Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/023c2728-c60b-35c6-bebd-293d9fa56f1a.roa
File:                     023c2728-c60b-35c6-bebd-293d9fa56f1a.roa (raw, json)
Hash identifier:          7V6Zczcqgoz3UXBxL6bmccWpgtqC9dXrqOaxTOhN08Y=
Subject key identifier:   E3:24:A1:2E:17:58:19:72:EA:9B:74:44:6A:9A:74:87:23:E8:B2:04
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AD0D64BA47445A0126F5D6340
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/023c2728-c60b-35c6-bebd-293d9fa56f1a.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     13335
IP address blocks:        172.70.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:4b:a4:74:45:a0:12:6f:5d:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=00c59046-6c30-4909-b11b-10e4cfac711a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:20:ea:a3:26:4e:01:55:43:14:1e:c6:bf:9a:
                    88:cd:a8:12:84:6a:2e:a5:38:4b:58:21:ac:73:99:
                    bf:f9:ad:73:ca:2b:5b:b1:03:b9:a8:6d:9c:89:31:
                    07:3e:36:27:00:77:6e:10:ea:c5:42:a0:6b:29:2a:
                    b2:bc:f5:98:8d:b7:63:be:8a:53:ed:c6:d1:7c:45:
                    64:99:39:c2:a0:a4:c9:45:f9:96:e0:7f:57:8f:01:
                    38:99:29:8b:02:22:e7:81:2a:0b:25:f0:2c:a9:5c:
                    0f:56:07:fd:1e:3d:fa:c4:91:99:fd:ae:6e:ea:18:
                    e0:c8:68:66:f8:76:13:90:49:f1:a7:ff:9e:d7:cf:
                    d3:8e:3d:dc:4b:57:f3:3d:90:08:2d:51:b1:73:3b:
                    c2:01:1b:7a:6b:ed:63:c9:ce:b4:db:a7:32:86:cf:
                    97:e8:d8:47:06:33:95:7a:02:64:1f:bc:7c:a7:df:
                    dd:a9:c5:d8:f3:96:9a:af:87:a1:ca:f2:3c:20:f4:
                    69:82:d4:c8:fe:1c:cd:00:54:b8:48:9a:b4:e3:39:
                    14:13:58:4a:15:02:a9:97:ab:2a:e2:42:98:99:61:
                    f4:16:f8:46:b6:6e:1b:12:8a:06:dd:19:56:b4:aa:
                    47:d2:c9:1f:75:8a:18:8a:79:b5:35:08:60:8a:f0:
                    d8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:24:A1:2E:17:58:19:72:EA:9B:74:44:6A:9A:74:87:23:E8:B2:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/023c2728-c60b-35c6-bebd-293d9fa56f1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:04:47:ae:95:5b:cf:c6:1b:11:52:50:31:e6:62:2f:dc:de:
         27:79:dd:34:33:cb:b0:c5:02:7d:e6:30:47:be:79:a3:52:0a:
         cd:63:44:00:01:0f:8f:24:4a:f6:af:ed:ad:6f:1f:a8:b7:17:
         bf:5e:13:02:ca:d1:a6:19:00:be:08:d4:48:cc:b6:24:8d:fa:
         d2:e5:7a:8d:98:46:81:30:7e:57:33:c3:a1:74:8c:31:de:fb:
         87:9a:f1:f1:01:37:ea:73:5c:0b:a2:79:5b:77:c7:2b:97:4f:
         8e:e6:d6:4a:99:22:cb:dd:3b:30:8a:31:6d:f1:57:98:6f:3f:
         28:34:fa:c1:22:bc:d6:ca:28:02:f8:60:ad:ca:a3:c1:02:eb:
         9c:d5:72:09:46:c0:b1:a2:a3:db:b7:e1:5d:d0:4f:05:a0:23:
         dd:1b:b4:b9:57:d1:34:11:10:40:a4:d2:83:15:34:82:36:d1:
         c0:90:66:e7:8c:b3:22:1b:9e:a9:6b:db:12:81:b2:a7:e1:40:
         bb:7a:f7:4a:b2:90:68:26:e3:21:e8:78:fc:b7:89:bd:eb:9f:
         4c:22:cb:a7:52:38:c6:61:d7:3f:f6:e7:48:50:8d:cf:f6:d2:
         e4:dd:b6:b6:19:39:50:b8:8a:f0:f8:49:dc:96:20:cd:ba:b0:
         33:19:2e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:09:00 2025 by rpki-client