Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c4ef16a-70ee-3907-abda-a6d4bd249c96.roa
File:                     5c4ef16a-70ee-3907-abda-a6d4bd249c96.roa (raw, json)
Hash identifier:          YzLHrz9qKl7is6Qr+qq8Fpa9Ijhn6u2PYXE/xi47x6I=
Subject key identifier:   AA:50:54:86:B4:23:07:76:CF:FC:27:C4:BC:C7:44:89:82:C7:D7:A9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584910E173A9F650AFC8D8038600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c4ef16a-70ee-3907-abda-a6d4bd249c96.roa
Signing time:             Mon 03 Mar 2025 14:00:53 +0000
ROA not before:           Mon 03 Mar 2025 14:00:53 +0000
ROA not after:            Sun 01 Jun 2025 13:00:53 +0000
asID:                     13335
IP address blocks:        172.71.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:10:e1:73:a9:f6:50:af:c8:d8:03:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  3 14:00:53 2025 GMT
            Not After : Jun  1 13:00:53 2025 GMT
        Subject: CN=66191c9d-79a3-4abc-a43a-37a508df8e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7b:82:23:19:4f:dc:f5:28:20:c2:d6:88:f2:
                    f9:9b:a9:e1:72:cf:5e:92:48:93:88:1f:4b:cf:d8:
                    2b:15:e1:50:f5:cc:8d:a6:d3:9a:6f:cf:f5:b6:6c:
                    4a:0e:44:d3:1c:23:f6:ce:83:b4:95:6f:5d:e8:96:
                    1c:ed:a4:d7:a9:f7:6a:09:8b:41:4a:5e:46:e9:d4:
                    c4:27:d7:d4:d3:9b:5e:3d:e0:52:a0:f6:05:25:51:
                    ed:8d:32:54:41:d5:b7:ea:1e:49:b5:73:88:26:ce:
                    2e:9b:ff:3a:7a:ee:1b:a4:0a:78:48:69:62:8c:49:
                    8e:5c:a5:e0:3a:e6:80:fa:8d:1b:13:8c:8e:9d:b1:
                    18:29:4f:1b:37:a2:29:ab:78:36:be:8a:50:c4:5a:
                    6e:b0:60:47:98:6c:e8:0d:8c:af:9a:54:d1:d4:79:
                    bc:f2:3d:6e:8a:54:eb:04:64:6d:40:28:1d:c4:97:
                    e1:ca:ee:97:19:19:1f:bf:d1:1f:2d:74:52:ee:c7:
                    09:42:b1:7e:66:3c:5b:be:80:2d:73:57:94:82:eb:
                    70:52:7f:a0:78:9d:06:b3:b7:db:29:e0:f7:a9:48:
                    34:11:14:f1:74:a0:ef:71:be:85:71:28:83:61:b7:
                    f8:be:90:41:92:f6:67:42:b9:43:03:91:5f:36:ab:
                    73:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:50:54:86:B4:23:07:76:CF:FC:27:C4:BC:C7:44:89:82:C7:D7:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c4ef16a-70ee-3907-abda-a6d4bd249c96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:86:e8:73:09:36:d1:d9:31:3f:76:20:09:7e:b6:5b:8c:3e:
         07:7a:a7:44:74:af:2f:1f:21:66:5d:ab:5e:52:1a:57:2e:56:
         fb:93:d1:7f:2b:47:66:86:bb:7d:b8:f7:3d:c1:26:c2:ba:a9:
         c8:88:d2:91:5e:7f:24:ef:21:b6:87:28:63:a3:a2:72:c7:c3:
         78:48:7d:26:bd:8c:f0:3e:c8:d0:f8:80:bf:d8:7c:34:b9:70:
         ee:95:bc:3d:54:7e:ac:bb:33:d5:6c:48:a5:2c:08:82:40:a9:
         9c:01:a3:f9:fd:c0:75:63:9b:82:60:0b:ca:0a:06:51:5a:54:
         2a:31:3c:c0:99:b2:d0:e5:f8:0e:6d:3a:0a:84:05:6a:62:da:
         a1:9a:6b:93:12:a4:06:a7:66:94:0d:6d:b8:41:7c:ef:5e:6f:
         18:19:44:bc:dd:30:b8:9e:50:97:d5:a5:03:7a:26:48:6c:af:
         f4:27:94:f0:4a:ff:e5:6d:a3:50:e0:ee:73:d5:e0:22:bd:ae:
         15:39:d0:19:93:08:f7:93:b3:24:5f:26:f1:1e:b5:1c:27:19:
         49:37:51:e2:ee:bc:4e:0d:ea:c0:47:0d:84:cd:79:90:a1:09:
         24:09:e7:74:af:7e:8d:3a:b5:b6:53:cb:62:a1:1d:0a:ad:33:
         aa:d0:1e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:48:24 2025 by rpki-client