Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4e7a78d3-2570-3428-914a-9a8565d63d19.roa
File:                     4e7a78d3-2570-3428-914a-9a8565d63d19.roa (raw, json)
Hash identifier:          draHQeFWYqoyJD17Uu1Xmvb6OvQbVBsJMhWy0VV0wkI=
Subject key identifier:   95:AB:D0:AF:53:E8:CE:DA:CE:AC:60:79:07:CA:1F:D0:B6:82:13:BE
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849EA85335E66165146B4C1E280
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4e7a78d3-2570-3428-914a-9a8565d63d19.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.69.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:33:5e:66:16:51:46:b4:c1:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=d5f8e833-315d-49d6-81db-18f62af9afe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fb:3b:c3:01:b3:a9:15:31:fc:7b:76:9e:20:
                    03:4c:9e:06:14:a6:19:22:b5:fb:50:8a:be:39:f4:
                    17:80:65:de:06:79:af:1c:95:2d:50:26:f8:5c:3c:
                    ef:dd:e2:3b:bd:1e:0b:83:3e:cf:b4:59:b5:d0:73:
                    b5:6b:77:14:f5:5c:ae:7c:d1:ad:87:9e:bd:bc:22:
                    a0:4e:aa:e7:94:0b:1f:8c:3f:0e:7a:ba:fd:dc:8e:
                    ec:48:7f:0e:bb:85:77:87:1c:bd:f9:74:10:fc:bb:
                    f4:b7:42:f8:8e:5f:67:ba:84:d8:e8:80:96:8a:00:
                    77:4e:9f:dc:80:76:9a:9b:42:d1:99:56:bb:17:51:
                    35:7e:31:e6:5d:b9:92:11:65:08:05:02:e8:3a:69:
                    c7:14:ff:e7:75:fb:ed:78:5d:5e:63:87:75:cb:5f:
                    15:94:e3:ec:4d:3a:e4:8a:a5:c0:af:08:8b:fa:d9:
                    91:7e:1f:d7:5f:00:a9:50:2e:f7:17:e3:84:78:27:
                    f4:27:fb:28:5a:0d:52:73:11:fa:7f:de:e6:ba:dc:
                    6d:68:65:cc:b5:a7:e9:5b:9a:73:25:00:06:f8:d3:
                    a2:47:49:74:2d:29:a1:54:bf:be:11:60:55:9a:0c:
                    44:c7:93:d6:a0:60:7b:37:bf:6b:fb:33:69:e9:51:
                    ff:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AB:D0:AF:53:E8:CE:DA:CE:AC:60:79:07:CA:1F:D0:B6:82:13:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4e7a78d3-2570-3428-914a-9a8565d63d19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:03:2f:00:ca:31:a0:c3:1c:40:3e:a5:fc:52:86:c0:d1:2c:
         d8:03:77:94:a7:98:a5:85:f6:b7:c5:06:9c:b3:97:b3:7d:e5:
         68:8f:5b:f0:6b:e5:7c:50:69:95:f4:7e:89:09:32:05:86:e8:
         1e:2c:24:4a:f0:b8:93:7f:27:38:c0:d0:7e:1f:87:75:99:dd:
         61:bc:0c:7b:5f:c2:12:3c:0f:b6:f8:9e:91:c4:90:29:a3:2a:
         a6:e0:91:e1:db:be:33:0e:35:38:1c:5d:c5:b3:85:94:6d:f7:
         d7:31:e6:f5:2c:18:7a:9d:7e:b9:73:47:f7:36:0e:e3:02:07:
         9a:04:5b:9e:1c:ce:21:3a:bd:a1:6d:cb:5b:06:52:ec:68:2f:
         01:bc:39:5f:ab:92:49:1b:c2:15:44:ea:30:64:ec:a2:6a:cb:
         90:b4:19:7f:b7:53:ec:7c:e4:ba:41:ca:e5:0d:47:07:d3:ae:
         ac:76:aa:a2:9b:91:0a:47:7f:c0:86:d3:19:4d:8f:32:c5:4b:
         c7:c2:4d:8e:b6:03:4c:97:f8:f4:fb:0e:e4:bc:65:c4:24:05:
         97:96:eb:df:6f:fa:4a:e4:f7:02:ee:e8:87:f6:82:7d:d7:2f:
         49:37:17:c6:54:90:6b:91:ec:08:44:dd:19:84:e9:46:eb:8b:
         9e:ad:a4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:39:49 2025 by rpki-client