Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1598ca3d-5035-3b50-aa15-360fada01876.roa
File:                     1598ca3d-5035-3b50-aa15-360fada01876.roa (raw, json)
Hash identifier:          RHQiSuESjk/0LTepj3MF2oh6g/imWLmz6Xp40Y2Jnb8=
Subject key identifier:   5D:D6:95:E0:AC:90:AD:C7:6D:C1:CF:DE:0B:07:31:58:2D:28:4F:C6
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E4EFCEEC28986F14FAB45180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1598ca3d-5035-3b50-aa15-360fada01876.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     13335
IP address blocks:        172.71.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:ce:ec:28:98:6f:14:fa:b4:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=74323b74-e170-4f50-a260-3a296585000a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a9:9f:39:63:6a:ec:27:5e:9c:2c:3b:bc:bf:
                    11:4d:f3:41:f9:1b:a3:a6:30:b7:b8:87:2f:20:d2:
                    6e:43:79:8d:e9:6c:f5:80:fb:19:e3:bc:fb:e0:30:
                    69:7b:29:1e:71:e7:62:31:bb:39:ba:7f:8a:e6:cd:
                    0b:4a:68:c5:e0:10:6c:be:a1:21:90:0a:3d:74:d8:
                    23:da:7d:79:02:64:7d:6c:82:4d:72:8c:e3:b0:71:
                    23:75:41:dd:62:20:b6:f4:8e:96:f9:b6:66:02:84:
                    d1:50:6e:7d:32:05:27:b9:01:ca:82:9e:6f:e3:20:
                    7d:62:32:ef:d0:88:03:c7:93:e1:5c:93:e4:37:88:
                    8c:2b:8c:cb:e9:30:90:fc:ea:76:b8:88:76:ea:c2:
                    61:61:3e:97:c4:ad:67:d5:55:8a:92:fb:8c:be:ce:
                    0f:0c:86:b1:f0:af:c6:ff:ed:60:13:28:ec:16:dc:
                    e1:f8:52:2e:e0:84:6c:53:f6:dd:6f:23:7d:48:75:
                    27:6a:4d:b0:e6:b4:86:a7:1f:f2:2f:c9:aa:2d:8e:
                    b0:13:28:02:de:6b:21:2c:e8:06:07:35:22:4c:2b:
                    08:a2:e7:7f:0b:63:10:7a:3b:1e:98:26:19:ef:de:
                    ed:bd:f3:00:c7:bf:ac:c1:45:31:fb:3c:7e:b8:dd:
                    ca:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D6:95:E0:AC:90:AD:C7:6D:C1:CF:DE:0B:07:31:58:2D:28:4F:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1598ca3d-5035-3b50-aa15-360fada01876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:cd:a2:a3:a4:6b:4f:ef:78:10:79:f4:78:0b:51:7b:b4:69:
         36:e2:65:bf:bc:1b:85:8d:ce:de:a4:a0:65:48:1d:0b:ca:5e:
         56:27:03:c0:0c:14:c4:88:14:dd:4b:38:5a:4f:b6:a5:09:73:
         38:3b:54:b6:0d:a0:5e:b2:70:2d:d7:23:85:ae:b0:30:17:22:
         46:6c:b3:a0:31:ed:aa:31:3c:5a:ef:8e:bd:51:56:0c:c9:30:
         c3:9d:3b:33:de:2b:b4:2d:13:b1:74:8a:c2:53:63:86:71:7d:
         82:ba:fc:eb:18:46:6f:86:81:07:6c:6c:bc:f7:3f:af:83:a2:
         32:f3:76:42:4a:97:c0:a3:66:2d:11:d7:da:7f:c9:d5:13:7b:
         40:7b:89:6a:38:2e:11:f7:a2:5a:13:16:8f:6b:ba:a4:43:4d:
         23:b1:cf:eb:45:fa:58:7a:ec:6a:db:70:36:99:29:b8:cf:e9:
         c8:f7:a9:3d:dd:18:2d:59:25:6d:d7:76:d2:33:d8:b2:b1:ae:
         eb:bd:09:fa:c3:f8:ff:f5:44:b8:03:ed:52:2f:61:b8:9d:bb:
         30:e3:04:cd:5b:6a:6a:8a:2c:1f:e0:9c:5e:97:a3:43:a3:9b:
         15:6f:9d:75:8e:7b:9c:ce:9e:ea:d7:b3:06:02:88:ae:3d:ca:
         aa:87:1a:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk787sKJhvFPq0UYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk
NzQzMjNiNzQtZTE3MC00ZjUwLWEyNjAtM2EyOTY1ODUwMDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqmfOWNq7CdenCw7vL8RTfNB+RujpjC3uIcv
INJuQ3mN6Wz1gPsZ47z74DBpeykecediMbs5un+K5s0LSmjF4BBsvqEhkAo9dNgj
2n15AmR9bIJNcozjsHEjdUHdYiC29I6W+bZmAoTRUG59MgUnuQHKgp5v4yB9YjLv
0IgDx5PhXJPkN4iMK4zL6TCQ/Op2uIh26sJhYT6XxK1n1VWKkvuMvs4PDIax8K/G
/+1gEyjsFtzh+FIu4IRsU/bdbyN9SHUnak2w5rSGpx/yL8mqLY6wEygC3mshLOgG
BzUiTCsIoud/C2MQejsemCYZ797tvfMAx7+swUUx+zx+uN3KdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF3WleCskK3HbcHP3gsHMVgtKE/GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTU5OGNhM2QtNTAzNS0z
YjUwLWFhMTUtMzYwZmFkYTAxODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALTNoqOka0/veBB59HgLUXu0aTbiZb+8G4WNzt6koGVIHQvKXlYnA8AM
FMSIFN1LOFpPtqUJczg7VLYNoF6ycC3XI4WusDAXIkZss6Ax7aoxPFrvjr1RVgzJ
MMOdOzPeK7QtE7F0isJTY4ZxfYK6/OsYRm+GgQdsbLz3P6+DojLzdkJKl8CjZi0R
19p/ydUTe0B7iWo4LhH3oloTFo9ruqRDTSOxz+tF+lh67GrbcDaZKbjP6cj3qT3d
GC1ZJW3XdtIz2LKxruu9CfrD+P/1RLgD7VIvYbiduzDjBM1bamqKLB/gnF6Xo0Oj
mxVvnXWOe5zOnurXswYCiK49yqqHGsA=
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:53:48 2025 by rpki-client