Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bba62409-0d30-3c99-91d2-8eb89a254279.roa
File:                     bba62409-0d30-3c99-91d2-8eb89a254279.roa (raw, json)
Hash identifier:          iak83HcQ56ZGFiMnVkeWi3Myla/dLUAbZkPbEpFhNig=
Subject key identifier:   FD:56:49:8B:64:85:DA:DD:D5:34:49:DC:C0:B4:3D:8D:5A:98:A3:3D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849F01A96985C7D1A5CA64D0200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bba62409-0d30-3c99-91d2-8eb89a254279.roa
Signing time:             Thu 22 May 2025 13:01:05 +0000
ROA not before:           Thu 22 May 2025 13:01:05 +0000
ROA not after:            Wed 20 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.70.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:1a:96:98:5c:7d:1a:5c:a6:4d:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 22 13:01:05 2025 GMT
            Not After : Aug 20 13:01:05 2025 GMT
        Subject: CN=7ecfd748-cbaa-44db-8615-6fb5a79ebdff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b1:d2:fd:83:a4:07:64:85:63:20:fb:df:e2:
                    64:de:72:dc:9b:30:bc:09:dc:14:5e:29:50:25:5f:
                    53:33:0a:89:d8:01:61:78:33:98:eb:c5:58:5d:fa:
                    c0:2f:56:ba:1b:3d:49:74:20:bd:90:7c:13:e7:d7:
                    04:d7:81:3a:62:75:2d:0f:eb:ac:aa:74:f5:d3:b0:
                    7a:67:5b:8b:64:b5:ea:17:19:91:28:0a:82:9b:93:
                    fe:35:c0:ea:2e:aa:15:97:c2:cc:b8:d3:f4:43:a2:
                    ee:8e:74:07:f8:2c:58:43:86:ab:9e:79:78:5e:5e:
                    fe:4c:0e:47:88:bd:2c:d2:82:fa:54:f4:0c:8b:8a:
                    76:4a:13:8c:9a:7d:b0:ae:9b:b7:a5:f8:5f:d1:35:
                    f4:d3:19:2b:4a:8f:29:74:58:14:1d:a3:ab:82:f7:
                    8f:10:77:d8:23:83:b0:ae:c6:f0:d1:76:c8:0f:31:
                    95:0e:06:af:4e:56:6d:df:9b:39:69:84:21:de:4a:
                    6b:cf:60:39:ed:05:9f:a7:4e:f0:39:14:d9:8f:1e:
                    f2:79:d1:9e:b7:e1:6c:d2:23:02:2d:88:60:73:db:
                    c8:1d:3f:fe:f5:0b:d9:a6:ee:0b:ce:66:98:11:10:
                    da:90:ca:76:0f:d6:fb:f9:90:11:1e:f8:00:8f:c9:
                    dc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:56:49:8B:64:85:DA:DD:D5:34:49:DC:C0:B4:3D:8D:5A:98:A3:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bba62409-0d30-3c99-91d2-8eb89a254279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:c5:e2:6f:c3:6d:e0:34:53:cc:3f:1a:2a:47:75:57:22:bb:
         22:9a:f7:a7:68:e7:23:fb:a6:14:f5:24:19:af:59:80:f6:66:
         60:9c:39:6d:e3:e2:e1:34:8b:d5:2c:06:26:21:fa:5e:e3:c7:
         5a:6e:24:33:ad:2b:82:7d:1f:23:1f:dd:13:a4:27:a0:59:59:
         69:e8:bc:89:95:a4:ba:9b:1d:fb:2f:1f:f5:35:6d:16:9f:9e:
         5f:38:5b:5a:b9:f0:f0:b2:5b:3c:52:94:28:5a:b9:99:85:cd:
         c5:36:9e:4e:99:b8:80:12:a9:1a:a2:ae:bb:05:f2:bc:85:ee:
         d4:2b:05:bb:ab:b4:58:be:f1:0c:a9:12:bf:98:88:3c:3e:8d:
         4e:7f:10:cd:95:f2:85:1b:6a:2c:d5:45:ad:97:e4:cf:e4:0d:
         33:0f:36:03:11:a1:28:93:62:12:53:87:4b:30:1f:40:fe:a5:
         33:7d:5d:4c:ad:85:6c:12:41:cf:59:42:a1:03:4a:a0:3d:78:
         a4:c1:b0:dd:f3:31:74:48:b0:4f:af:57:ae:70:be:2d:78:ff:
         56:9f:1f:61:08:86:c3:9d:06:0e:12:40:e0:fe:c7:97:3f:0e:
         f4:83:ba:66:fd:17:93:f6:b1:1a:f6:1c:fa:f3:d6:17:11:65:
         7f:31:d1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:57:45 2025 by rpki-client