Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c6a0719-92b3-340a-9918-86985f05521b.roa
File:                     5c6a0719-92b3-340a-9918-86985f05521b.roa (raw, json)
Hash identifier:          8ec8bplgLmVYglFJ8NYTEdGBFB+rZbCcihoRpGmxIZ0=
Subject key identifier:   E8:C2:F9:EF:FD:A9:1F:33:05:43:E2:B8:A7:C0:1A:69:A5:9E:B5:E0
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E7BA962DF41503CD82A2A1C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c6a0719-92b3-340a-9918-86985f05521b.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        172.68.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:96:2d:f4:15:03:cd:82:a2:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=63bf1002-0d8c-4079-993b-f2a6edc625ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c2:3e:fc:3a:72:61:06:f4:87:f0:69:e1:16:
                    85:45:26:27:5a:bc:fb:db:9e:63:9b:85:7a:9f:8d:
                    72:25:87:f3:16:17:39:bd:4d:26:5e:db:12:f3:32:
                    e9:07:91:86:3f:9e:e5:e4:6b:5d:39:15:d1:bd:e5:
                    f9:ac:0d:17:fa:05:be:33:31:5d:84:6c:a0:89:6c:
                    2e:53:bb:40:13:38:45:83:37:bd:d8:e8:e8:5a:d0:
                    8e:bd:7a:82:0c:ff:ff:ef:19:9c:78:eb:64:a9:e3:
                    2c:d0:c3:6f:d0:5b:f9:f7:e2:cd:a3:fe:71:12:0f:
                    c7:9f:17:ba:6a:26:12:a5:b5:00:bb:6d:8e:26:f1:
                    70:c1:09:6d:53:63:75:c7:22:22:74:fd:52:b8:89:
                    92:f9:30:39:4e:3b:a7:04:12:d6:02:81:1f:b7:ae:
                    33:95:9c:a4:3b:39:ca:88:1f:1a:37:59:d6:81:71:
                    c3:2a:d1:e6:f1:48:8d:fc:53:af:5e:65:44:b8:30:
                    0a:6d:56:f8:53:1a:9e:3b:9e:88:01:2e:0e:d2:6c:
                    40:00:cc:75:62:24:f2:83:ef:12:99:63:9c:c1:3e:
                    1d:c2:99:7c:73:7f:60:fb:cb:c0:a6:4f:a7:d4:35:
                    a5:35:8d:14:d3:e8:d5:03:46:10:2b:5c:84:7f:1d:
                    9f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C2:F9:EF:FD:A9:1F:33:05:43:E2:B8:A7:C0:1A:69:A5:9E:B5:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c6a0719-92b3-340a-9918-86985f05521b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:09:e8:97:b2:fa:0e:db:c0:d9:87:4d:fe:8e:fc:e5:a0:1f:
         52:87:08:01:c7:34:f3:b9:6b:28:2f:9d:14:c1:e3:60:8e:08:
         d8:ff:f5:78:36:d8:5e:77:4c:ba:c8:73:fc:8a:7f:a4:57:9d:
         21:17:31:ea:c0:ff:40:c7:3b:4c:9a:ec:67:ed:0e:fc:36:a0:
         dc:d0:aa:7b:5d:9b:ce:2b:ce:a8:c4:e0:19:10:05:fa:ea:c1:
         68:bf:ab:30:f8:51:4b:28:fe:9a:d5:ee:c5:2a:94:17:7f:52:
         47:67:62:7c:68:b0:a4:66:80:12:5e:a4:d9:d7:1d:8d:cf:88:
         24:9b:21:48:e8:0f:66:88:c2:7e:c7:d9:36:df:8c:e0:af:9b:
         eb:74:98:f0:cd:40:e4:a6:47:40:d8:88:9a:d8:ea:10:fc:60:
         b3:84:80:0d:89:23:99:82:8e:12:d2:84:fa:31:e4:4a:73:21:
         a7:11:c0:d9:06:ff:f9:c5:c4:de:6a:b1:fb:94:1c:46:e2:55:
         d0:e0:83:1b:76:83:f9:cf:83:c4:55:f9:c3:7b:24:3c:66:f5:
         d0:12:32:e1:b4:30:4e:8a:fd:20:f1:8a:fe:80:fa:f8:61:16:
         c6:7f:80:a0:8b:68:31:d4:54:f4:c5:ec:db:3d:18:fa:42:12:
         15:25:3c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:12:52 2025 by rpki-client