Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e959570a-00b6-3e16-9fb4-a080c5d4afd2.roa
File:                     e959570a-00b6-3e16-9fb4-a080c5d4afd2.roa (raw, json)
Hash identifier:          Ky4sypTKUPViGUyMps1SB0jvWFWRh5nmvTGk7d49f00=
Subject key identifier:   3B:D2:A3:25:0F:90:70:1D:BD:37:C2:CE:8F:04:DF:19:30:EC:75:08
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E7BA9549BE13CD231C361100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e959570a-00b6-3e16-9fb4-a080c5d4afd2.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        172.68.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:95:49:be:13:cd:23:1c:36:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=131dbf2e-3681-42f4-b546-ba8d5b1806b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:32:9f:96:9e:b0:3f:5c:95:b7:d6:71:e8:f3:
                    3b:0e:e8:b9:1e:e6:6a:05:6e:56:00:61:d6:9c:5b:
                    da:fb:ba:73:3c:a3:11:19:d9:36:64:e3:43:04:be:
                    4e:84:38:ed:8e:53:69:2e:27:b2:c8:62:14:5a:00:
                    6c:65:f5:f3:d2:40:f1:80:af:c1:36:c9:d0:7d:24:
                    50:00:44:ed:06:b2:2e:4a:8a:af:a5:66:b9:5d:2b:
                    4f:86:db:95:e0:86:4d:50:dd:f8:d9:3d:64:63:db:
                    59:e3:bc:03:38:f5:18:d5:60:74:2e:08:6b:8b:66:
                    3f:e7:9b:8e:07:44:19:4c:5b:54:c1:6f:33:57:2e:
                    1f:51:37:7d:ad:93:2d:5c:74:46:85:59:8f:df:74:
                    14:ff:a3:6e:7a:6f:f2:53:ae:d3:35:74:52:66:a4:
                    75:43:3b:04:b6:f1:3f:fd:c9:60:a2:d0:25:89:5e:
                    43:0c:73:b2:07:1c:d4:86:59:84:e9:52:fb:a9:bc:
                    12:3b:a1:85:ec:fe:e5:2e:63:3e:e1:c2:82:28:3f:
                    48:b2:ea:10:a1:9c:94:aa:79:b8:35:1b:74:c3:7a:
                    22:b9:c2:1d:68:9b:79:84:92:b1:da:70:5c:38:a1:
                    76:10:dc:7b:aa:3d:68:2c:77:3d:c5:3e:42:4f:1d:
                    73:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D2:A3:25:0F:90:70:1D:BD:37:C2:CE:8F:04:DF:19:30:EC:75:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e959570a-00b6-3e16-9fb4-a080c5d4afd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:58:3a:d9:a1:1a:4e:fa:a6:da:47:2b:0a:e6:4d:be:19:84:
         e9:49:18:ee:e9:ef:2e:1b:bf:74:c3:a6:a0:48:9e:6f:77:b3:
         5d:71:d8:f4:1b:5c:31:5b:c6:ed:86:1b:93:c3:b7:0b:ce:ef:
         23:1b:24:92:30:1b:cc:b9:58:cb:7a:19:5e:61:10:eb:10:c0:
         cf:ad:78:35:3e:e2:0d:c9:aa:66:8f:04:bf:a9:30:09:cf:93:
         3c:67:a7:a3:9a:21:57:67:50:de:01:42:73:b3:92:9e:66:ad:
         d8:c0:2b:d2:79:27:ef:5e:36:c4:20:ea:66:fd:78:5e:fa:85:
         71:49:fc:34:1b:e1:7c:cd:a5:8b:fb:09:84:2a:82:de:e8:0a:
         cb:25:ca:96:8e:f3:93:e9:68:ab:1b:a1:c0:57:b1:39:84:b9:
         1a:03:d6:e9:b3:4b:30:76:13:17:67:12:d2:c3:12:fc:e8:f9:
         c0:58:cd:e9:21:64:84:6d:f4:eb:d9:d6:05:6d:e2:76:99:5c:
         23:10:88:b1:c6:37:63:07:53:a3:40:5b:e3:0b:24:4f:bb:f0:
         b7:f7:96:f7:03:28:ee:7f:2f:21:85:f3:c2:2d:7d:f8:51:a8:
         39:5c:4e:ec:29:11:85:10:5a:b5:ec:64:59:5d:b1:0d:3b:5a:
         36:9f:16:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:40:06 2025 by rpki-client