Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b1957526-2582-3d7c-ad26-2a5bd0b93c79.roa
File:                     b1957526-2582-3d7c-ad26-2a5bd0b93c79.roa (raw, json)
Hash identifier:          vRpF8iBuh0b/rD0p1Vy8Op9SJ/BBD0qy96eivpsplTU=
Subject key identifier:   63:D5:75:2A:50:6F:D3:2B:43:1D:AD:8D:87:02:CA:E4:53:D8:1C:B8
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E6551149BD2A04FB2D9F9200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b1957526-2582-3d7c-ad26-2a5bd0b93c79.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     13335
IP address blocks:        172.70.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:55:11:49:bd:2a:04:fb:2d:9f:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=8d21b5d3-6a33-4c39-8fa7-453797ce315e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8e:0e:dd:14:27:c5:63:86:99:af:da:bc:bd:
                    67:6f:10:5c:1c:20:b8:e9:6e:07:c5:5b:56:a1:26:
                    1f:d9:ca:19:54:a0:71:e6:a4:59:31:37:fe:c8:1b:
                    f9:d7:ee:9c:fa:28:16:62:a5:1a:48:31:a7:d2:a2:
                    6d:44:d8:6b:60:eb:39:fd:a2:a5:e5:ff:ef:6a:f9:
                    ea:f0:f7:ba:d4:1d:3a:7b:a8:9a:b9:a7:a5:38:f4:
                    0e:ab:59:a2:e6:f6:0f:83:9f:36:7d:b3:82:af:24:
                    45:1b:80:7e:ee:bb:7d:99:71:5f:f6:66:44:5f:49:
                    bd:db:93:8b:30:af:54:52:ca:c6:38:ba:25:6f:13:
                    7f:7f:98:b7:f2:3e:b9:8e:73:53:c8:71:1e:c8:85:
                    3d:5a:d3:eb:b7:e3:ee:0e:c0:7f:b5:c6:9c:4f:79:
                    d6:e4:f3:10:bf:c9:8a:c3:3b:07:28:df:88:b6:ba:
                    c3:a9:bc:37:41:28:33:a2:9d:cd:6d:79:2d:31:70:
                    b5:e9:45:90:f5:30:95:5b:ad:a1:ea:f1:ae:5e:74:
                    86:01:cd:5e:e9:95:7b:3e:23:a3:6b:f3:23:86:62:
                    bc:ba:96:13:69:67:5b:69:1f:fc:b7:cb:b3:2b:d6:
                    44:7a:a7:d3:aa:70:95:07:24:2a:6f:df:c6:34:15:
                    f1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D5:75:2A:50:6F:D3:2B:43:1D:AD:8D:87:02:CA:E4:53:D8:1C:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b1957526-2582-3d7c-ad26-2a5bd0b93c79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:c5:16:2e:02:ee:1e:fa:c6:31:8a:af:34:aa:94:88:ec:1a:
         c3:d3:32:e8:da:de:bf:05:0b:68:9d:d3:85:d9:7e:d9:e6:45:
         d2:c8:46:db:90:c6:eb:33:b6:86:68:fb:ea:b3:0c:ec:a6:c4:
         48:bf:c4:c4:2c:a7:5d:ec:96:5d:eb:42:42:87:63:b2:67:bb:
         3a:d1:db:10:51:31:e7:9f:a9:5e:da:c6:30:f7:0b:72:f3:30:
         e7:00:0a:9a:d7:88:e4:08:4e:8c:c5:76:d4:ac:2c:99:49:e2:
         d9:ff:b3:ac:80:0f:c6:69:62:82:a2:e2:63:ab:46:c8:b4:9a:
         2a:33:1b:b4:33:bc:a1:4d:35:c2:fa:ac:01:10:89:e8:1c:a1:
         5e:61:2a:48:79:f0:e7:d7:9d:fd:a5:41:4b:e9:93:90:f3:a8:
         6d:b1:d6:d4:3e:bd:24:64:73:2f:a9:ab:1d:26:67:60:1e:9a:
         0f:94:79:21:39:e0:7b:b5:10:54:5c:e7:77:b0:e4:0f:f2:33:
         a6:46:bd:31:5a:b9:72:c4:04:0f:bd:04:88:ab:de:9f:6a:ad:
         12:9e:a8:ca:53:a0:1b:ee:4d:fa:f4:89:d2:69:70:49:19:6e:
         91:95:61:1b:4a:01:4a:47:d3:73:c3:50:7e:b2:2f:fe:19:40:
         22:ca:b6:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVRFJvSoE+y2fkgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk
OGQyMWI1ZDMtNmEzMy00YzM5LThmYTctNDUzNzk3Y2UzMTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo44O3RQnxWOGma/avL1nbxBcHCC46W4HxVtW
oSYf2coZVKBx5qRZMTf+yBv51+6c+igWYqUaSDGn0qJtRNhrYOs5/aKl5f/vavnq
8Pe61B06e6iauaelOPQOq1mi5vYPg582fbOCryRFG4B+7rt9mXFf9mZEX0m925OL
MK9UUsrGOLolbxN/f5i38j65jnNTyHEeyIU9WtPrt+PuDsB/tcacT3nW5PMQv8mK
wzsHKN+ItrrDqbw3QSgzop3NbXktMXC16UWQ9TCVW62h6vGuXnSGAc1e6ZV7PiOj
a/MjhmK8upYTaWdbaR/8t8uzK9ZEeqfTqnCVByQqb9/GNBXx2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGPVdSpQb9MrQx2tjYcCyuRT2By4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjE5NTc1MjYtMjU4Mi0z
ZDdjLWFkMjYtMmE1YmQwYjkzYzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMjFFi4C7h76xjGKrzSqlIjsGsPTMuja3r8FC2id04XZftnmRdLIRtuQ
xusztoZo++qzDOymxEi/xMQsp13sll3rQkKHY7JnuzrR2xBRMeefqV7axjD3C3Lz
MOcACprXiOQITozFdtSsLJlJ4tn/s6yAD8ZpYoKi4mOrRsi0miozG7QzvKFNNcL6
rAEQiegcoV5hKkh58OfXnf2lQUvpk5DzqG2x1tQ+vSRkcy+pqx0mZ2Aemg+UeSE5
4Hu1EFRc53ew5A/yM6ZGvTFauXLEBA+9BIir3p9qrRKeqMpToBvuTfr0idJpcEkZ
bpGVYRtKAUpH03PDUH6yL/4ZQCLKtr0=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:30:29 2025 by rpki-client