Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fad8eb74-8eec-3def-9ac6-43f278bbf8b9.roa
File:                     fad8eb74-8eec-3def-9ac6-43f278bbf8b9.roa (raw, json)
Hash identifier:          SCNM4TUPzxCLNggtRyLaQREqXyrlNgiJhzdd7fRGt/Q=
Subject key identifier:   BB:09:AD:F9:02:2D:45:25:2A:AE:2D:7B:A5:A7:F6:43:74:AA:48:E0
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E654FCCD6ED9F9618A079EC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fad8eb74-8eec-3def-9ac6-43f278bbf8b9.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     13335
IP address blocks:        172.70.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:fc:cd:6e:d9:f9:61:8a:07:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=86414fcf-75f0-4ae2-b328-d58d5c89d4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:53:43:f0:aa:42:7d:ab:9b:12:7b:cc:83:20:
                    2f:f1:56:38:21:bc:c7:3c:e0:91:de:92:bf:fe:cf:
                    ef:1a:3c:ef:7f:f7:8d:37:37:ab:48:80:37:32:5e:
                    de:4c:46:93:47:b9:ff:4c:89:30:01:3b:e6:4c:de:
                    63:94:b9:05:da:ee:e2:a9:a8:3f:06:ae:77:9e:31:
                    01:4d:8a:f3:23:56:39:d2:3a:d5:cd:c3:6d:46:93:
                    6e:bd:de:49:65:46:a0:e7:16:ea:a0:cf:1c:d8:fe:
                    20:cb:39:33:ef:31:da:21:0a:f5:26:6f:b9:8f:87:
                    4b:25:22:bc:44:10:e6:61:92:d7:7b:b6:e1:a2:12:
                    e8:1a:5b:ff:03:f3:d2:de:52:26:aa:9e:dc:7a:c4:
                    32:ea:84:71:37:ce:6f:07:9e:fa:0e:0b:ab:f9:d5:
                    7e:9f:06:cd:4a:df:38:78:43:6f:87:e6:0f:84:de:
                    ff:c2:87:2b:84:0f:77:50:72:c1:10:eb:df:17:c3:
                    ab:4f:59:de:51:41:21:10:f2:5b:72:78:02:f1:74:
                    62:ae:e8:09:e7:f1:64:04:6c:fa:dd:38:cb:66:fd:
                    fc:49:77:ba:12:c7:ee:dd:57:41:da:00:58:1d:5a:
                    d8:01:b7:d6:14:14:ad:b3:90:b2:18:26:ea:04:eb:
                    72:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:09:AD:F9:02:2D:45:25:2A:AE:2D:7B:A5:A7:F6:43:74:AA:48:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fad8eb74-8eec-3def-9ac6-43f278bbf8b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:bb:47:a8:ea:07:e8:e7:00:8a:98:b7:b1:32:e8:2f:20:5f:
         80:6c:6d:04:11:bd:23:f5:f7:34:7e:76:f9:11:59:cd:79:82:
         90:3d:95:c1:41:e1:dc:bf:67:d3:e0:ce:89:c0:35:0a:87:f6:
         4c:1c:36:0b:d5:07:75:e8:11:7c:0d:76:47:89:da:5c:46:78:
         9d:41:dc:8d:0f:25:88:6c:f8:a5:88:9e:61:53:03:a9:68:6b:
         f3:47:b1:e9:f8:82:6d:75:a8:04:70:0b:01:70:02:32:67:ea:
         3f:19:6f:43:01:a1:0f:18:e4:88:fc:7f:3a:69:fa:8e:ce:f3:
         bb:a7:fa:21:26:df:71:3a:8f:f2:a7:0d:ec:4d:d9:84:a9:50:
         83:c3:39:78:56:f8:89:0b:89:e9:67:83:78:00:83:bd:78:aa:
         02:b9:5f:7d:aa:7a:b6:61:01:88:9d:83:eb:5a:fd:d4:25:71:
         e4:67:28:54:ce:c7:0d:d0:df:c8:75:16:8f:8b:19:46:67:9e:
         bb:1d:05:98:ed:9b:3c:55:5f:a3:5a:49:be:bc:7f:1f:fd:c2:
         97:be:5f:9c:fb:80:f5:76:ed:dd:ec:ce:f7:8b:5b:b8:ec:53:
         bf:86:dc:1d:0f:35:99:c1:ad:be:8b:b4:34:b5:fa:28:1b:42:
         22:e2:a2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:37:17 2025 by rpki-client