Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efcfff4d-2c9a-349b-aecd-c4c3910dce56.roa
File:                     efcfff4d-2c9a-349b-aecd-c4c3910dce56.roa (raw, json)
Hash identifier:          qNO9J2ZGkHNiqHNWZMDOMHuHV1gm4E3UPgiFfMEs9Tw=
Subject key identifier:   BA:62:64:95:A2:C7:92:2B:B8:01:0F:EE:F3:88:EF:72:40:FD:B9:F5
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849F01A952588C34FC7E8ED3900
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efcfff4d-2c9a-349b-aecd-c4c3910dce56.roa
Signing time:             Thu 22 May 2025 13:01:05 +0000
ROA not before:           Thu 22 May 2025 13:01:05 +0000
ROA not after:            Wed 20 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        172.70.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:1a:95:25:88:c3:4f:c7:e8:ed:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 22 13:01:05 2025 GMT
            Not After : Aug 20 13:01:05 2025 GMT
        Subject: CN=c16c6387-4769-42f0-b46a-e4cc7431ce06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f6:c1:17:c3:ae:c9:7b:34:71:61:69:3c:90:
                    26:ce:2b:26:c5:45:d1:fb:db:b2:e0:4c:a7:6d:56:
                    c2:18:8a:29:a5:ff:de:35:6b:b3:b5:69:90:f0:cd:
                    22:71:38:6b:ad:e2:fa:26:f3:99:ed:8f:da:e3:52:
                    4b:09:f9:b7:b2:e9:a4:b0:a9:2f:02:5d:80:07:e0:
                    7b:34:a8:91:22:74:bd:2a:4b:65:21:3f:97:54:5c:
                    e8:94:db:ed:a4:57:2d:2e:d9:72:d2:71:b5:46:db:
                    0a:9c:8b:68:5b:3d:45:67:3e:5d:47:6a:12:fb:33:
                    da:0e:60:3f:2d:9c:8f:76:61:81:89:29:9a:c6:0c:
                    69:8a:fc:cb:6f:7e:1d:71:bb:b1:35:71:21:72:4f:
                    ef:f9:7b:c2:e0:c8:0a:30:d9:76:2e:bd:02:31:0f:
                    61:1e:e8:28:10:23:24:78:c5:3f:38:69:ec:67:23:
                    4a:47:16:40:16:9a:ad:42:5e:a4:6f:7f:f7:88:00:
                    56:1a:9a:f8:a9:c9:83:7c:ce:e6:c4:4b:c4:90:82:
                    e5:f5:2e:e7:73:7f:77:25:60:8a:be:56:6c:97:7b:
                    99:85:5b:4f:e4:03:c2:cf:e1:92:d7:b2:33:16:ba:
                    02:d0:60:04:bd:6d:1d:f7:fb:49:3c:52:59:b0:2e:
                    dd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:62:64:95:A2:C7:92:2B:B8:01:0F:EE:F3:88:EF:72:40:FD:B9:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efcfff4d-2c9a-349b-aecd-c4c3910dce56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:af:70:e3:01:8a:50:31:93:b0:ea:a1:98:cf:8c:38:52:97:
         48:16:90:37:f3:2c:91:b9:f6:d8:46:76:77:75:32:b2:7d:99:
         d1:7f:39:bc:ad:e5:9d:71:58:5b:1e:34:b0:e7:c0:5f:30:d1:
         c4:cd:c2:c5:eb:ec:72:7c:ed:95:96:74:56:72:f9:a3:34:be:
         39:4d:5d:95:39:74:e8:a7:f7:04:ec:52:7b:f0:a2:ec:d2:14:
         15:a5:2c:ea:69:e2:8d:f6:0e:2d:56:8d:b6:cc:80:ea:15:88:
         79:18:77:7a:46:c0:bc:31:be:81:36:c2:8b:70:12:08:b1:67:
         d0:4e:35:ee:ea:99:46:b9:5d:b7:34:35:e3:32:ba:4b:d7:bd:
         fa:b4:94:c9:b6:7d:75:2a:4c:27:7d:9b:f0:01:76:30:19:6a:
         f0:64:54:fc:8b:c8:f3:8b:85:31:cf:4f:ed:01:6a:c5:66:e7:
         bb:97:f0:28:5a:fa:86:41:4c:ae:35:89:6c:a8:ba:88:4f:72:
         bd:bf:94:c7:b1:6e:5c:21:16:0d:6b:db:85:fe:ca:62:01:7b:
         25:2c:0e:ba:65:55:6d:39:30:fa:47:c9:df:e5:f7:23:bf:da:
         b2:bd:83:d6:6e:e2:04:29:35:ae:d8:5b:5f:4b:0d:14:26:e3:
         2d:31:8e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:42:56 2025 by rpki-client