Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa6381ea-eabb-3e18-94fb-575bf9617826.roa
File:                     aa6381ea-eabb-3e18-94fb-575bf9617826.roa (raw, json)
Hash identifier:          XZL3V86gcx7tDXfLriCp+ou48MBcVMypB5ioATebiVY=
Subject key identifier:   B0:3D:AC:B0:CC:3B:E8:62:AA:1E:37:54:71:B9:1A:AB:3A:C0:01:5D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BA7CD0C92911BCF4B21D719C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa6381ea-eabb-3e18-94fb-575bf9617826.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     13335
IP address blocks:        172.69.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cd:0c:92:91:1b:cf:4b:21:d7:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=d005acba-ac0c-49f1-8143-0b1aef5d901a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3b:71:8e:c4:56:3a:11:a9:ac:26:80:3f:a1:
                    e7:ab:2b:a6:f8:81:b5:71:ee:6f:ee:ae:7b:43:a9:
                    cb:67:79:e9:f5:08:41:60:d9:ea:44:87:4a:82:c2:
                    bd:05:d9:b7:e8:38:62:f8:10:25:05:0e:52:1c:5e:
                    80:42:35:7c:58:2a:4e:2a:8b:4b:96:5b:f9:a0:78:
                    cf:2e:cc:f3:32:f0:96:e5:fb:42:e8:28:21:ce:8f:
                    d3:3d:e5:0f:00:d5:21:ed:81:eb:09:a2:ac:b8:2b:
                    65:32:e6:d4:74:db:d3:d9:0f:31:4d:69:d4:cb:43:
                    70:f0:34:53:26:dc:fc:d3:d8:3c:f2:c6:89:02:68:
                    ab:b6:b2:9c:8c:aa:dc:9a:2b:74:0f:38:bb:ba:ea:
                    5f:36:a5:31:91:54:d0:00:0e:0a:ef:35:72:50:65:
                    cc:8a:69:f7:d8:b8:9e:36:13:e6:3b:b8:50:17:f7:
                    b5:22:3e:37:50:78:f5:81:7c:78:80:74:60:91:f1:
                    eb:94:07:09:bb:29:cd:21:5b:1c:cc:6e:72:96:f9:
                    64:88:18:ce:f0:83:e3:24:71:78:e1:df:67:9e:9a:
                    16:49:4c:8d:c2:66:ed:61:fc:aa:3b:ca:a8:8e:60:
                    ed:a1:2e:cc:25:7e:59:cd:6a:11:ef:78:25:08:b4:
                    0c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3D:AC:B0:CC:3B:E8:62:AA:1E:37:54:71:B9:1A:AB:3A:C0:01:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa6381ea-eabb-3e18-94fb-575bf9617826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:76:a9:09:cb:4a:a7:a1:1f:25:6e:a9:c0:56:18:97:b4:12:
         ae:f3:1a:5b:cb:f9:21:39:78:94:29:61:03:e2:c3:41:b0:cd:
         f4:13:1c:96:06:0a:74:21:a5:d3:0f:47:c4:99:13:e2:63:6a:
         36:b8:72:cc:81:72:e9:d2:5b:57:38:43:2d:84:ca:4a:6b:6e:
         4b:8f:7f:ac:72:d1:05:64:98:7f:1f:ae:d1:c3:98:87:4c:60:
         42:98:7b:e1:31:27:af:7c:7b:f2:13:9c:33:1d:f1:41:07:3e:
         ea:b5:5d:0e:62:62:03:c9:9a:1c:6e:65:6d:60:ad:d7:ff:13:
         2f:96:01:04:14:1d:eb:6c:13:51:15:0e:aa:49:e6:32:69:2a:
         ca:e8:e4:ad:1a:91:ce:b7:69:01:be:14:25:4f:71:54:d6:0b:
         d3:d8:1d:aa:ee:dd:f0:fb:df:bb:25:b5:bf:57:ae:5c:e9:43:
         cd:f1:6a:dd:28:1e:7b:82:5c:5b:2a:a2:6d:51:e5:09:c3:2b:
         b8:66:ce:97:38:8f:19:d3:75:02:31:42:95:44:65:bf:22:28:
         26:6b:ee:20:f3:31:7e:7c:27:73:85:f0:a9:d4:f1:d1:0b:2f:
         47:a2:84:85:a0:3b:7a:e6:16:b2:f5:93:9a:f5:7d:93:db:c3:
         ac:69:3b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 10:03:16 2025 by rpki-client