Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/410ab385-2cbf-3cef-bb53-5cc9ce282a74.roa
File:                     410ab385-2cbf-3cef-bb53-5cc9ce282a74.roa (raw, json)
Hash identifier:          iKjSakmSaXxIT0p2TytwimAdQbaI2xsRAlPA6jYh0o4=
Subject key identifier:   D3:7A:67:7C:D2:77:67:F9:D6:9E:3F:69:61:1D:26:C5:5A:80:57:30
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584910E16F4261CE2F9E086CBC80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/410ab385-2cbf-3cef-bb53-5cc9ce282a74.roa
Signing time:             Mon 03 Mar 2025 14:00:53 +0000
ROA not before:           Mon 03 Mar 2025 14:00:53 +0000
ROA not after:            Sun 01 Jun 2025 13:00:53 +0000
asID:                     13335
IP address blocks:        172.70.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:10:e1:6f:42:61:ce:2f:9e:08:6c:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  3 14:00:53 2025 GMT
            Not After : Jun  1 13:00:53 2025 GMT
        Subject: CN=d4cadc4b-93f3-4d32-b3d7-0c0214be5415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:70:fc:07:bd:b9:c1:e0:0f:fc:58:a2:5d:c9:
                    60:27:58:4f:cf:6e:2a:90:b2:1e:09:07:bd:1b:30:
                    89:0e:a9:1f:b0:c2:41:5a:cd:4a:68:be:d6:21:72:
                    f6:fa:9d:8e:c6:00:89:87:4f:41:cf:e5:04:da:5c:
                    13:ee:77:f8:26:1d:7f:4c:c3:c1:55:44:ae:e9:24:
                    87:35:12:c0:c8:55:52:e8:b8:d7:56:bb:68:00:70:
                    67:43:34:84:7d:25:2e:b4:6c:f9:7d:9b:19:f3:ac:
                    45:20:b3:46:cc:41:3b:8b:04:81:fc:08:3a:06:fb:
                    2f:6a:8d:e1:19:07:5d:ca:72:39:81:a1:17:4f:50:
                    f4:b2:30:d6:c9:5b:9a:51:9b:67:f6:6b:eb:9f:c2:
                    68:84:99:c5:fc:79:c3:18:b9:d8:3b:54:49:ce:af:
                    c4:c0:93:30:27:64:f1:e7:7d:c6:28:1d:b9:1d:d3:
                    e5:d2:95:4d:ae:be:33:f2:8b:8f:a5:6f:5c:40:7d:
                    95:29:ca:a0:1d:b4:8a:fd:9b:77:6e:f5:8a:83:7b:
                    a6:40:93:c9:dd:9c:65:c4:89:5a:a8:65:da:84:5d:
                    5d:db:4e:7d:08:3f:48:c5:7d:ba:2a:4c:3c:5b:67:
                    86:7c:dd:4a:78:49:57:91:6a:cc:ff:e7:6c:d8:61:
                    84:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7A:67:7C:D2:77:67:F9:D6:9E:3F:69:61:1D:26:C5:5A:80:57:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/410ab385-2cbf-3cef-bb53-5cc9ce282a74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:52:39:98:34:f2:e0:d5:af:ca:ae:97:2e:d5:6a:f5:91:12:
         3c:ab:ef:7e:c6:64:b6:c9:c2:2a:16:62:e0:bc:77:c0:59:cb:
         e6:8f:2e:8a:67:e2:1e:51:a5:26:82:c7:a3:f6:8e:5c:00:f7:
         ba:34:c9:5a:87:55:0f:52:82:df:b2:bb:21:49:31:ec:47:ad:
         f7:dd:87:2c:63:ad:29:de:62:0d:e7:b3:4b:ee:a1:59:67:96:
         a5:2a:ff:0a:9b:5d:2a:fa:ae:43:4b:94:7d:7b:44:e5:a9:fe:
         7d:71:94:a9:23:2a:8b:53:f5:c4:db:0e:4c:ed:6c:d3:c8:f7:
         76:6e:57:7d:d5:37:09:b1:7b:40:a5:cd:1d:43:04:24:0e:6e:
         e9:00:ad:e8:5b:8d:e4:c2:15:b8:18:4b:f2:89:f4:d5:1e:a3:
         9a:91:6f:79:73:11:b3:f6:49:6c:f0:4f:54:c0:1e:34:d6:48:
         53:95:21:0f:2d:21:a7:a8:32:d3:4c:70:ba:30:3b:2d:43:47:
         f8:ce:c1:5d:3f:6b:8d:5b:90:16:91:0d:81:e7:3d:8c:3a:09:
         e6:80:00:cd:8b:c7:3e:57:23:de:79:79:45:88:53:56:55:48:
         73:d5:cb:42:e3:ad:94:f5:a6:3e:33:1c:77:95:ca:04:ae:a5:
         37:68:e7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:31:58 2025 by rpki-client