Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6570ec9f-ef08-300a-a83c-ee35525e710e.roa
File:                     6570ec9f-ef08-300a-a83c-ee35525e710e.roa (raw, json)
Hash identifier:          5Gp8Yy5GzZd0V8LC+VZdbAtG6Ur8RM/NJKgj+2tfsnU=
Subject key identifier:   5B:43:2A:E5:4E:04:61:99:6E:4A:02:AD:04:A2:AD:0F:E4:FB:D1:38
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584910E1729D0BEEA136A106F7A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6570ec9f-ef08-300a-a83c-ee35525e710e.roa
Signing time:             Mon 03 Mar 2025 14:00:53 +0000
ROA not before:           Mon 03 Mar 2025 14:00:53 +0000
ROA not after:            Sun 01 Jun 2025 13:00:53 +0000
asID:                     13335
IP address blocks:        172.71.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:10:e1:72:9d:0b:ee:a1:36:a1:06:f7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  3 14:00:53 2025 GMT
            Not After : Jun  1 13:00:53 2025 GMT
        Subject: CN=f128c0a4-cd47-418a-ba45-fbd795a99edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1d:33:38:69:09:86:ee:f9:78:c9:06:54:0a:
                    9e:83:15:12:46:62:87:7d:44:8c:66:1b:99:fc:23:
                    1a:06:3a:f2:cf:e6:84:16:20:03:2f:c3:16:ad:36:
                    ae:e6:60:ff:57:9b:d9:12:d7:d2:0d:fb:2f:7f:ff:
                    cc:dc:7b:1d:94:19:9f:5e:43:14:71:75:17:bb:f9:
                    b0:06:e5:d8:e6:1f:2b:12:d1:8b:89:13:0e:46:42:
                    7f:93:93:58:1c:1a:1d:aa:f0:c8:29:eb:f0:d9:1a:
                    05:76:91:39:04:0f:71:0c:db:20:78:7e:d5:c6:18:
                    01:cc:e6:67:20:8a:e3:0e:84:61:eb:cc:79:44:d9:
                    4d:b3:67:7c:74:84:de:33:8f:57:8e:0c:73:f9:b7:
                    1d:87:65:16:fa:b7:70:83:74:4a:71:aa:28:19:38:
                    60:8e:c4:0c:25:fe:da:21:f1:cf:15:03:b6:10:e5:
                    1a:99:de:c1:08:72:08:24:c4:7a:b7:89:8d:b5:86:
                    8c:f7:ed:38:17:ed:f7:c5:74:72:35:73:79:f1:8a:
                    df:b2:48:3a:c9:38:cd:b6:07:00:9b:7c:8a:ad:28:
                    42:70:23:0f:14:65:05:45:66:a0:44:e0:ca:29:55:
                    b4:bc:dd:ae:39:07:9f:7f:49:f8:f7:d9:bd:bb:6a:
                    67:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:43:2A:E5:4E:04:61:99:6E:4A:02:AD:04:A2:AD:0F:E4:FB:D1:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6570ec9f-ef08-300a-a83c-ee35525e710e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:21:6e:42:de:84:4c:40:47:40:0b:1a:b3:e5:6e:09:85:b0:
         e3:ec:34:63:07:af:ae:db:b8:57:5e:92:54:61:0e:85:4c:b1:
         c9:ba:8b:75:10:0c:4b:4c:bc:c4:68:27:8e:5d:24:ce:75:83:
         0f:2f:ea:c2:cf:d4:09:82:08:20:da:07:a8:4b:84:c8:74:4a:
         51:c0:10:4f:fc:3c:72:b7:56:d5:b8:1b:c9:09:e0:9f:64:f4:
         f7:e0:88:4e:33:88:12:65:92:15:7f:99:4e:53:14:bd:8d:e0:
         dc:89:4f:0e:18:a6:6c:78:b5:21:98:f9:1c:c7:a3:86:16:bb:
         00:4c:56:5e:c5:68:c9:47:63:47:20:3f:21:cf:13:46:99:20:
         07:27:e3:6d:d9:b3:f9:2f:c6:2b:b1:33:3d:77:85:67:2d:77:
         f0:c2:bc:74:aa:d5:50:72:64:a2:c7:ca:01:5d:5f:cc:45:96:
         7e:7f:d6:ce:20:5c:81:9a:34:ee:de:60:c4:56:df:88:e2:5a:
         bd:cc:04:73:86:fe:fb:70:8d:a8:71:1e:1c:15:69:fd:be:2f:
         00:1b:68:88:c2:bd:12:f4:b8:f1:92:5f:32:4f:a8:8f:60:dd:
         b2:44:57:75:4b:fc:43:78:6e:7d:45:26:8c:23:f3:4d:06:39:
         75:18:d9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:56:55 2025 by rpki-client