Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49b2bb17-952b-3ff6-92fb-d9195fa2b66e.roa
File:                     49b2bb17-952b-3ff6-92fb-d9195fa2b66e.roa (raw, json)
Hash identifier:          /Ud8U6SykulqW4qYoWNTRUyZNpmXxje7eFBw/nesIBQ=
Subject key identifier:   52:BE:6F:B2:35:09:1E:10:E0:38:7A:45:CA:24:13:B7:EF:A8:59:F1
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849F01A96068D352CDDBCE6C500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49b2bb17-952b-3ff6-92fb-d9195fa2b66e.roa
Signing time:             Thu 22 May 2025 13:01:05 +0000
ROA not before:           Thu 22 May 2025 13:01:05 +0000
ROA not after:            Wed 20 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.70.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:1a:96:06:8d:35:2c:dd:bc:e6:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 22 13:01:05 2025 GMT
            Not After : Aug 20 13:01:05 2025 GMT
        Subject: CN=f78073df-f85a-43f1-b3d2-f1d3e8ca0aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e4:0a:d5:5b:96:10:d3:6e:16:7f:ff:fb:40:
                    44:fb:e1:ae:a4:2d:fb:a6:cc:3e:71:71:3f:b0:97:
                    c0:1c:3e:38:d1:ae:de:cc:27:98:5e:23:29:3e:26:
                    a7:e7:86:72:31:12:91:e6:7a:6d:e1:87:98:69:db:
                    de:bb:bd:d0:dd:18:47:17:d8:16:12:c9:07:06:4c:
                    ff:fb:e2:d2:1e:ac:ce:bf:b1:d0:9b:1a:9a:ac:31:
                    a3:6a:59:ed:e6:4d:f4:b1:48:aa:91:b1:bb:ca:b6:
                    41:d6:b2:1c:a8:b4:f6:12:75:a0:4d:27:66:20:3b:
                    99:f5:0c:c3:16:ed:ae:46:fa:09:58:b4:0f:f4:77:
                    88:1f:0d:8c:6c:d6:d9:30:61:62:31:ee:32:52:38:
                    c2:40:98:8e:01:86:4c:81:e9:57:95:e1:71:d4:99:
                    21:3f:b5:e5:78:fc:ee:ae:b5:83:43:80:54:ce:d1:
                    57:ea:d1:3b:c3:f4:84:de:9b:d6:f0:aa:28:b3:12:
                    98:72:21:a6:c1:0e:84:72:dd:59:92:f4:97:72:07:
                    5b:94:5c:bc:51:8e:14:34:61:8b:c5:73:19:fb:22:
                    cd:61:14:62:ce:73:d6:cd:d7:8b:33:eb:bd:80:83:
                    61:fb:c3:f0:16:e5:0b:53:89:a8:88:44:d4:83:b8:
                    b3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BE:6F:B2:35:09:1E:10:E0:38:7A:45:CA:24:13:B7:EF:A8:59:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49b2bb17-952b-3ff6-92fb-d9195fa2b66e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:65:10:18:c1:06:b9:59:c3:99:a8:da:73:d8:5a:81:22:34:
         fb:32:9d:5e:d2:5e:7f:69:29:54:0a:13:a3:96:85:2b:0d:77:
         fe:92:c5:8c:13:bb:b5:9c:3b:97:aa:c4:a7:85:07:0b:80:ac:
         6e:af:df:27:a0:ac:db:7c:07:a1:e2:40:41:19:bd:d8:ce:7a:
         b4:3b:b4:d8:bf:be:28:22:9c:22:21:24:d3:d3:d5:0b:61:c7:
         12:a6:0c:bd:c5:8d:8b:5f:8e:d5:6f:62:22:27:56:e3:69:0f:
         97:42:a7:8f:a1:76:e2:fa:fe:bd:9b:da:65:82:40:89:bd:d2:
         e3:6d:a6:79:da:b0:4d:62:1b:ae:e1:79:98:2f:ab:d4:e0:6a:
         c2:ee:88:c2:b4:65:21:27:1b:71:56:db:a7:e6:05:4a:e9:d7:
         d1:93:df:c0:14:f3:ed:d3:b7:74:17:d1:f1:f2:a6:be:0f:92:
         b8:7b:9a:3e:3b:73:3e:1e:fe:7b:c0:8c:b3:80:23:b9:ed:68:
         d8:d5:c0:4a:0d:9c:b2:33:05:89:41:84:51:e2:a1:36:b7:63:
         56:16:63:4e:39:39:ae:84:1b:02:46:ff:8f:fb:d5:bc:f3:16:
         20:ba:79:03:77:40:52:1d:c6:7e:ba:0f:9f:7e:76:e5:a8:32:
         db:f8:c1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:20:49 2025 by rpki-client