Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6c122dfc-6b32-3dff-be9e-ee7d67a80cb2.roa
File:                     6c122dfc-6b32-3dff-be9e-ee7d67a80cb2.roa (raw, json)
Hash identifier:          rafIQfY3D1YbFNQgX7OZfQGJL6uCssrAaSXrLf1vtaI=
Subject key identifier:   56:BF:C9:7B:F7:53:AA:EE:E2:9E:6F:62:A6:D6:77:58:EC:EF:78:D0
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E6550467098658408B4E96C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6c122dfc-6b32-3dff-be9e-ee7d67a80cb2.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     13335
IP address blocks:        172.70.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:55:04:67:09:86:58:40:8b:4e:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=a64fd161-c2ee-4428-9294-e5e400439ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9d:ea:35:ad:78:14:5f:7e:c7:fd:86:85:78:
                    aa:13:17:fb:b5:ba:8c:ab:20:0f:cc:b2:0f:39:c7:
                    98:cd:d7:d4:9c:23:3e:32:72:88:40:6c:21:56:fd:
                    c9:6a:e7:e0:b2:bf:f7:36:62:08:4d:f0:aa:f6:99:
                    a8:30:90:5e:57:c4:a3:26:1e:82:55:38:eb:be:68:
                    43:15:12:81:09:a3:21:3c:fe:5d:d1:6f:7c:8c:df:
                    51:59:e0:c2:c6:33:26:06:29:34:d7:34:eb:b5:54:
                    b2:aa:3e:d0:24:0d:63:dd:da:d3:01:9d:ce:93:3d:
                    ba:9d:82:95:a9:50:1e:d8:df:cd:65:98:b9:a2:b2:
                    14:4d:31:93:3b:fd:4b:3c:e2:5c:81:c2:c6:07:fd:
                    82:f4:1f:d3:da:bc:3e:c7:d1:98:de:2b:01:2b:97:
                    98:49:61:d4:4c:c0:59:00:ef:1a:b6:77:0a:31:a0:
                    18:04:31:dd:ad:e0:23:2c:e6:d5:4f:9a:c0:7e:59:
                    66:ad:8d:56:d8:bd:4b:4e:0c:e9:47:e4:fc:ba:e5:
                    71:47:23:af:2a:ff:b4:1d:cb:fa:95:32:ba:3e:f5:
                    60:83:85:cd:ae:90:7c:ec:01:ff:38:e2:f1:86:2c:
                    9a:ea:fa:b5:fb:75:92:e4:fb:5a:7e:2c:c3:cc:91:
                    cb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BF:C9:7B:F7:53:AA:EE:E2:9E:6F:62:A6:D6:77:58:EC:EF:78:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6c122dfc-6b32-3dff-be9e-ee7d67a80cb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:4f:e5:ad:f2:01:dc:af:8d:4a:5b:80:da:e7:a0:c3:54:bf:
         8a:18:a7:43:ca:4a:bf:67:99:df:42:f3:49:24:76:f4:5a:4d:
         6f:f9:98:17:f9:e1:88:0f:d8:59:e4:43:d8:3c:c4:c9:b1:36:
         b8:2d:e9:b2:63:60:dc:ae:31:7d:b2:a2:5e:31:16:de:6b:a5:
         42:0c:e9:85:08:45:f3:70:3e:b6:07:98:ae:69:c0:5a:f8:e4:
         4f:fb:7f:fc:88:25:79:4d:13:cc:97:a3:05:ab:69:ea:7d:a0:
         ce:c7:1c:47:95:9b:ee:58:f4:30:95:22:2b:2c:42:dd:b3:d3:
         79:e5:21:f0:6b:ad:7b:d1:20:0b:0c:2a:fb:b5:b0:f3:da:9a:
         46:c5:74:32:88:b1:af:9e:2e:4e:0c:50:c1:c6:13:d6:f4:3d:
         ea:61:c5:8a:a8:3d:1b:14:d8:fa:ae:da:71:eb:04:54:88:46:
         bd:9f:1a:0b:3b:f6:fc:c7:fd:c8:4b:07:e0:52:d7:d9:10:9b:
         d2:59:56:31:55:80:f2:4c:ff:87:0e:af:89:1f:42:44:74:e7:
         40:1e:14:46:d8:43:38:9c:aa:8c:43:da:ce:77:1f:ca:8f:d9:
         12:64:ac:54:9e:dc:d0:8c:e1:99:19:b6:e8:98:e0:fd:1f:f4:
         65:87:d8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:20:14 2025 by rpki-client