Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b24dc92a-cc8c-3cf9-9297-c0bed1db2414.roa
File:                     b24dc92a-cc8c-3cf9-9297-c0bed1db2414.roa (raw, json)
Hash identifier:          bMrrHzZXtHzu2iNb/8RXdxmXaEEXohfluzv451/CDpA=
Subject key identifier:   69:EE:BE:7B:8A:04:42:00:FE:96:99:D5:A7:6C:EA:BE:A0:31:6F:17
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858490F7BF9F40841A03798A43000
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b24dc92a-cc8c-3cf9-9297-c0bed1db2414.roa
Signing time:             Mon 03 Mar 2025 02:00:39 +0000
ROA not before:           Mon 03 Mar 2025 02:00:39 +0000
ROA not after:            Sun 01 Jun 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        172.70.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0f:7b:f9:f4:08:41:a0:37:98:a4:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  3 02:00:39 2025 GMT
            Not After : Jun  1 01:00:39 2025 GMT
        Subject: CN=cdbe3674-fe72-4c69-ade9-47a95e604726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7a:28:64:ab:6e:7e:61:b3:88:ab:8c:8d:11:
                    34:8b:b6:1d:6f:48:5b:87:03:4e:9b:e0:d7:c5:6f:
                    9c:07:70:09:0a:34:c1:12:58:8a:1d:19:f6:82:89:
                    3b:fe:14:4e:81:f0:2f:5c:a4:15:59:32:0a:b6:d2:
                    9c:9b:43:60:f5:96:3a:0a:54:a7:02:22:d7:5e:f8:
                    c7:bf:54:da:e7:60:d8:ab:44:e8:7d:9d:85:5a:66:
                    e9:09:15:78:ed:37:0f:cf:1b:64:b1:ff:4c:41:a5:
                    e7:8e:e7:ba:7c:c6:89:c5:2f:2e:84:1d:cc:31:96:
                    e2:f8:ee:de:b6:65:e2:0c:bb:86:25:aa:ee:6e:92:
                    05:4c:ae:a0:aa:02:7d:3d:78:72:0d:11:c6:f3:78:
                    de:c2:4a:24:a8:ce:7d:8c:66:d2:ac:11:1a:f2:43:
                    eb:9e:04:ba:b4:4f:69:76:bd:c6:3b:f4:65:17:6f:
                    5d:9f:da:ff:72:56:67:f8:6f:58:bb:ad:31:de:b5:
                    4f:26:e5:45:03:f2:04:b8:d1:c9:64:fb:12:63:f5:
                    e2:41:86:45:64:df:1d:e1:c0:f6:73:2f:d9:59:9f:
                    b8:b6:69:b6:73:85:68:df:60:8d:61:2b:a2:b3:e2:
                    68:d1:df:66:6e:cd:18:cf:8b:8c:0a:df:41:72:80:
                    00:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:EE:BE:7B:8A:04:42:00:FE:96:99:D5:A7:6C:EA:BE:A0:31:6F:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b24dc92a-cc8c-3cf9-9297-c0bed1db2414.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:22:f4:43:55:ca:a1:e9:03:0b:27:be:49:14:b4:91:f3:97:
         1f:c5:22:c3:fc:91:03:33:f1:28:4b:81:95:68:34:d3:66:6f:
         6f:7c:f0:77:95:60:63:66:3b:5b:42:d3:69:5d:2d:44:f7:0b:
         1f:51:d2:eb:e1:cc:43:f9:8a:60:7b:1c:5b:08:ac:5e:1c:71:
         63:05:3c:13:de:d9:1e:90:ff:c7:f7:4b:75:40:ee:dc:ab:32:
         e7:9c:99:31:2a:d7:ab:c4:81:f8:46:97:ee:b1:e9:dc:e2:e1:
         81:85:94:c2:d1:38:14:2e:f3:35:ae:f1:ea:ef:4b:31:00:ca:
         88:0e:d1:bf:e6:e0:5b:fb:bc:98:f1:85:17:36:6f:4c:f0:5d:
         cb:67:8e:1e:f1:aa:52:8d:e9:9e:0e:c7:89:dd:46:0e:a0:8b:
         22:d8:67:ac:ae:c8:cb:92:a9:33:db:80:81:75:33:f9:4d:3c:
         8a:6d:e6:4d:c6:6f:53:8e:87:92:e3:d3:81:33:24:f7:04:48:
         f0:6f:43:6b:47:22:a8:82:d9:a5:39:15:65:d5:9e:5b:24:74:
         d1:16:2e:43:38:66:2e:1d:86:09:44:3b:83:d3:00:b1:ab:b5:
         d6:be:bb:81:db:19:15:7a:76:82:cf:55:62:62:cc:79:ff:9a:
         8e:90:6b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:52:04 2025 by rpki-client