Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8acdbfbc-1b71-3a17-998c-b1728d8a5a1d.roa
File:                     8acdbfbc-1b71-3a17-998c-b1728d8a5a1d.roa (raw, json)
Hash identifier:          6lObatVsG5scHtAGCFI6LQeDrLBWIcso4GgmfaxYdV0=
Subject key identifier:   72:82:BB:8C:12:1A:BB:FB:6F:F5:10:05:25:A2:04:A9:A4:54:93:23
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858490B4C1008FE86D12B0C9C3400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8acdbfbc-1b71-3a17-998c-b1728d8a5a1d.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        172.69.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:10:08:fe:86:d1:2b:0c:9c:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=27deaf5b-4552-4bd3-943b-c7c946999d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:86:88:ce:cd:88:b8:48:5f:44:18:d2:7d:8e:
                    c5:25:05:e6:da:4f:b2:70:31:ed:58:44:fc:0b:33:
                    e6:31:27:4f:f7:00:2a:07:39:3b:e0:9d:9d:31:2e:
                    65:03:07:1b:60:61:27:3f:3b:9c:fb:6e:3e:79:40:
                    c0:4c:83:75:96:ac:7a:e7:31:58:a4:70:66:36:e6:
                    f6:78:e1:39:33:bf:4f:74:b8:ba:ae:a5:38:de:e9:
                    44:8f:0f:ec:00:ec:d0:fc:c2:cc:95:23:4e:d3:c3:
                    68:1d:bb:c6:74:a8:17:14:fe:cd:ff:a2:96:d7:18:
                    10:a4:da:2c:15:e5:f4:98:47:04:0e:9d:74:88:53:
                    01:b7:88:aa:a6:7b:9b:cd:5d:ec:dc:e4:09:67:1e:
                    9e:a0:13:d3:a5:57:92:6b:b5:b4:a2:c9:d3:ea:c7:
                    64:1a:a2:c7:4a:02:df:fe:de:57:92:3b:78:7c:d6:
                    90:d1:7c:47:0a:ea:4a:b6:b5:ec:46:0e:3a:66:da:
                    0e:27:62:ae:c5:52:f7:71:fc:81:f3:21:30:c8:59:
                    20:01:27:2d:1d:d6:83:46:72:73:87:50:18:ba:3a:
                    28:a3:a2:21:0a:64:17:65:74:6e:df:89:ae:d3:50:
                    95:cc:88:65:a4:e3:d9:0a:03:d9:e9:56:ca:51:b3:
                    3f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:82:BB:8C:12:1A:BB:FB:6F:F5:10:05:25:A2:04:A9:A4:54:93:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8acdbfbc-1b71-3a17-998c-b1728d8a5a1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:5c:bd:32:7d:7c:b1:30:d9:03:6b:1f:1c:dc:83:04:c6:44:
         41:3f:bc:13:d8:65:6c:7f:3a:e8:7a:31:a9:7a:64:1f:0d:e0:
         57:c5:31:a0:38:5c:a7:12:18:00:c0:6a:c6:e2:e4:03:28:e8:
         6f:da:77:84:e6:dc:8f:cc:c1:98:de:69:44:d3:14:9a:ab:b0:
         4f:7a:2b:26:7e:69:0a:14:71:c5:44:d6:11:7d:eb:1d:a6:29:
         8d:88:2e:c8:0c:71:1c:c3:93:ba:ad:0a:8a:b4:0d:65:39:24:
         d4:a8:0b:13:1d:9d:79:36:be:c0:5f:61:d5:e3:76:b3:bb:ce:
         c2:d6:56:be:e5:7c:bc:af:3d:9d:46:e5:14:08:b3:24:93:55:
         c1:ec:25:7b:bb:6d:79:ef:2d:c7:fa:da:29:7a:9f:81:87:54:
         4e:55:95:b5:c5:f9:19:f4:88:99:29:f7:af:3a:ce:56:90:63:
         73:9a:e3:4d:18:f9:a6:4a:d8:16:1a:bb:c0:f9:a2:8d:79:5e:
         72:cc:a9:23:cc:b0:a0:30:85:96:6c:0b:68:65:58:32:63:99:
         43:9f:9f:5e:83:f4:07:93:89:3d:cb:b1:d1:86:8e:cb:a9:73:
         09:55:9c:28:b5:bc:34:c8:c5:e3:2f:0c:f9:76:3b:71:d2:eb:
         74:90:97:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:42:35 2025 by rpki-client