Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ee0737cb-18e9-3a1a-8d80-0dbe2a23895e.roa
File:                     ee0737cb-18e9-3a1a-8d80-0dbe2a23895e.roa (raw, json)
Hash identifier:          itEiXSAFuFdhmpVrNEKcOv65kyy6mn9LZW0ygLs7NMI=
Subject key identifier:   D3:C1:C2:D7:9F:A7:E0:90:6B:CD:3C:79:CB:BA:DA:D7:58:8B:86:81
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858490B4C082D4147EF69CCC77180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ee0737cb-18e9-3a1a-8d80-0dbe2a23895e.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        172.68.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:08:2d:41:47:ef:69:cc:c7:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=11169fbe-25e5-45ac-b890-2dd7cd7ad153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:64:99:b3:1f:87:87:18:3e:86:f5:3a:2e:6b:
                    a1:98:48:02:3a:b0:2e:a0:26:f6:9d:9e:66:26:08:
                    3b:28:d2:95:6a:71:76:12:5f:93:ed:07:f4:09:7e:
                    a5:29:df:19:01:ca:4b:30:40:6c:b0:11:b8:0c:29:
                    22:d0:cb:05:34:b8:77:0c:bc:2d:30:d8:30:c1:36:
                    c8:10:19:52:3b:07:bf:5e:1c:19:f3:9b:02:02:64:
                    d5:c1:1e:ce:35:f6:9a:90:0a:21:78:a9:1d:bb:d1:
                    50:eb:b8:05:34:0d:24:9f:cc:fc:2c:cd:1b:29:6d:
                    a4:69:73:ce:27:22:fa:fb:65:ee:1e:8d:c4:04:c7:
                    8d:f7:5a:47:0b:98:34:75:97:a6:a0:35:2e:27:f7:
                    88:e5:64:a8:d4:fb:56:6b:a7:67:0e:fb:22:b4:0d:
                    8d:c6:9f:e4:3b:4f:e0:99:9d:c5:c6:80:ad:33:02:
                    fd:4f:3c:ca:11:a1:33:11:29:b6:0d:ff:9a:d5:d5:
                    d1:b0:a9:d0:a1:40:54:20:d7:a9:47:9b:3b:3b:f4:
                    2c:aa:6b:b0:63:2c:95:e0:30:20:af:bf:07:c6:a3:
                    6d:43:09:50:77:0c:d3:31:40:29:02:9e:99:e6:9c:
                    9c:a9:66:51:e1:4b:25:79:42:08:bf:a5:0d:94:9f:
                    da:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C1:C2:D7:9F:A7:E0:90:6B:CD:3C:79:CB:BA:DA:D7:58:8B:86:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ee0737cb-18e9-3a1a-8d80-0dbe2a23895e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:24:75:e8:1f:ef:a2:4a:40:8b:0f:0c:92:d5:24:67:3c:5c:
         43:6c:8b:02:3e:1f:a5:4b:1b:5a:a7:9e:4b:a3:ad:f3:57:ce:
         9a:88:e7:72:8b:5d:8d:62:33:61:8c:15:da:86:d5:20:34:5e:
         f6:9b:5a:73:62:33:be:87:a5:51:07:7a:6b:c6:ad:60:22:51:
         b5:d7:1d:56:39:52:be:21:32:c8:99:fd:19:81:27:5b:7d:e1:
         bd:ea:e6:6e:f2:71:8a:66:56:67:5c:b0:3a:8f:5b:fd:3a:0c:
         96:e1:e3:39:b3:ec:02:ef:ee:be:50:36:dc:19:69:bd:ec:91:
         cb:e2:9d:e5:a3:9a:f4:1f:86:bf:18:a8:f6:d3:3e:9f:5b:51:
         c4:ae:48:a2:03:33:d5:d9:8f:cd:ed:1a:54:08:c5:8d:20:76:
         6d:1e:52:ae:66:ab:ed:3d:41:77:6a:72:aa:e9:4a:e7:59:4e:
         c8:39:a1:bc:0c:c8:65:3f:8e:db:77:47:92:76:3b:5d:31:df:
         6e:bf:ce:c6:99:4e:36:cb:06:b4:6c:f6:50:8d:f0:8f:7f:29:
         8c:71:a5:11:b8:2e:f9:cb:e7:ae:72:8b:d7:38:b3:8f:38:4f:
         ef:f2:6a:8e:6d:5b:72:1a:60:3e:51:c3:5b:a5:d0:4e:41:c3:
         9f:33:8c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:50:03 2025 by rpki-client