Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c8c2a844-ec1e-3e82-92e3-314d85bec573.roa
File:                     c8c2a844-ec1e-3e82-92e3-314d85bec573.roa (raw, json)
Hash identifier:          +ZijT13EKuy4jl/+bls7FCh2BJqovWrautGM6D7J7cE=
Subject key identifier:   2E:56:4E:48:A9:B0:13:48:54:E8:1D:05:8A:36:A7:AC:93:3F:BE:B7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849EA85313BF2FD534459543E00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c8c2a844-ec1e-3e82-92e3-314d85bec573.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.68.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:31:3b:f2:fd:53:44:59:54:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=942b2a6c-79f2-47a3-8c62-000f3246be2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:62:b2:b7:5b:98:08:e6:89:2b:7a:b7:22:d4:
                    2f:d9:2f:f2:09:15:a9:73:d8:53:3e:e2:56:d2:31:
                    c2:43:54:af:d7:15:d0:4f:c7:b5:c8:12:fb:90:f5:
                    2c:05:2f:36:dd:51:6e:98:82:99:c9:c0:87:31:fe:
                    28:1e:26:c7:23:fc:f9:0f:50:74:be:f8:a0:99:aa:
                    15:1b:a1:03:d9:86:66:a9:60:a0:60:7b:41:b1:94:
                    46:30:3c:fb:e5:9c:cf:3a:a0:86:34:67:bc:7d:33:
                    f1:f2:e2:6a:e3:52:36:93:d6:e5:85:c0:c3:0a:f6:
                    bc:5b:65:6c:6d:d1:53:2d:90:77:22:c2:34:ec:5e:
                    a0:fc:17:85:84:53:e2:44:02:d9:9c:ec:e0:39:77:
                    b2:4b:d1:9c:5b:66:82:74:c8:b6:d4:cd:f1:18:03:
                    ce:f3:a6:e1:2c:d1:69:38:3f:22:19:54:16:be:8f:
                    24:ba:79:15:20:b0:59:59:c1:10:22:d6:c6:8d:b7:
                    15:34:af:3f:56:94:21:c5:b1:ae:5f:97:e9:4b:9e:
                    16:be:05:0d:9f:33:07:3b:3c:0e:da:24:0f:94:25:
                    07:81:75:85:69:2c:bd:b2:ff:2b:01:bc:c8:24:3e:
                    9f:7f:7a:1c:36:dc:47:47:57:b9:21:54:43:f2:b2:
                    9a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:56:4E:48:A9:B0:13:48:54:E8:1D:05:8A:36:A7:AC:93:3F:BE:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c8c2a844-ec1e-3e82-92e3-314d85bec573.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:45:76:48:da:6f:56:64:5c:88:28:ca:2f:d2:04:fc:18:3c:
         06:2c:0d:0d:50:f2:67:b2:51:c8:0e:ac:19:0f:2f:e9:45:3d:
         fc:c3:38:bf:b8:0b:d9:94:8b:c2:22:b1:4c:48:95:6b:75:b4:
         b6:e1:15:36:39:9f:30:63:a9:9b:da:53:8a:4e:c6:cf:b5:ab:
         20:98:79:ef:66:ef:bc:2c:f5:cd:c3:b3:34:f9:52:f3:dd:99:
         60:87:6e:59:82:65:d5:06:28:45:46:03:10:b5:7e:51:28:e0:
         e7:17:8b:42:57:6b:fd:c7:f8:d5:ed:b5:bd:3d:a2:c3:8c:c9:
         47:80:5d:8e:d5:9d:b2:3c:03:6f:33:56:f7:08:d3:02:aa:79:
         70:ae:18:ed:f3:f5:cb:d0:4d:df:b9:cc:55:7f:81:08:27:43:
         f9:95:c7:2f:e5:c6:37:b2:5a:af:79:56:59:7b:8e:92:96:29:
         9b:13:64:f4:42:72:8f:10:bb:ce:a1:86:ad:a4:38:80:3f:d7:
         35:43:1e:f7:4c:d7:c5:48:9e:4b:2f:80:44:d1:1b:32:78:cd:
         ab:31:ca:db:f6:15:ae:cf:ee:fc:09:d6:f3:a3:81:ec:a9:fd:
         02:e4:47:1d:8d:d5:f5:18:a4:70:65:c4:98:a7:18:1e:86:16:
         04:8f:20:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:33:49 2025 by rpki-client