Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75d67716-50ab-36d5-8294-d9fe9807e30a.roa
File:                     75d67716-50ab-36d5-8294-d9fe9807e30a.roa (raw, json)
Hash identifier:          6479GNgTtOynqHsBmtfJY59UjivLqOAMmhoMwvvmk7A=
Subject key identifier:   B6:C9:C5:38:56:9F:35:E8:F6:0B:FC:C4:C3:58:A2:4F:F5:35:F1:E7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BB19271278F1F679401FF8400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75d67716-50ab-36d5-8294-d9fe9807e30a.roa
Signing time:             Thu 30 Oct 2025 13:00:38 +0000
ROA not before:           Thu 30 Oct 2025 13:00:38 +0000
ROA not after:            Wed 28 Jan 2026 14:00:38 +0000
asID:                     13335
IP address blocks:        173.245.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b1:92:71:27:8f:1f:67:94:01:ff:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 30 13:00:38 2025 GMT
            Not After : Jan 28 14:00:38 2026 GMT
        Subject: CN=dc00f3aa-62c1-4862-9455-b847ccb82254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:11:1a:b6:1e:1d:19:4e:6d:5f:69:0f:7b:a1:
                    fd:bf:53:bf:8e:dd:dd:e8:a8:85:ab:88:62:7d:5a:
                    ec:21:71:76:51:00:9f:0d:3e:ae:c5:63:72:b9:b7:
                    f2:39:a6:28:bf:ec:81:e4:c4:cb:32:3d:4a:4e:31:
                    1e:2f:7e:ae:3a:72:c1:2b:73:c5:89:95:88:44:92:
                    e2:a0:43:9e:ff:e4:bb:cc:b3:d0:0e:10:51:ed:80:
                    aa:90:f3:e5:93:1b:57:5d:e1:bb:61:0c:1e:2c:85:
                    56:ef:57:e1:44:95:35:19:12:cc:79:08:3b:e3:f2:
                    b4:4a:41:5c:61:b8:08:49:c6:9f:c5:55:7d:85:04:
                    45:51:e4:46:d2:bc:97:a1:73:c6:5a:9e:88:bf:07:
                    cd:4b:00:e8:56:9b:b8:ba:38:a9:5f:62:a6:2e:ba:
                    af:94:5d:1b:b9:be:73:8a:84:8c:06:75:28:11:6d:
                    ef:b7:7b:12:6e:b8:aa:ce:30:47:0a:62:9c:ec:72:
                    bc:38:62:80:c1:b3:c5:04:a8:c9:c4:e5:3f:d6:18:
                    cd:8a:0a:20:1c:b8:c9:5e:3e:f0:e6:79:35:13:44:
                    71:31:0e:45:5f:c9:82:7b:91:d9:54:ed:a2:84:9d:
                    f2:04:13:dc:df:f3:5f:4e:62:73:72:9a:cf:7b:44:
                    c8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C9:C5:38:56:9F:35:E8:F6:0B:FC:C4:C3:58:A2:4F:F5:35:F1:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75d67716-50ab-36d5-8294-d9fe9807e30a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.245.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:a3:4d:ed:cb:0f:3d:d7:0a:3f:1f:95:ac:b9:d5:20:b2:f5:
         15:3b:4f:6b:d6:47:53:a8:9d:01:67:b2:0a:b6:f5:c4:0a:70:
         4a:97:51:c1:e3:70:63:8c:87:e5:27:c0:f4:e2:21:45:5e:dc:
         66:0a:08:9f:33:45:1a:1c:58:8f:71:cd:41:58:2b:c4:8f:3a:
         30:43:f0:ea:4b:6b:06:d0:49:f7:ae:3f:85:2b:98:60:cf:1c:
         8a:62:eb:d5:ac:c7:27:f9:9c:99:72:fc:78:72:a9:c9:de:9b:
         69:83:87:90:b0:81:9f:92:b9:35:bd:9d:3c:77:07:27:44:65:
         e7:05:56:c9:d3:a6:06:4f:7f:9a:81:61:07:8e:41:b3:9d:45:
         59:36:da:40:25:90:ec:49:37:11:ff:36:c3:8f:c0:f1:ed:49:
         00:b2:8e:5f:dc:27:32:f6:c1:03:d3:01:52:2a:30:5c:dd:9e:
         97:1c:6b:06:1a:13:39:92:4d:c3:9b:98:c7:ab:ba:4b:b9:c2:
         b2:01:67:0e:55:13:bb:3e:b7:eb:de:ec:24:52:44:ef:8a:6c:
         e0:f3:86:a6:b8:28:ba:ef:71:65:f4:2d:bc:6a:36:35:61:e5:
         6d:36:7f:2e:9e:29:2a:fc:f7:ac:21:44:6e:c7:6c:34:d0:db:
         da:6c:e5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 12:32:50 2025 by rpki-client