Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/c8be1484-c497-36e9-b419-a28fbd8e6fbc.roa
File:                     c8be1484-c497-36e9-b419-a28fbd8e6fbc.roa (raw, json)
Hash identifier:          wDKmJppnklfo6JoxA1CxB/qN62fEI26e8JdRP16dXNA=
Subject key identifier:   2B:62:DB:8B:82:8D:0A:4F:94:7A:8E:8A:1D:89:BD:88:35:ED:66:52
Certificate issuer:       /CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
Certificate serial:       010D0C9F4328584AC0163E8E83A260496D897B40
Authority key identifier: 60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/c8be1484-c497-36e9-b419-a28fbd8e6fbc.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     33436
IP address blocks:        172.82.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:3e:8e:83:a2:60:49:6d:89:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=88ba462e-b6e6-4ee4-bcac-0a79fca9b30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3d:5a:c6:f5:3f:29:e7:7a:68:1a:85:f4:e0:
                    c7:f2:0f:c1:29:9a:bc:fd:61:f0:cd:72:7f:cf:90:
                    3c:5b:c5:6f:ad:11:55:64:2e:4d:ad:17:f0:a2:e4:
                    37:a0:e1:6e:ae:17:70:64:a7:3e:17:9c:b5:8c:5c:
                    03:64:9a:4e:e6:f4:53:a2:60:0c:1f:b2:83:7c:4c:
                    0b:ab:c6:9e:de:db:e3:0c:69:f6:d7:e0:b1:48:ae:
                    ad:41:c5:86:fc:ea:4a:c2:9f:53:d8:c2:03:df:fe:
                    6a:4a:b6:1c:ee:ef:be:a8:ea:fe:8d:50:3d:15:aa:
                    53:fe:72:8d:96:56:59:d5:92:14:35:c8:f2:42:d7:
                    f3:0f:35:0d:ad:1f:d5:04:a5:73:27:6a:98:23:98:
                    34:c9:83:5c:44:fc:83:23:ba:89:6c:90:7e:9d:43:
                    f2:6e:41:45:f1:85:5c:4e:6c:31:74:1c:ab:f8:c0:
                    29:11:d0:01:46:c2:79:8b:e0:45:68:32:6a:ea:7c:
                    92:62:98:e9:71:67:c4:b2:06:52:44:83:d1:ae:08:
                    c3:e2:e3:8b:93:70:51:e2:95:24:cc:68:43:e7:42:
                    17:41:4d:8f:1e:77:ef:76:60:07:ce:2d:4b:11:4c:
                    61:bc:9d:6a:26:f3:a9:d9:71:81:a8:2e:4a:47:25:
                    7b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:62:DB:8B:82:8D:0A:4F:94:7A:8E:8A:1D:89:BD:88:35:ED:66:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/c8be1484-c497-36e9-b419-a28fbd8e6fbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl

            X509v3 Authority Key Identifier:
                keyid:60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:db:ca:e7:25:cd:47:62:0c:58:52:66:a5:15:93:88:e3:cf:
         b8:b8:99:f5:6b:2c:fa:d5:e2:55:3c:1a:21:58:60:b0:a0:44:
         9a:23:d9:95:1a:d0:f8:12:f2:39:2a:6b:45:c7:9d:fb:7d:23:
         be:b9:2b:07:a2:c3:00:fc:27:a1:73:13:b3:4f:97:89:a8:7b:
         e5:f8:73:70:81:30:e4:7c:a7:c2:84:86:09:57:ad:09:90:39:
         a4:35:9e:1d:2f:e0:85:a1:42:79:2c:4d:cf:32:93:5b:b0:f0:
         7f:01:05:f1:3a:5b:4d:66:ee:90:67:a0:18:ae:c7:2e:d0:a2:
         96:68:99:89:aa:68:41:cc:db:01:a0:17:a5:54:97:e9:d2:31:
         b2:81:79:77:b3:0f:62:91:ab:f0:ce:58:c2:c5:3b:a4:90:1f:
         63:05:e6:68:91:8d:f8:8a:b8:5d:bc:38:ca:3c:c4:98:c8:b7:
         66:49:2f:a3:b7:5d:a4:b3:cb:23:a9:91:16:d1:4e:3b:a7:70:
         f8:c1:5f:10:f4:14:48:85:88:cb:e0:9a:aa:eb:7f:2d:14:70:
         2c:0e:9c:54:1f:0e:2c:f5:c8:49:a6:a6:03:b1:8b:e2:69:f6:
         83:cb:2e:26:a1:03:b8:c3:a9:94:cd:12:9d:8c:6f:75:46:c8:
         8f:f1:22:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:26:49 2025 by rpki-client