Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c7ce2ae-6bb6-386b-aad8-9fe2a5ee32d1.roa
File:                     9c7ce2ae-6bb6-386b-aad8-9fe2a5ee32d1.roa (raw, json)
Hash identifier:          IK7t7noUfSXweu9tL+bGSjdcfY1L6MamXFA1a41JcGk=
Subject key identifier:   D7:1C:AC:BC:BD:7A:5D:70:85:0C:58:A9:4E:C2:49:6A:51:0F:01:B6
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BA7CD142DCBDE418EC0FFC6C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c7ce2ae-6bb6-386b-aad8-9fe2a5ee32d1.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     13335
IP address blocks:        172.69.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cd:14:2d:cb:de:41:8e:c0:ff:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=c4a36106-3e7f-423f-9a1b-4c17b5f07e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1d:b3:a8:14:84:74:e7:88:76:dd:7c:72:e3:
                    8f:86:15:06:1b:9f:6b:cd:f0:f7:2a:ed:97:e5:43:
                    1e:4a:e2:a7:e5:5f:40:96:13:28:a7:5f:bd:e9:a0:
                    63:00:e0:0c:49:57:c2:89:96:22:aa:f9:da:4b:2e:
                    70:f2:3b:c2:1d:a3:b9:ec:ba:56:16:0d:86:59:55:
                    87:8a:c8:30:89:a6:08:9e:ef:5b:86:4d:cc:4a:aa:
                    6b:36:82:7c:0e:c9:d7:1b:68:b1:e7:16:95:99:e4:
                    04:4d:48:3e:83:1b:ae:94:9b:85:ee:2f:67:cd:c9:
                    f3:27:92:4d:f7:e2:20:78:63:84:ca:86:62:80:2f:
                    86:25:14:db:08:6b:8c:68:43:96:88:ed:fc:e9:24:
                    01:f9:4a:1f:60:7a:ba:59:46:24:9c:2f:cc:2c:e3:
                    63:1c:46:be:ef:8c:d7:29:a7:db:bd:43:6c:56:91:
                    ea:e8:d4:51:6d:07:d3:b6:a5:ff:92:7e:16:96:4b:
                    41:4a:b0:67:c6:c7:c7:c3:e7:ae:7e:59:dd:1a:fb:
                    3c:8f:96:80:c4:36:c8:e8:dc:1f:1f:c1:e3:df:36:
                    8a:5c:7a:a4:36:1a:0b:b9:8e:bc:46:e6:c4:0c:62:
                    9c:be:70:f0:58:50:ca:14:63:79:b7:e3:5d:7b:0b:
                    68:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1C:AC:BC:BD:7A:5D:70:85:0C:58:A9:4E:C2:49:6A:51:0F:01:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c7ce2ae-6bb6-386b-aad8-9fe2a5ee32d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:b6:10:15:03:a0:f5:fd:46:e6:fe:dc:24:f1:88:bd:21:3e:
         ad:84:f8:fb:f7:37:e7:24:b5:43:4c:ba:6e:a8:01:33:50:c4:
         2e:a8:78:38:e6:14:09:77:f0:41:aa:a2:3f:a3:0b:cd:25:69:
         d7:b8:3a:e0:49:71:50:6f:49:a3:49:b4:e0:96:8c:29:88:a5:
         63:74:23:f0:3d:96:b6:bf:43:6d:ec:c4:62:84:4b:e5:54:ef:
         56:52:bf:30:8a:dc:69:c9:37:d6:df:2a:51:4b:ec:7e:2b:f0:
         20:99:50:b1:27:32:fd:58:e4:ab:11:af:4c:ff:4a:f4:39:e6:
         76:6d:b6:b6:35:cb:c8:ae:9b:8a:8f:ff:ff:56:64:49:42:dc:
         a1:15:e1:e4:9e:32:91:51:b5:06:56:9b:89:46:cb:b7:84:04:
         90:52:74:e4:47:f7:d2:fd:1c:b5:21:fe:16:06:2a:29:08:c5:
         b3:f5:cf:8f:12:ee:df:fb:8f:cc:95:69:b0:39:75:10:0f:d9:
         aa:54:b3:3a:a9:3e:3a:f2:85:13:16:00:87:a9:81:93:08:af:
         c9:35:ff:ca:6b:af:11:ae:d5:ef:03:26:58:39:e6:db:27:65:
         9f:90:9b:9b:9b:09:8d:e5:4f:d9:fb:20:f0:a0:85:83:c6:95:
         c4:55:79:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 10:03:13 2025 by rpki-client