Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ba4219e0-b418-3559-8238-61913c7c42c8.roa
File:                     ba4219e0-b418-3559-8238-61913c7c42c8.roa (raw, json)
Hash identifier:          Tp5UQxiwDGTiUOJXWgo25d0QUKonHm/B7XpOdb0AHGs=
Subject key identifier:   5B:98:D2:FA:27:BA:D1:52:8E:5D:D9:10:30:77:F1:F4:E1:A4:55:38
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584ACF7108880F719905069C4540
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ba4219e0-b418-3559-8238-61913c7c42c8.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     13335
IP address blocks:        172.70.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:08:88:0f:71:99:05:06:9c:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=34f41977-99dd-44df-b286-864146f09f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f4:50:13:2e:76:ec:4f:bc:9a:2f:cd:f6:23:
                    b9:72:f0:43:71:09:55:f6:56:9a:8c:4c:e9:b2:3e:
                    58:49:96:38:28:0e:42:ce:ae:45:15:05:ec:ac:9e:
                    28:77:28:f0:85:a5:6a:c3:cb:56:42:32:78:9b:6f:
                    ad:50:f0:63:2d:fc:c8:2a:21:fc:13:e7:0d:4a:5e:
                    19:35:72:b3:e0:e9:19:fd:7e:2c:b2:56:46:60:a5:
                    ce:f6:bd:94:c3:a9:3a:68:b2:b8:a3:53:09:80:c5:
                    95:58:f3:d5:df:81:2f:23:5d:f6:d1:f3:c1:56:6e:
                    c1:4f:06:3e:2d:a5:a9:6f:a8:63:67:1c:f9:f8:2c:
                    18:db:8d:b9:c9:70:1c:12:30:d4:d4:d4:61:64:99:
                    2e:82:de:5f:d0:ee:a0:c9:29:9e:aa:9f:90:98:d6:
                    92:72:f4:79:5e:ab:03:9d:78:2c:6e:80:b1:f0:f3:
                    7b:4c:e6:bd:f3:9f:28:95:22:28:23:66:58:bc:5c:
                    87:52:29:95:45:bb:44:92:17:e3:76:d3:8e:ee:b4:
                    c5:2a:4e:7a:25:b2:bf:c3:67:9a:26:1e:25:5b:c1:
                    8f:aa:c7:02:4b:06:81:76:32:3f:cf:68:04:ef:f8:
                    a4:12:41:64:2f:10:19:15:52:1f:5b:b4:5f:02:23:
                    85:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:98:D2:FA:27:BA:D1:52:8E:5D:D9:10:30:77:F1:F4:E1:A4:55:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ba4219e0-b418-3559-8238-61913c7c42c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:b3:81:78:73:da:13:4c:d6:ed:34:8e:cc:89:b9:53:b2:6f:
         b4:5d:2f:d7:7f:7f:e5:e6:44:ad:e3:48:5f:1b:ed:d9:59:0f:
         2a:b2:93:ee:d4:07:82:2a:a9:ab:b6:95:4e:8d:61:97:28:83:
         cd:c7:b5:e6:4e:a6:05:9c:d6:f4:09:0b:bd:c7:02:d0:1e:e5:
         3a:f1:e9:20:93:69:32:7d:19:05:c3:e2:c1:ab:fe:31:d9:53:
         c1:d8:e5:4a:27:a8:ba:07:ea:22:bb:d8:ec:43:72:3d:92:e6:
         ca:c3:5c:da:27:50:64:01:d2:26:1c:d2:a3:c4:b9:36:e6:67:
         59:0b:dd:6d:d7:21:8b:b7:e8:06:6b:d7:65:c5:57:d0:ad:bf:
         31:f5:41:ba:2c:a6:51:38:6b:68:07:f2:e3:fa:de:99:eb:78:
         79:f1:c3:9c:ce:c9:c8:f5:b1:d4:dc:b6:b6:61:a5:31:79:49:
         d0:04:7b:6c:56:08:1a:bf:66:42:1b:6a:96:3a:68:84:60:49:
         4c:fd:94:5c:33:01:80:19:21:e4:57:60:69:b9:41:1c:0a:76:
         d3:23:44:02:2f:53:c5:76:32:d4:48:59:cc:ca:24:8d:9d:bf:
         a2:13:16:b2:54:f7:df:c9:d9:33:dd:c0:fe:c0:c0:6c:74:1c:
         de:a0:21:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQiID3GZBQacRUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk
MzRmNDE5NzctOTlkZC00NGRmLWIyODYtODY0MTQ2ZjA5ZjYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvRQEy527E+8mi/N9iO5cvBDcQlV9laajEzp
sj5YSZY4KA5Czq5FFQXsrJ4odyjwhaVqw8tWQjJ4m2+tUPBjLfzIKiH8E+cNSl4Z
NXKz4OkZ/X4sslZGYKXO9r2Uw6k6aLK4o1MJgMWVWPPV34EvI1320fPBVm7BTwY+
LaWpb6hjZxz5+CwY2425yXAcEjDU1NRhZJkugt5f0O6gySmeqp+QmNaScvR5XqsD
nXgsboCx8PN7TOa9858olSIoI2ZYvFyHUimVRbtEkhfjdtOO7rTFKk56JbK/w2ea
Jh4lW8GPqscCSwaBdjI/z2gE7/ikEkFkLxAZFVIfW7RfAiOFnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFuY0vonutFSjl3ZEDB38fThpFU4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmE0MjE5ZTAtYjQxOC0z
NTU5LTgyMzgtNjE5MTNjN2M0MmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC2zgXhz2hNM1u00jsyJuVOyb7RdL9d/f+XmRK3jSF8b7dlZDyqyk+7U
B4Iqqau2lU6NYZcog83HteZOpgWc1vQJC73HAtAe5Trx6SCTaTJ9GQXD4sGr/jHZ
U8HY5UonqLoH6iK72OxDcj2S5srDXNonUGQB0iYc0qPEuTbmZ1kL3W3XIYu36AZr
12XFV9CtvzH1QbosplE4a2gH8uP63pnreHnxw5zOycj1sdTctrZhpTF5SdAEe2xW
CBq/ZkIbapY6aIRgSUz9lFwzAYAZIeRXYGm5QRwKdtMjRAIvU8V2MtRIWczKJI2d
v6ITFrJU99/J2TPdwP7AwGx0HN6gITA=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:08 2025 by rpki-client