Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49b2bb17-952b-3ff6-92fb-d9195fa2b66e.roa
File:                     49b2bb17-952b-3ff6-92fb-d9195fa2b66e.roa (raw, json)
Hash identifier:          Mw9m41zLcrCZ81eiURFWuoNuX+pnhTqKlAQTYykCvIY=
Subject key identifier:   3C:D3:97:A1:2F:36:49:C9:5E:62:BC:AB:6F:C0:63:70:72:7B:89:0C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584910E16C75BEFE454A09F5F200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49b2bb17-952b-3ff6-92fb-d9195fa2b66e.roa
Signing time:             Mon 03 Mar 2025 14:00:53 +0000
ROA not before:           Mon 03 Mar 2025 14:00:53 +0000
ROA not after:            Sun 01 Jun 2025 13:00:53 +0000
asID:                     13335
IP address blocks:        172.70.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:10:e1:6c:75:be:fe:45:4a:09:f5:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  3 14:00:53 2025 GMT
            Not After : Jun  1 13:00:53 2025 GMT
        Subject: CN=99807e71-70ae-4c1e-9afe-205efe7b7000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:34:70:3f:3f:85:fa:e2:8c:7d:d7:8b:70:86:
                    ab:98:3e:03:30:4e:84:34:59:fb:61:3e:fe:5a:7d:
                    98:3c:75:af:2f:21:79:20:65:69:8c:4c:38:ce:f6:
                    1f:e3:00:65:76:63:a0:39:83:5f:ba:90:9e:c9:2a:
                    23:2d:fd:45:0d:b0:58:d9:0e:35:14:4c:22:72:df:
                    11:d0:c2:c8:5f:1e:89:44:18:9b:a8:5f:85:01:24:
                    89:fe:08:06:c5:72:bb:74:65:9e:ae:1c:1c:e6:07:
                    ed:7e:46:4d:a1:bd:27:31:fa:88:2e:12:cd:c6:9c:
                    ed:6d:5f:49:37:6f:d0:50:80:85:c9:11:dc:3d:86:
                    a8:5d:b0:e3:c9:e2:4f:95:d2:25:1c:ac:46:1d:15:
                    da:4d:f0:be:d6:95:04:08:b0:1d:f4:b4:6d:f0:47:
                    65:24:ba:92:ce:b7:6f:cd:71:5e:7a:31:5e:e4:14:
                    87:63:63:87:f4:ae:97:13:db:a0:d4:a8:f1:9e:ff:
                    e3:e8:39:7f:26:7d:e9:de:f7:e8:bb:7e:8b:d1:80:
                    1d:6a:08:7c:2b:6c:2e:de:b1:32:27:22:be:80:5c:
                    ad:89:61:87:63:f8:b5:bc:77:97:1d:a7:b0:ff:d2:
                    59:60:2c:a5:35:cc:ca:f4:ee:9a:d4:6c:ff:e7:aa:
                    f6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D3:97:A1:2F:36:49:C9:5E:62:BC:AB:6F:C0:63:70:72:7B:89:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49b2bb17-952b-3ff6-92fb-d9195fa2b66e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:8a:ea:a5:c9:a3:a6:be:32:8c:31:fc:48:e3:8f:39:c3:41:
         26:61:62:0a:10:59:18:2f:3d:d5:54:7f:b3:7d:77:01:c9:88:
         7b:b7:68:7c:6e:bf:79:70:a1:03:99:6b:85:7f:f1:be:74:01:
         b9:87:c6:7c:46:6b:e3:c3:1f:7e:e9:bb:d6:fe:31:9f:2c:32:
         a7:1d:6c:4c:b3:48:c8:87:28:6e:cf:b3:c1:0e:97:9a:e7:db:
         4a:c7:38:93:4b:c9:0a:5c:2d:4f:b9:c5:74:88:8c:35:86:3d:
         af:74:fe:c2:f0:d8:40:28:17:60:76:95:6b:18:7b:7d:74:57:
         bf:d1:02:cf:8e:61:10:a9:74:7a:23:94:f0:f6:d5:63:e2:d8:
         9a:ad:c5:93:47:96:88:76:d8:a9:9c:fc:99:83:06:0c:62:ff:
         d7:ae:8c:99:81:ea:a4:37:83:89:e7:ff:c5:3a:d7:e4:db:d6:
         22:c8:01:c2:f3:86:cd:4e:cd:50:f4:3f:2e:90:9b:0a:17:17:
         be:76:b8:c8:5d:19:c0:d1:4c:48:a8:61:2c:9f:95:a5:81:15:
         32:1f:e6:b3:ad:8b:36:2a:4d:bf:2a:0e:20:d1:00:6c:83:bd:
         5a:84:9c:05:3b:40:4b:b9:63:a4:79:8b:55:cc:63:a9:7b:eb:
         72:d3:31:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:34:12 2025 by rpki-client