Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cec2e359-1c23-30f6-8a83-2be8581e0783.roa
File:                     cec2e359-1c23-30f6-8a83-2be8581e0783.roa (raw, json)
Hash identifier:          YuRlAOv5tnsKKrI2q3/mTeDZF3t1w7TBU7+UklJ7EN8=
Subject key identifier:   E9:33:FD:19:93:71:0F:8A:EF:09:DF:32:B3:84:0A:4B:61:0F:97:2E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849F01A8E9E4604925E573E5900
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cec2e359-1c23-30f6-8a83-2be8581e0783.roa
Signing time:             Thu 22 May 2025 13:01:05 +0000
ROA not before:           Thu 22 May 2025 13:01:05 +0000
ROA not after:            Wed 20 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.71.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:1a:8e:9e:46:04:92:5e:57:3e:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 22 13:01:05 2025 GMT
            Not After : Aug 20 13:01:05 2025 GMT
        Subject: CN=63444bf8-8bef-4dc9-a541-d43e454f0f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:72:cf:b8:12:a6:a6:08:39:1d:d3:17:73:51:
                    0d:b4:c8:ce:06:a8:2e:d2:a5:af:42:8a:71:6f:d1:
                    9e:8a:19:cc:60:02:c8:05:de:be:fb:2b:fa:c7:43:
                    1c:f0:5a:83:88:fd:d1:48:3a:c6:ad:60:e4:e3:33:
                    a9:80:24:41:b6:4b:36:47:81:b7:38:9c:41:96:74:
                    ea:3b:ff:a6:39:5e:f0:ab:c0:94:89:b0:82:21:aa:
                    d3:c8:2d:79:85:b6:bb:fc:d6:cf:7e:f2:45:8e:5e:
                    f6:b9:4a:c1:e8:50:20:fa:98:71:83:2b:1b:3e:cb:
                    2f:e2:5c:81:fd:0a:d8:18:9b:f8:59:d3:66:ab:e3:
                    08:34:09:60:be:77:00:f9:a1:06:de:52:49:43:1a:
                    c8:89:7d:9f:d1:1c:69:f6:a8:71:e4:71:a4:b7:76:
                    5f:d9:6c:77:da:84:1b:68:06:d4:d7:e8:eb:b9:8d:
                    e1:8a:be:2d:f8:28:87:bb:61:bb:50:10:b7:3c:34:
                    5d:5c:f3:a6:5b:4b:63:6b:27:a3:93:a3:7d:e9:b9:
                    15:5e:5c:74:6b:f4:9d:c2:fa:3c:16:fa:9d:de:e6:
                    ee:7f:d8:35:66:13:ee:2d:1c:e8:56:7e:86:e5:f2:
                    0c:ca:49:7e:8d:65:ea:1e:3a:cd:29:f4:0a:d0:96:
                    c0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:33:FD:19:93:71:0F:8A:EF:09:DF:32:B3:84:0A:4B:61:0F:97:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cec2e359-1c23-30f6-8a83-2be8581e0783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:1b:93:b3:d1:0c:8c:74:a6:e7:ae:00:81:ff:c3:d6:9c:5e:
         dd:02:97:34:d1:e7:35:0f:a5:ae:1c:40:85:48:16:27:3c:dd:
         aa:56:14:18:e7:f6:7a:33:e3:4c:89:4e:27:2f:ac:84:c9:9b:
         d9:2a:12:d7:dc:09:7b:0c:f8:ee:b7:ca:e9:de:77:84:c0:47:
         04:65:17:00:ba:8e:09:ac:c6:63:33:0a:20:25:b0:5d:2e:37:
         f1:1a:57:a1:ac:e0:a1:0e:c4:40:55:84:03:55:17:2c:c3:0a:
         d1:80:60:3f:e2:11:be:36:2f:83:5f:29:80:b7:18:98:dc:08:
         5b:4e:f7:a5:d7:5d:7d:35:2e:0c:e3:46:ee:27:00:fa:bd:b3:
         44:ec:c9:54:46:f3:4c:fd:cc:84:cf:b5:3f:5d:16:52:03:c7:
         b0:57:c3:f1:4f:86:59:5b:2f:17:40:c2:71:69:d3:f2:6c:60:
         19:c1:78:bf:d8:39:da:42:ed:17:10:95:25:09:f2:b5:eb:d7:
         a3:99:36:8f:cb:7c:16:30:cc:ee:62:74:31:1d:9d:59:de:71:
         e9:b9:43:ec:26:2b:ef:4c:28:6d:b9:5d:6a:26:d1:61:59:bd:
         9e:34:2b:67:6a:3c:50:04:76:6e:a3:50:a7:25:b5:dc:b0:bc:
         38:8b:a5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:52:04 2025 by rpki-client