Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5062bf67-b055-3a33-ae23-0625b8b4669f.roa
File:                     5062bf67-b055-3a33-ae23-0625b8b4669f.roa (raw, json)
Hash identifier:          N7DPLxHx8/aMo3rWhk1ENPA/UDfP1VOGHjGWs+H2D7g=
Subject key identifier:   D7:2D:AB:BA:11:7A:64:9C:A9:81:36:0D:E3:FB:AF:01:76:20:6A:2E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AB0A6FA41C499B61DF4D44600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5062bf67-b055-3a33-ae23-0625b8b4669f.roa
Signing time:             Wed 30 Jul 2025 12:19:28 +0000
ROA not before:           Wed 30 Jul 2025 12:19:28 +0000
ROA not after:            Tue 28 Oct 2025 12:19:28 +0000
asID:                     13335
IP address blocks:        172.64.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b0:a6:fa:41:c4:99:b6:1d:f4:d4:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul 30 12:19:28 2025 GMT
            Not After : Oct 28 12:19:28 2025 GMT
        Subject: CN=11f41966-a7e4-4cca-9302-6a7ceb8551aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f8:93:db:dc:8c:8c:46:74:f4:88:05:2a:1a:
                    d3:a5:ca:17:3f:6e:ad:b5:34:1e:0d:d2:df:15:ef:
                    5e:7f:ab:16:39:c3:79:d0:06:68:c3:3c:c5:19:ce:
                    10:8f:82:18:e5:92:90:33:cc:07:aa:b4:a4:cf:fa:
                    d2:66:69:ca:b6:e6:68:47:9b:5d:eb:9f:e6:13:0c:
                    c9:6d:0c:e8:34:44:3f:42:80:fb:83:32:7a:b9:64:
                    b1:7d:4e:36:05:ef:98:6b:3a:ab:29:9c:bf:46:f5:
                    7c:e7:e7:6c:bc:b3:b6:d3:cd:e3:37:47:4b:91:7f:
                    99:b8:06:73:19:3c:2d:d8:da:d2:c8:fe:ad:f4:91:
                    ec:90:11:30:6d:70:82:d0:d1:4e:11:08:fb:52:91:
                    3c:38:0b:65:19:72:e2:d7:d2:05:8d:36:2f:0a:a3:
                    bc:fa:45:ab:3f:5d:ed:9b:35:c8:30:b2:a2:a5:61:
                    3e:ee:06:21:fa:2c:f0:04:52:fc:72:05:4d:54:2a:
                    20:48:51:69:c6:ea:8f:7b:5b:41:99:d9:ae:92:ca:
                    70:52:e0:84:b2:b8:c6:2e:87:8e:24:b8:a7:41:4c:
                    4f:80:ac:53:4b:b9:ee:b4:91:8d:1e:55:01:49:63:
                    84:3e:22:55:08:b5:6d:08:1c:ff:15:63:4f:f3:89:
                    cb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2D:AB:BA:11:7A:64:9C:A9:81:36:0D:E3:FB:AF:01:76:20:6A:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5062bf67-b055-3a33-ae23-0625b8b4669f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:f4:56:05:8e:c0:23:7c:4d:a9:04:17:f7:11:2e:9c:5b:ac:
         89:1e:cc:32:d3:fb:3f:53:66:99:8b:db:47:4e:85:94:23:a6:
         bc:d7:fe:fb:45:d1:fc:39:b2:10:2e:ac:50:c4:f8:cd:d2:e5:
         6a:0b:f4:23:db:3b:6d:d3:a7:ce:a1:c3:25:c2:f3:55:24:70:
         46:1e:05:34:a2:20:85:f2:25:e0:4d:ca:24:6d:87:fa:b6:06:
         94:8e:a6:4d:7a:69:ce:92:93:d0:9f:cb:27:8f:4f:2e:db:a9:
         67:66:e6:45:04:09:97:34:90:d1:f7:22:0a:86:10:8e:6d:36:
         1c:6f:80:43:50:0b:2f:bb:2d:de:4d:45:89:70:0e:e5:ac:06:
         85:7d:cb:9a:bc:19:00:2b:fa:ea:92:8f:d1:1b:e9:9e:3e:89:
         08:88:a0:f3:bf:66:6c:bb:bd:c8:5f:12:ba:ed:4c:f7:77:39:
         00:03:55:71:35:ea:97:5d:74:dc:cf:cd:66:ec:77:52:d8:d9:
         ef:ad:89:11:65:b3:d9:fd:e6:55:f0:17:38:26:9f:36:e4:8d:
         97:20:d0:07:04:96:4b:46:e3:93:53:0b:f4:30:fd:cd:e2:c4:
         5f:a6:f4:55:4c:3f:ee:ef:c4:22:24:3e:5d:e0:31:59:ad:bb:
         ee:77:22:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 01:46:04 2025 by rpki-client