Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a62af52e-109f-3786-bbda-f2baf4984586.roa
File:                     a62af52e-109f-3786-bbda-f2baf4984586.roa (raw, json)
Hash identifier:          q/rfjsNGZJnkM+7YXgMLimhOSlWIQi5ZnQ+3+WCo95Q=
Subject key identifier:   47:89:82:4A:4E:E1:D8:94:F5:0F:91:C0:3C:6A:86:80:DE:0E:D3:2F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584910E173859E0AA03A82136640
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a62af52e-109f-3786-bbda-f2baf4984586.roa
Signing time:             Mon 03 Mar 2025 14:00:53 +0000
ROA not before:           Mon 03 Mar 2025 14:00:53 +0000
ROA not after:            Sun 01 Jun 2025 13:00:53 +0000
asID:                     13335
IP address blocks:        172.71.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:10:e1:73:85:9e:0a:a0:3a:82:13:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  3 14:00:53 2025 GMT
            Not After : Jun  1 13:00:53 2025 GMT
        Subject: CN=b76ea641-e94f-4900-ad13-19fe3c7d8e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:b7:d3:ee:f7:cf:3c:dc:07:21:e5:d9:fb:
                    cc:00:b2:5b:d0:93:75:73:8c:44:34:ae:47:2f:72:
                    b8:be:a9:3d:5a:a1:20:79:6e:92:72:5c:ed:0d:21:
                    d3:9b:7c:84:d7:e8:2f:e5:c8:a6:15:4b:c4:7b:01:
                    48:81:28:01:0f:ad:d5:05:eb:f1:99:96:53:50:06:
                    ad:d4:18:87:a5:70:e8:e7:ea:94:fd:e3:d3:9e:40:
                    74:3c:3f:fd:55:cf:d5:33:a7:b5:5f:83:8a:0b:a7:
                    9d:53:90:48:b5:70:3b:15:94:dd:64:cf:3c:6e:7d:
                    e1:00:1d:e8:3d:b1:1a:45:1d:ef:06:d3:af:5e:8c:
                    e4:b1:63:38:3c:8a:d2:ea:87:ae:2d:35:6b:3b:91:
                    2f:19:f5:ad:34:4f:32:9c:25:14:56:1c:08:47:8e:
                    94:ed:1f:24:1e:fe:eb:ad:06:de:67:f0:ea:12:50:
                    42:da:b5:e4:99:bf:53:db:cc:cd:d1:ff:b6:80:24:
                    ca:8d:15:08:d2:48:01:07:01:06:53:d1:76:8e:64:
                    42:23:61:8d:84:18:d2:29:47:34:9e:81:5f:36:b9:
                    09:7f:c6:0a:eb:fb:cd:8f:bb:ad:75:3d:79:05:91:
                    8a:1d:38:36:64:24:f6:a4:cc:99:85:f7:59:ca:b1:
                    1c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:89:82:4A:4E:E1:D8:94:F5:0F:91:C0:3C:6A:86:80:DE:0E:D3:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a62af52e-109f-3786-bbda-f2baf4984586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:02:2f:08:a3:54:b5:97:5d:fa:b9:fb:d0:b3:ab:16:ec:9e:
         3a:af:b1:df:6e:a9:3e:f0:e5:16:63:8c:7e:76:07:d0:b8:89:
         99:10:da:fb:7d:9f:04:72:4d:90:22:c0:da:94:ad:fe:72:41:
         ed:a7:b6:16:29:b4:fa:39:56:8f:c8:3a:3b:66:df:d3:5b:f0:
         1f:40:e9:c6:0b:9c:d3:e7:ec:fc:37:d9:05:ab:2b:99:9c:fa:
         db:7b:e3:d4:b5:a4:c7:c8:a6:b0:0c:61:54:7f:f5:94:68:92:
         44:db:0a:0d:cb:b4:fb:08:c6:70:8b:cb:b2:96:4b:d5:91:95:
         9a:5d:3f:7c:19:11:74:6e:e0:0d:3e:23:18:50:4c:45:e5:cc:
         14:21:20:0d:fa:c7:f8:e6:3a:ed:48:ee:08:5b:2e:a2:c8:38:
         21:05:24:0a:97:19:40:7b:3a:51:29:d2:f3:30:83:fc:d0:4f:
         a2:1a:5d:07:e7:96:04:29:fb:ff:ed:32:ee:d2:9f:42:0c:61:
         42:4e:34:6a:ae:c0:f3:d2:f7:9c:73:2e:0d:9d:fe:0d:d3:8d:
         8c:6a:7a:bf:66:b8:d4:33:2f:46:1c:95:01:0d:59:8a:28:d6:
         f4:3d:dd:7f:f4:7c:eb:cf:06:ef:e0:a1:b6:17:68:67:13:d0:
         ce:eb:d0:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4XOFngqgOoITZkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk
Yjc2ZWE2NDEtZTk0Zi00OTAwLWFkMTMtMTlmZTNjN2Q4ZTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6G30+73zzzcByHl2fvMALJb0JN1c4xENK5H
L3K4vqk9WqEgeW6SclztDSHTm3yE1+gv5cimFUvEewFIgSgBD63VBevxmZZTUAat
1BiHpXDo5+qU/ePTnkB0PD/9Vc/VM6e1X4OKC6edU5BItXA7FZTdZM88bn3hAB3o
PbEaRR3vBtOvXozksWM4PIrS6oeuLTVrO5EvGfWtNE8ynCUUVhwIR46U7R8kHv7r
rQbeZ/DqElBC2rXkmb9T28zN0f+2gCTKjRUI0kgBBwEGU9F2jmRCI2GNhBjSKUc0
noFfNrkJf8YK6/vNj7utdT15BZGKHTg2ZCT2pMyZhfdZyrEchQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEeJgkpO4diU9Q+RwDxqhoDeDtMvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTYyYWY1MmUtMTA5Zi0z
Nzg2LWJiZGEtZjJiYWY0OTg0NTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGgCLwijVLWXXfq5+9Czqxbsnjqvsd9uqT7w5RZjjH52B9C4iZkQ2vt9
nwRyTZAiwNqUrf5yQe2nthYptPo5Vo/IOjtm39Nb8B9A6cYLnNPn7Pw32QWrK5mc
+tt749S1pMfIprAMYVR/9ZRokkTbCg3LtPsIxnCLy7KWS9WRlZpdP3wZEXRu4A0+
IxhQTEXlzBQhIA36x/jmOu1I7ghbLqLIOCEFJAqXGUB7OlEp0vMwg/zQT6IaXQfn
lgQp+//tMu7Sn0IMYUJONGquwPPS95xzLg2d/g3TjYxqer9muNQzL0YclQENWYoo
1vQ93X/0fOvPBu/gobYXaGcT0M7r0Bo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:23:09 2025 by rpki-client