Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/46ebda29-b7af-3ad0-ba50-e9996362a74e.roa
File:                     46ebda29-b7af-3ad0-ba50-e9996362a74e.roa (raw, json)
Hash identifier:          CtBVqbVNl74E3DRVUsh1mfNEYfCCHxd+wnvjs6YkVQY=
Subject key identifier:   6C:53:60:42:FC:D7:00:EF:9E:A6:24:2A:8E:51:9B:AB:45:C9:B9:A6
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849EA854A11B83088B04634DB80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/46ebda29-b7af-3ad0-ba50-e9996362a74e.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.69.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:4a:11:b8:30:88:b0:46:34:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=e9b3c176-a504-4a17-abf3-740e508e546b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:08:fb:62:ab:44:08:d9:ea:81:2e:c0:a6:5f:
                    02:c1:3d:4a:87:cb:04:82:72:a4:08:b4:36:85:e8:
                    f7:96:c8:16:62:9f:0a:c9:2e:37:d7:f3:13:6e:a1:
                    fd:a3:75:45:23:a3:7d:74:55:97:ec:c8:9b:16:bd:
                    c3:3b:87:86:f8:65:3f:f9:d8:bb:e7:69:7e:80:d1:
                    f7:6c:5b:d6:31:6d:bb:14:ad:11:26:6e:8f:c8:56:
                    3b:48:8d:22:b3:63:32:20:62:f1:eb:1e:d7:cd:22:
                    8c:39:f9:fa:06:3f:9c:25:13:75:46:e7:ff:05:70:
                    13:4c:73:b1:2b:24:f2:2c:dc:5f:80:b1:8f:4e:d4:
                    01:10:a4:4a:f5:50:26:a5:28:38:26:d3:2d:17:eb:
                    75:cf:e7:68:22:32:15:2f:a3:a3:80:e9:71:b8:6c:
                    4b:9f:24:6c:76:4c:b1:97:48:39:94:c0:67:f3:79:
                    ac:00:67:60:99:16:ac:e6:9f:86:6f:f3:f6:08:3e:
                    16:f8:cd:32:c7:d1:bf:ee:11:61:5e:b8:c7:51:34:
                    c9:85:bc:5f:0c:92:42:0d:9b:24:a8:e8:2b:29:92:
                    aa:48:cc:6d:b6:37:e7:a4:be:36:88:39:8a:5a:a5:
                    bd:27:da:31:3a:e1:42:0b:f2:65:ae:40:6e:ed:ef:
                    34:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:53:60:42:FC:D7:00:EF:9E:A6:24:2A:8E:51:9B:AB:45:C9:B9:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/46ebda29-b7af-3ad0-ba50-e9996362a74e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:0c:b4:f4:d9:32:0d:c7:08:7c:af:f5:46:b1:d9:c4:74:32:
         ec:b4:92:d1:92:fd:1e:bf:54:fc:b3:58:2c:b0:26:74:57:5c:
         12:4d:93:1d:73:54:cc:83:c0:a6:f6:c0:c3:6f:2e:83:cb:5a:
         86:1a:73:7f:4d:2a:be:08:3b:0b:b1:5d:7c:88:0b:31:6d:4c:
         92:b8:0a:ce:39:96:65:28:cd:b9:14:e0:7c:53:79:25:a2:47:
         fc:42:bc:a7:18:be:85:37:2f:cc:a0:50:05:9d:2e:8e:16:7d:
         17:f3:58:7d:8b:b2:4e:81:b9:f7:de:a0:da:63:44:55:f2:6d:
         5e:9c:e8:99:3d:35:a1:ab:84:c3:cd:b1:9b:72:e8:e8:a8:4d:
         cc:be:6b:00:d2:81:f8:da:2c:53:21:6e:4e:e8:76:44:9b:ed:
         fd:48:eb:36:f4:bd:c2:6e:fc:03:6f:e3:c9:d7:5e:50:74:85:
         30:66:51:ca:01:ba:fa:95:35:f1:a9:23:6b:f3:b1:1b:e1:5e:
         32:7f:ae:f7:ac:aa:64:f9:ee:62:3b:cc:55:fb:07:7b:74:4a:
         41:e4:57:ea:c4:23:b6:71:e8:77:43:bd:bd:b4:ae:55:40:65:
         69:c5:13:02:39:51:2c:ff:e0:8a:e2:88:13:88:1d:40:8d:d2:
         50:44:24:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:43:00 2025 by rpki-client