Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7f7cfc6b-9b38-399b-991f-6e7d6a2fcf55.roa
File:                     7f7cfc6b-9b38-399b-991f-6e7d6a2fcf55.roa (raw, json)
Hash identifier:          hh4PlHRzQdFC8T6upfEQBBwaGAYDqGg6JCXvvxlmcBc=
Subject key identifier:   CB:D9:45:6E:25:86:E4:48:42:D2:26:AF:8A:28:71:AB:04:D2:0D:7E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BB1926D9CA0FA2504310D8C00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7f7cfc6b-9b38-399b-991f-6e7d6a2fcf55.roa
Signing time:             Thu 30 Oct 2025 13:00:38 +0000
ROA not before:           Thu 30 Oct 2025 13:00:38 +0000
ROA not after:            Wed 28 Jan 2026 14:00:38 +0000
asID:                     13335
IP address blocks:        172.71.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b1:92:6d:9c:a0:fa:25:04:31:0d:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 30 13:00:38 2025 GMT
            Not After : Jan 28 14:00:38 2026 GMT
        Subject: CN=18000694-c06d-44d6-b03a-14ec7d3755dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b0:3a:43:1e:b0:ba:96:96:ba:3e:f0:93:de:
                    a7:59:79:b6:b4:fc:32:92:a2:34:f7:b9:02:d5:c0:
                    db:35:1a:68:46:c0:77:3b:dc:26:b5:4c:d8:3f:14:
                    46:11:9d:8a:58:1d:61:a3:a6:a5:d1:b8:6e:cf:4f:
                    4e:96:6c:b3:f2:ab:3e:c4:fa:4f:7b:17:e4:64:84:
                    7f:50:50:54:c7:14:13:5d:ad:5e:58:fa:c6:4f:33:
                    08:b7:a6:fc:bb:01:0c:d9:0d:14:87:ba:fe:0d:58:
                    57:bf:78:d1:3b:3a:72:66:9c:0f:1e:4b:3d:86:89:
                    ff:96:2a:45:3c:24:36:4b:0a:b6:7f:cf:73:91:1c:
                    80:80:ab:33:fc:f5:2c:28:52:be:d2:89:53:8a:73:
                    26:3c:ed:a6:cc:37:d6:aa:e6:50:dc:bc:0e:d7:e5:
                    dd:b4:35:c5:4b:7d:a3:41:b8:16:01:62:c7:9c:1a:
                    7c:27:34:63:39:7f:7f:0f:2d:dd:08:15:ee:b0:3f:
                    ed:77:d0:df:89:b3:55:55:0f:64:9f:28:f1:4a:7c:
                    8b:d6:59:57:99:af:3f:1d:2d:3d:59:e0:d8:ce:8c:
                    55:dc:17:5c:99:a0:f5:da:8e:c1:b2:b2:77:20:1d:
                    20:d6:9d:e2:c8:42:2f:24:ee:d5:d3:ce:4e:aa:46:
                    e6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D9:45:6E:25:86:E4:48:42:D2:26:AF:8A:28:71:AB:04:D2:0D:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7f7cfc6b-9b38-399b-991f-6e7d6a2fcf55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:6a:ce:22:72:01:40:83:cf:e2:8e:ce:29:a1:01:c9:2e:6d:
         28:56:f2:8f:17:22:42:5c:c4:dd:fb:18:ad:3a:96:67:95:e4:
         62:7b:e2:ca:fe:fd:d0:d6:2c:57:86:25:b9:0a:6a:b4:de:c3:
         cd:fe:eb:ec:ff:3e:88:df:27:02:d6:5f:3a:e6:d7:fc:1e:de:
         0f:6e:42:1d:45:ee:1c:85:ef:7b:cf:3e:0e:09:49:94:a9:5c:
         a2:78:a0:65:61:12:76:01:ee:9e:9b:38:f1:0d:ed:51:d1:82:
         a9:ec:d1:d8:a8:fb:0e:f4:ed:07:d2:48:14:73:2c:7e:26:76:
         15:a3:be:62:02:6d:06:e2:65:3c:4d:f7:2c:63:de:43:34:17:
         a8:cb:01:a2:ed:36:0d:32:72:00:5d:4b:10:ae:ff:63:d1:24:
         2f:d0:ac:25:a5:ae:8f:05:33:e6:b1:d0:14:32:29:6d:53:8d:
         b5:90:9e:95:a9:ad:76:e9:42:52:f4:3b:ab:16:2e:ba:e0:61:
         25:5d:6c:01:15:29:f4:99:07:bf:90:56:11:fd:c6:b5:c6:b7:
         b0:72:aa:9e:a8:24:ac:89:3d:3d:be:75:59:45:c6:fb:87:b8:
         07:ec:77:31:33:4c:95:12:9d:a5:94:44:28:f6:53:53:4a:3a:
         77:44:ed:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 12:37:13 2025 by rpki-client