Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a664ce31-e334-302c-8d63-6952d26499fb.roa
File:                     a664ce31-e334-302c-8d63-6952d26499fb.roa (raw, json)
Hash identifier:          Iw6FCleQMj9IQ5PZFlkvtP7myk2yjN4AVLQnh1adbU8=
Subject key identifier:   06:13:5E:B3:7C:AC:7B:F5:EB:73:C8:9E:1E:D0:09:C4:AA:45:7F:8A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BABFD37402B9D1B3B56CAC780
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a664ce31-e334-302c-8d63-6952d26499fb.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     13335
IP address blocks:        172.69.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:37:40:2b:9d:1b:3b:56:ca:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=ac7fd42d-c56e-4396-982d-e92841b9c3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3b:60:1f:5f:e4:b7:7d:aa:ad:34:b0:35:1b:
                    78:9c:be:10:b9:5d:03:3b:62:78:10:a9:3b:34:f5:
                    45:b0:0a:f7:05:cd:8d:5d:a6:da:a2:c2:1c:96:8a:
                    2a:11:8f:52:d2:f8:c7:4a:64:a8:b9:52:62:5d:36:
                    cf:2e:4a:09:5b:42:a7:31:2a:e6:da:ad:ad:e6:c0:
                    ee:3f:6f:e1:97:77:37:03:d0:70:6d:c5:a0:1a:2b:
                    78:c1:b0:fa:20:85:df:32:94:bf:0c:33:52:f2:db:
                    8b:87:5b:e7:e9:c6:5f:d6:ef:be:d0:c6:5d:e7:2e:
                    d1:a3:e9:c7:22:fa:f4:36:55:7b:a9:09:6c:89:74:
                    f7:51:83:7d:50:d9:71:c3:14:03:e7:20:fc:a1:08:
                    fc:bd:1f:4b:57:8d:ec:2b:3a:6d:86:5b:e8:3f:15:
                    5c:0d:46:0a:70:2d:ca:6f:8c:7c:58:85:a9:8a:04:
                    66:14:e9:19:66:9e:ea:2a:b1:d4:8a:a4:fd:a6:12:
                    e0:79:bd:4d:72:89:9b:88:57:7e:7a:a1:95:e9:d8:
                    16:a5:86:15:b4:9a:7f:fe:1d:87:f2:d4:61:d9:23:
                    2f:74:5c:fe:e4:44:4c:26:84:6d:03:0d:44:62:53:
                    0d:e1:f1:d4:d7:a4:75:f0:12:ea:20:5a:f4:68:a3:
                    8b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:13:5E:B3:7C:AC:7B:F5:EB:73:C8:9E:1E:D0:09:C4:AA:45:7F:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a664ce31-e334-302c-8d63-6952d26499fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:ab:9d:79:dd:40:e8:56:cd:90:6d:a2:45:7e:71:65:92:0f:
         80:51:6e:49:b5:e7:36:f2:9b:ab:df:e3:28:27:de:fd:5a:36:
         34:bd:cf:cb:4c:55:7a:ac:64:e9:33:7d:93:54:ce:cb:60:66:
         37:97:69:02:7e:a2:57:22:37:6d:64:a2:da:35:92:91:9b:03:
         ed:e9:c7:8f:10:09:9f:29:7d:8c:0d:70:6c:ce:0a:76:e7:d7:
         3f:6f:89:5d:ff:ca:d4:93:fb:22:8d:8b:9d:ec:07:c7:e0:f1:
         cf:ee:75:05:2b:d7:4b:80:5f:2c:7e:a2:0b:1c:d7:15:57:a4:
         6b:dc:8c:26:f8:72:ec:42:11:c5:e2:b9:ac:bb:fa:f7:aa:26:
         6f:0b:f2:1e:f9:70:7c:18:1b:c9:de:3b:e8:57:36:b1:b6:40:
         30:ca:5b:31:63:48:3a:cd:74:07:00:d8:02:5a:38:f2:72:fc:
         33:4b:98:08:ee:9d:fe:66:d8:0b:51:bd:61:e9:ea:21:a9:76:
         96:be:b6:53:25:98:ab:dd:48:1d:0e:ba:4a:ea:81:12:c3:f4:
         6f:39:e9:a1:c6:d8:ce:1a:cb:10:1d:c0:32:61:2f:5d:6c:99:
         32:d2:4c:2a:73:ed:6f:94:3e:8f:49:91:f0:a6:a7:3f:ed:72:
         d3:d5:f9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 12:34:30 2025 by rpki-client