Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25105677-3f17-3688-b9c3-a674947cb1e3.roa
File:                     25105677-3f17-3688-b9c3-a674947cb1e3.roa (raw, json)
Hash identifier:          M/IMhTpKCSmgoWwy1xzuQ7c07ADohPfIhP4IDYfozPI=
Subject key identifier:   5A:F7:3C:C3:E7:59:61:B7:E3:ED:2C:0E:E1:84:87:38:2D:D4:90:0D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849F01A87EFE8F3F4B354A05D60
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25105677-3f17-3688-b9c3-a674947cb1e3.roa
Signing time:             Thu 22 May 2025 13:01:05 +0000
ROA not before:           Thu 22 May 2025 13:01:05 +0000
ROA not after:            Wed 20 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.70.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:1a:87:ef:e8:f3:f4:b3:54:a0:5d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 22 13:01:05 2025 GMT
            Not After : Aug 20 13:01:05 2025 GMT
        Subject: CN=847d9b56-6b0c-4b3c-84c4-44a473e1fa0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:58:a4:bd:e9:27:ff:27:e0:0b:80:62:16:f7:
                    a3:7b:7c:68:b3:f3:b4:7d:7a:e7:7e:6b:71:0c:a2:
                    16:5a:58:13:48:25:f7:6e:64:ba:74:55:40:48:5a:
                    68:c3:2b:11:70:d1:eb:7f:29:51:43:f4:97:b1:34:
                    9d:93:08:f9:77:6c:78:64:29:b5:81:a5:32:22:9f:
                    46:06:69:30:54:9a:a4:9a:1a:d2:92:cd:14:a0:7d:
                    b1:47:46:e4:76:41:fb:46:81:e2:bc:6a:da:d3:b4:
                    4e:88:15:cc:e2:2d:2e:44:56:af:10:7c:0f:53:58:
                    01:9e:75:08:22:29:5c:39:91:f5:68:0b:a6:4e:68:
                    3d:f9:41:61:9e:0a:d4:04:5b:7e:a1:e8:95:1c:cf:
                    14:67:6c:1e:90:ce:9b:dd:e9:41:39:b6:24:40:fb:
                    38:42:f4:48:95:d5:47:40:03:d1:28:6d:84:41:d2:
                    13:66:bf:cd:be:21:7f:7f:55:ff:3e:94:5b:d0:45:
                    ed:6e:31:4a:c3:e3:6f:9f:ee:69:ec:69:5d:b0:c3:
                    86:ba:fa:69:93:de:23:dc:5d:b0:98:2a:a5:68:67:
                    c3:53:aa:38:6f:15:8e:b9:67:6d:b5:84:90:1b:83:
                    e8:81:05:1e:19:8f:43:65:a9:f4:51:7f:a3:bf:41:
                    13:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F7:3C:C3:E7:59:61:B7:E3:ED:2C:0E:E1:84:87:38:2D:D4:90:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25105677-3f17-3688-b9c3-a674947cb1e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:8f:dd:34:6d:37:68:1a:49:56:9e:0d:6b:27:d8:a9:8b:4c:
         cf:c1:ca:e6:1e:72:10:ba:c3:ca:39:21:52:cc:1d:f6:6f:a9:
         fb:2e:a7:41:bc:65:16:65:25:3f:95:91:8c:df:fd:62:c3:f2:
         eb:23:ad:66:95:6a:4e:90:3f:6d:35:5c:0b:e3:e3:92:2b:0d:
         3f:fa:a7:f8:d4:81:ee:63:55:35:b2:e5:1b:25:36:7e:51:56:
         3d:71:46:6f:01:65:61:af:e7:11:ed:a8:7d:2b:3d:e2:0f:01:
         72:5b:be:e9:33:65:a4:7b:7c:cb:3d:ab:40:4d:59:0b:04:33:
         36:7a:46:c3:4c:d4:cf:11:2a:bf:ba:20:cd:fb:de:2c:bc:8a:
         cd:a2:ec:02:f5:5c:d6:64:13:71:88:17:6b:5c:44:87:1a:40:
         8a:33:fd:46:3e:8f:01:1b:75:55:ea:17:e9:a2:bf:7b:81:5c:
         c0:5b:36:e6:37:05:b4:df:a3:4c:f0:08:c8:d4:84:db:fd:a4:
         5a:c6:5f:1a:87:45:bd:a1:c7:f0:c3:c7:23:b9:07:a6:f6:ab:
         30:89:f3:a4:e0:c2:97:16:da:00:36:2a:36:2d:22:51:37:e3:
         3d:9e:a9:52:d8:8c:bf:43:df:a0:63:0f:b5:87:2c:d2:2e:57:
         87:91:1e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:24:03 2025 by rpki-client