Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ee29fa17-d24a-39ed-a0f8-365701ccaa48.roa
File:                     ee29fa17-d24a-39ed-a0f8-365701ccaa48.roa (raw, json)
Hash identifier:          UfWu2eMCFuIbx/leWsohCBLsjgA0RVsO7b5ouLrocuA=
Subject key identifier:   FB:9B:5F:91:8A:72:5D:CF:83:2D:10:96:75:DA:F2:7F:19:11:4D:8D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584910E16E5D9BC2E5C8FB8797C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ee29fa17-d24a-39ed-a0f8-365701ccaa48.roa
Signing time:             Mon 03 Mar 2025 14:00:53 +0000
ROA not before:           Mon 03 Mar 2025 14:00:53 +0000
ROA not after:            Sun 01 Jun 2025 13:00:53 +0000
asID:                     13335
IP address blocks:        172.70.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:10:e1:6e:5d:9b:c2:e5:c8:fb:87:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  3 14:00:53 2025 GMT
            Not After : Jun  1 13:00:53 2025 GMT
        Subject: CN=0f58c20b-e620-4e6b-ab6e-b8566ad51014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dc:5c:1b:0a:cd:13:3d:d2:e1:f7:5c:d0:fd:
                    5d:b9:6b:8b:dd:63:24:78:22:a4:da:d7:d0:88:e7:
                    cc:c3:d9:cd:60:d0:1c:98:f8:32:ee:a4:7f:51:20:
                    0f:aa:f5:ce:86:53:5c:ee:d2:ca:c5:88:1b:67:3d:
                    84:15:c6:e9:e6:7f:6e:24:c7:c9:a7:94:bf:78:1d:
                    b3:c5:89:99:b7:e3:99:67:3d:52:5d:7d:88:45:20:
                    e7:f0:54:b6:31:a9:ff:00:3d:24:1e:19:fe:7b:47:
                    45:b3:11:9d:9b:d2:c8:5a:63:65:42:99:f3:1f:67:
                    22:f9:31:c9:f0:c5:14:2b:9c:b8:33:3f:a9:a9:83:
                    12:dd:9d:69:89:4c:1b:2c:91:46:a0:68:f5:6b:c7:
                    e8:28:41:75:26:a3:c5:6d:15:84:3a:0a:e9:d2:0e:
                    b8:e1:62:b1:9f:d2:1d:88:5c:c8:5d:c9:c1:1d:38:
                    89:b4:5e:d8:03:82:59:86:d6:be:fc:ed:b7:de:62:
                    97:24:6a:3b:91:ce:a0:dc:55:90:de:8e:9e:bc:be:
                    e9:70:57:71:c9:c5:ff:d6:a8:d3:15:31:91:e4:9f:
                    e3:ca:69:6b:5f:c3:9b:10:2f:aa:a8:fb:32:99:2e:
                    44:1f:b2:22:8a:68:7d:c2:c2:4f:f3:87:69:95:0c:
                    eb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9B:5F:91:8A:72:5D:CF:83:2D:10:96:75:DA:F2:7F:19:11:4D:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ee29fa17-d24a-39ed-a0f8-365701ccaa48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:e8:30:c2:47:a0:7f:c6:7d:95:6d:13:02:a2:c7:90:9b:09:
         c8:25:36:56:9c:b4:2b:51:ca:02:77:db:95:38:d1:c5:01:06:
         32:8e:fb:ff:d4:92:20:cc:42:83:b5:75:82:44:39:ea:38:b1:
         e0:b1:24:ba:f5:28:57:ec:ae:bb:27:6d:a2:1d:ec:f5:3b:a5:
         72:fb:01:3b:c6:d2:04:f8:81:9d:8d:8f:9a:53:47:e5:6d:f2:
         ca:a7:b0:b6:0f:41:62:e3:d3:ce:57:fe:69:86:4c:9c:27:4c:
         08:60:5a:df:1e:25:38:d0:99:1d:0f:b7:7d:e3:2c:83:c0:d0:
         d5:3f:15:5e:9e:59:31:ad:50:bc:ea:f8:3c:d5:35:86:e2:f3:
         76:43:90:90:eb:06:6d:a9:52:4e:05:39:02:56:2f:46:88:9b:
         47:5c:2b:21:ac:47:ac:4e:0c:55:f7:89:af:e1:44:c1:c5:1b:
         7c:f8:79:fe:f9:be:e2:17:a4:5c:8a:c8:8a:51:5a:ad:2e:b4:
         9e:a5:fe:40:37:4f:aa:65:03:7e:7a:26:3a:2f:a6:71:d4:87:
         2d:92:5d:8c:42:cf:8e:a7:ba:53:57:d8:83:89:8b:8e:dd:fc:
         4f:d0:00:60:2d:0f:c8:ee:e7:2a:00:b7:db:05:03:1c:3e:0e:
         f3:14:82:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:44:04 2025 by rpki-client