bd:a2:c5:52:e5:54:d8:6b:69:
                    7e:e8:9d:d0:1c:81:22:c7:eb:60:83:6d:50:d3:a2:
                    c1:41:f0:7b:e6:5e:79:d1:a3:4e:ea:f9:63:e9:28:
                    52:0e:0c:e4:c3:fd:cb:e9:10:57:f3:8a:be:34:35:
                    01:83:7b:31:77:a5:09:11:9a:71:1e:ca:2e:5f:92:
                    01:87:76:d1:7e:6a:b3:2d:32:fd:ab:7d:48:cb:99:
                    5d:da:50:6f:49:c5:fe:c4:03:b8:a1:6a:2e:b3:a4:
                    90:ae:89:37:9a:0a:f4:dc:a4:47:1a:f8:89:b8:bc:
                    3f:b3:87:a0:e6:4f:88:05:b3:44:aa:89:77:d4:8f:
                    02:d8:bf:1a:0f:28:9d:ac:f0:76:d6:1d:9f:e5:d1:
                    18:58:59:b9:e7:47:9d:c6:e2:53:62:9c:72:6f:60:
                    15:e0:ec:b3:ac:55:7e:b1:3c:af:7f:76:d9:c9:c2:
                    16:6a:fa:83:6d:ef:be:90:b8:de:f6:df:07:52:09:
                    2e:ac:3d:a8:95:6f:9d:33:40:c5:0b:22:45:3a:56:
                    bd:f0:7f:5c:ad:6d:7a:93:da:50:01:0f:01:b3:a1:
                    e0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:31:68:A3:8A:B0:3C:9C:A5:D2:7E:42:73:C5:05:8C:08:2E:62:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/46f012df-fbac-3e5c-97e9-2d3c6ed0ec1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:a3:53:72:a7:0e:c9:06:d8:da:31:f6:36:2f:64:b3:01:82:
         7e:ce:e6:c1:5d:d0:a1:be:6f:70:f4:99:db:04:e0:df:35:52:
         5b:0c:03:f7:d3:f5:e8:bd:77:33:09:20:a4:cd:56:6c:e2:1b:
         c0:0c:5f:31:82:5e:e0:af:4d:ca:c0:7b:ab:e3:e0:9e:60:0d:
         5a:3d:99:1c:ee:aa:b3:86:58:b1:34:bc:f6:3c:1a:f8:28:80:
         a1:fd:0c:97:71:ff:5c:f2:0f:fb:4a:77:c7:af:57:6a:13:a3:
         06:0a:a0:03:48:0c:84:c0:a7:7b:80:6a:ac:06:bc:12:35:21:
         47:d1:05:55:ca:f2:60:c9:35:ae:68:2c:10:63:32:2e:9c:37:
         32:57:53:4e:6c:70:79:61:7c:1d:3a:3c:16:f5:b4:89:2c:5c:
         ed:29:2a:7b:f1:c3:03:28:db:16:ee:f6:b4:68:ea:73:84:85:
         aa:e2:b8:c7:bf:be:46:6b:24:31:eb:b9:4f:ec:ce:c7:5e:a7:
         d1:6a:95:eb:c0:ef:a5:f4:ce:c2:08:ef:ad:0a:86:f7:c3:1c:
         10:c4:e8:4a:4c:57:1a:53:1d:a2:94:d5:ed:f8:42:a3:f7:21:
         34:ca:be:bc:dc:e6:30:cc:60:32:1e:88:00:5f:12:e5:9e:73:
         f3:d4:28:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:33:58 2025 by rpki-client