Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8d0f8056-33cb-3c9a-99ac-076cceb94861.roa
File:                     8d0f8056-33cb-3c9a-99ac-076cceb94861.roa (raw, json)
Hash identifier:          kGRtsOGTejJKhC7EhljV8VNGymVYPUpGTv7eWwkJBIM=
Subject key identifier:   3F:D6:99:1D:FE:1C:9D:84:EC:84:93:04:E4:36:D5:BA:E6:8A:BB:1A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858490F7BF99CC2E246A94B957680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8d0f8056-33cb-3c9a-99ac-076cceb94861.roa
Signing time:             Mon 03 Mar 2025 02:00:39 +0000
ROA not before:           Mon 03 Mar 2025 02:00:39 +0000
ROA not after:            Sun 01 Jun 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        172.70.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0f:7b:f9:9c:c2:e2:46:a9:4b:95:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  3 02:00:39 2025 GMT
            Not After : Jun  1 01:00:39 2025 GMT
        Subject: CN=94a225b8-a6ea-4a94-a277-dcef5a46b30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:be:da:20:75:eb:39:aa:84:12:7e:42:1a:b2:
                    ee:60:24:a7:3d:01:82:af:56:ad:75:37:cb:52:cd:
                    d4:48:7b:01:26:9f:19:5b:e6:2c:c1:1f:42:8e:0e:
                    87:b5:67:a3:20:2a:56:92:0b:66:5b:8c:76:19:b9:
                    0b:89:9a:05:cd:ed:7b:fa:28:56:25:46:bf:c7:db:
                    68:3a:27:c2:ac:a7:66:a0:4c:d0:38:76:06:4e:60:
                    d0:dd:10:84:b8:98:ac:af:1c:e8:80:34:02:72:94:
                    20:60:ac:4b:ee:67:ac:d5:a7:a2:75:02:66:94:a5:
                    ed:9f:07:57:03:cd:38:73:c7:d0:9b:2a:cd:9f:de:
                    e7:9b:56:f0:7b:c0:3d:ab:f3:3b:df:82:07:29:40:
                    65:68:98:d4:66:a5:3c:e0:36:b0:19:16:d5:92:58:
                    da:a5:23:78:89:2b:3a:28:99:e4:dd:d6:77:40:1e:
                    25:0f:f6:39:97:9a:56:5b:17:31:c2:78:2b:a8:fc:
                    0a:1f:f3:f6:55:41:89:cb:09:90:43:97:67:9e:3c:
                    39:3a:ff:65:2f:06:5f:85:57:67:1a:24:3a:e0:ed:
                    72:ec:56:22:65:95:1d:25:53:a6:a5:10:6a:e5:4b:
                    99:22:78:42:e8:4a:c5:c0:f2:36:04:49:d9:9a:76:
                    4a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D6:99:1D:FE:1C:9D:84:EC:84:93:04:E4:36:D5:BA:E6:8A:BB:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8d0f8056-33cb-3c9a-99ac-076cceb94861.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:ee:31:63:9a:7d:f3:0c:96:b8:41:71:15:3a:4a:b7:86:4f:
         dc:40:d5:f1:83:fa:75:f6:d0:70:d4:d4:8f:cb:7a:5d:2e:b1:
         44:5e:71:22:a5:5b:17:b9:75:0a:b3:7b:12:c4:fb:d5:40:8b:
         7a:08:79:35:48:1a:a2:c9:95:84:c4:59:90:50:98:8d:ed:1b:
         39:96:09:c7:ff:db:1e:c4:60:fb:af:97:ea:b8:ed:b1:b4:be:
         b3:ab:da:9e:43:89:d7:a4:03:62:45:fe:f0:61:28:00:0c:bb:
         2d:f5:62:2c:f7:30:4e:d6:a5:72:f6:89:f6:b9:aa:aa:62:ee:
         ec:1e:81:8e:e7:84:a9:19:55:05:96:bf:23:b9:1e:d5:06:b8:
         21:5b:50:0f:ac:87:49:18:ac:68:e4:61:d8:f6:b6:81:b6:c1:
         64:cb:14:73:7b:c4:73:79:22:b2:65:4c:39:0e:dc:58:7e:3c:
         94:d5:b3:40:a0:60:8e:ff:c1:a4:6b:f0:c9:24:20:3a:25:33:
         db:6f:6b:27:7a:65:61:fc:b1:a8:eb:f1:f4:19:1c:76:0b:17:
         7f:a1:c9:57:69:67:9c:1e:83:9c:e1:7c:72:11:3b:dd:54:ef:
         a4:d5:aa:91:23:c1:ec:d2:29:db:e1:c2:26:d8:0b:e4:df:11:
         ae:45:de:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:13:21 2025 by rpki-client