Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/28a6e830-ed98-31b0-9811-91ef9482d24e.roa
File:                     28a6e830-ed98-31b0-9811-91ef9482d24e.roa (raw, json)
Hash identifier:          NqeBzdEP35Ybs+H9KyjHU+caXiu8yVR6drjiXJ0OYiE=
Subject key identifier:   EE:0E:DB:E5:06:E4:2F:ED:F5:98:B5:FB:21:77:26:FC:89:36:C3:E6
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E7BA9989B56ED2393FD7E020
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/28a6e830-ed98-31b0-9811-91ef9482d24e.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        172.70.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:99:89:b5:6e:d2:39:3f:d7:e0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=614720b0-78cb-4386-89a2-a6f5e14741b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5a:b6:f0:de:7f:7d:49:15:9f:3f:ce:67:4c:
                    77:e7:aa:73:a6:71:2c:07:aa:c0:4c:1c:09:60:65:
                    ae:93:d2:55:66:70:85:4d:f0:98:b7:26:4f:0c:82:
                    f2:59:e5:0a:6f:4e:73:d3:59:aa:1d:6d:35:42:06:
                    e5:6e:2a:ef:e5:2c:68:39:f3:2d:79:48:67:04:c6:
                    0a:68:1e:36:68:86:42:91:e6:1f:20:4a:b9:de:03:
                    07:f7:47:47:e8:bc:21:28:a3:54:04:f5:96:c5:9e:
                    68:0e:86:40:c1:f9:e1:22:55:3d:43:96:84:be:d4:
                    b4:16:d2:24:28:ef:9f:45:a0:4a:ce:3e:de:95:b0:
                    78:53:dd:fe:38:03:40:de:86:db:e6:15:97:b6:76:
                    db:3b:a3:6f:c6:d3:7a:86:d0:c2:b7:82:10:da:9e:
                    90:ac:b2:bd:e3:a5:79:50:ac:38:72:c6:4f:3f:c8:
                    bf:6c:11:5d:b0:2c:9a:fa:cb:d6:a7:80:cd:c4:0f:
                    94:66:19:fd:3a:3a:aa:2a:3d:d7:63:04:dd:01:3e:
                    b7:16:25:cb:ea:ec:ad:54:4d:0e:2a:1e:83:6e:e2:
                    6a:ec:46:27:ab:ce:89:39:09:8e:39:bf:71:9a:30:
                    08:27:83:45:85:73:02:96:5d:3e:b9:7b:51:b0:3d:
                    3b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0E:DB:E5:06:E4:2F:ED:F5:98:B5:FB:21:77:26:FC:89:36:C3:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/28a6e830-ed98-31b0-9811-91ef9482d24e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:8d:48:70:6f:a6:c6:26:da:2b:6b:d8:5e:1b:bf:f4:e3:93:
         8c:82:a6:ad:8e:e5:7a:3a:e7:fa:c8:09:be:46:0f:6b:c7:79:
         1f:b3:ef:81:c3:7b:65:cb:ee:cf:66:60:5c:a9:29:c2:ef:2a:
         3d:1a:78:40:71:f8:44:ce:d1:43:19:e3:2a:c2:41:72:fe:3a:
         d5:ef:24:0c:13:24:b3:17:a1:f3:90:57:4a:32:39:ac:da:e6:
         22:32:d4:a0:e8:6c:99:d1:f7:24:ee:72:73:b3:4f:47:23:a6:
         2b:de:e7:12:f0:d7:9d:ff:20:0a:24:52:fb:11:8f:be:2b:8a:
         af:8e:2f:df:e7:a3:58:8e:21:ff:9d:bc:8b:9f:00:61:71:8c:
         ed:81:51:6c:9f:52:02:42:c0:f9:ca:c2:a2:28:4f:94:fa:13:
         0b:04:c1:f5:09:6d:e0:d3:37:44:2e:c5:77:73:80:46:23:8c:
         f0:32:d8:ea:cc:7e:06:78:f6:7c:92:62:b6:8e:06:42:cf:f7:
         24:44:98:6a:40:d9:de:00:00:18:4c:88:53:36:6c:85:5b:af:
         11:fd:cb:96:aa:8c:ee:6c:67:8f:43:fa:04:38:68:32:1e:b5:
         46:56:0e:a6:46:6c:2c:33:9d:79:7d:4e:4f:1f:21:d2:78:04:
         82:44:f8:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnupmJtW7SOT/X4CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk
NjE0NzIwYjAtNzhjYi00Mzg2LTg5YTItYTZmNWUxNDc0MWIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVq28N5/fUkVnz/OZ0x356pzpnEsB6rATBwJ
YGWuk9JVZnCFTfCYtyZPDILyWeUKb05z01mqHW01Qgblbirv5SxoOfMteUhnBMYK
aB42aIZCkeYfIEq53gMH90dH6LwhKKNUBPWWxZ5oDoZAwfnhIlU9Q5aEvtS0FtIk
KO+fRaBKzj7elbB4U93+OANA3obb5hWXtnbbO6NvxtN6htDCt4IQ2p6QrLK946V5
UKw4csZPP8i/bBFdsCya+svWp4DNxA+UZhn9OjqqKj3XYwTdAT63FiXL6uytVE0O
Kh6DbuJq7EYnq86JOQmOOb9xmjAIJ4NFhXMCll0+uXtRsD07VQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO4O2+UG5C/t9Zi1+yF3JvyJNsPmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjhhNmU4MzAtZWQ5OC0z
MWIwLTk4MTEtOTFlZjk0ODJkMjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC6NSHBvpsYm2itr2F4bv/Tjk4yCpq2O5Xo65/rICb5GD2vHeR+z74HD
e2XL7s9mYFypKcLvKj0aeEBx+ETO0UMZ4yrCQXL+OtXvJAwTJLMXofOQV0oyOaza
5iIy1KDobJnR9yTucnOzT0cjpive5xLw153/IAokUvsRj74riq+OL9/no1iOIf+d
vIufAGFxjO2BUWyfUgJCwPnKwqIoT5T6EwsEwfUJbeDTN0QuxXdzgEYjjPAy2OrM
fgZ49nySYraOBkLP9yREmGpA2d4AABhMiFM2bIVbrxH9y5aqjO5sZ49D+gQ4aDIe
tUZWDqZGbCwznXl9Tk8fIdJ4BIJE+M4=
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:49:09 2025 by rpki-client