Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d59e955a-b36b-344b-81cd-7f5b4670c997.roa
File:                     d59e955a-b36b-344b-81cd-7f5b4670c997.roa (raw, json)
Hash identifier:          bG5A3B5xOo/ajVFLjDNeHnEH8oIXO2AQco9DTyvhHlY=
Subject key identifier:   FD:A0:EC:01:3E:7A:51:7B:33:B7:E6:F9:29:35:A7:05:6D:C2:80:2A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849EA8545DA5B50D4AD5FE04DE0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d59e955a-b36b-344b-81cd-7f5b4670c997.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.69.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:45:da:5b:50:d4:ad:5f:e0:4d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=7df42047-f069-47b3-baaa-bfaabab83dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:af:59:eb:a0:9f:3a:45:ea:2c:0e:9f:a2:0a:
                    6e:94:16:40:0f:88:42:36:aa:74:d9:cc:00:70:07:
                    08:e0:77:d6:db:4a:4d:8f:22:4d:3a:68:ed:d9:a0:
                    d2:25:a2:dc:40:66:f2:2a:37:a6:79:cd:71:37:a9:
                    e7:c4:f6:24:a9:ea:c6:3e:0e:f5:0c:a1:de:82:30:
                    1f:fe:90:d6:d5:a2:bb:dd:27:43:17:63:8b:8e:7e:
                    71:a5:62:0f:18:00:9d:4a:e8:c6:cd:3f:c4:6c:d5:
                    9c:ae:51:52:59:8a:1a:16:09:da:19:c2:be:a5:b5:
                    52:9b:9b:c6:ad:d3:e6:e7:03:ef:25:41:72:71:17:
                    ae:b1:5f:a7:c3:25:54:72:70:08:07:e9:10:80:94:
                    da:48:e6:ea:33:28:ae:14:10:96:5e:75:5e:0e:48:
                    82:da:aa:9c:26:cf:ca:b0:ac:5d:a5:e6:f6:00:e2:
                    79:04:54:a9:c4:e3:ad:ef:16:93:8d:68:24:2c:61:
                    6b:da:23:28:46:e1:1f:d6:ba:63:c4:c7:8d:2f:a9:
                    9d:59:1b:e2:37:cc:3d:0f:15:9f:78:f2:21:f6:fe:
                    08:31:cc:e4:9e:78:7b:84:9d:bc:6c:40:e8:ca:db:
                    5c:0e:45:7d:bc:2a:f9:73:81:18:06:20:97:6f:5e:
                    15:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A0:EC:01:3E:7A:51:7B:33:B7:E6:F9:29:35:A7:05:6D:C2:80:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d59e955a-b36b-344b-81cd-7f5b4670c997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:60:91:1f:76:c7:57:36:31:ac:25:94:f5:10:45:67:3b:52:
         0d:75:d8:96:7c:ae:79:82:75:1a:e0:07:c4:d9:2e:4f:c8:2a:
         6b:8d:26:1b:5e:11:5e:90:df:38:18:e4:7a:4e:19:54:af:1e:
         78:8c:dc:4b:a8:8e:64:fe:79:a0:13:d8:38:35:2b:f8:68:5e:
         51:64:5e:1f:10:e8:0e:42:8b:da:e8:4d:dd:9c:fd:c9:19:63:
         1d:5e:11:fc:70:cd:3d:46:68:a1:fc:d6:b8:14:92:18:06:03:
         bb:4f:ae:73:01:bd:f0:5c:d1:7a:2e:75:3c:0c:51:16:4e:65:
         97:d4:b6:93:aa:97:29:2f:11:41:f7:d1:21:55:25:28:17:c1:
         e6:7d:cd:3c:e6:ed:66:f7:ae:92:46:81:b0:39:65:c5:1a:d9:
         a0:e0:e6:5c:56:44:fc:10:32:59:0a:0d:f5:f3:23:44:af:66:
         b6:fb:bb:c9:34:ac:3f:75:b3:c5:71:c8:3c:03:83:1f:5c:9d:
         a7:0b:1e:ae:f4:33:41:8c:5f:bf:9c:bc:19:de:d9:e8:f3:d9:
         90:b1:57:07:07:0d:97:4c:b8:79:c4:0b:bb:85:26:f6:bb:c9:
         c7:df:a7:a4:f3:c5:df:e7:05:62:82:3f:a4:86:98:08:09:5f:
         1c:f9:e4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:24:22 2025 by rpki-client