Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ccfc4eac-3bd9-3a2b-b245-875bb5c3a142.roa
File:                     ccfc4eac-3bd9-3a2b-b245-875bb5c3a142.roa (raw, json)
Hash identifier:          bFBt8RSZ1HmxEeXoXwexUYkOgthf5DKMcDmoj26xOcs=
Subject key identifier:   E9:F0:9E:BA:37:7F:9E:97:A1:3E:F0:58:3F:92:A7:50:A1:B0:8A:D2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584ACF710C4819C8F9434E147064
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ccfc4eac-3bd9-3a2b-b245-875bb5c3a142.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     13335
IP address blocks:        172.70.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:0c:48:19:c8:f9:43:4e:14:70:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=1ea1c8d7-5e98-4dda-8707-4f21ee46c115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:77:c7:76:e8:71:9c:4e:70:6b:71:1d:dc:09:
                    85:b1:aa:6a:a0:de:b4:cf:51:69:6c:6b:71:5a:51:
                    95:b1:18:3e:5c:4f:95:74:28:73:d6:bc:6e:eb:36:
                    74:8a:82:02:d8:0c:ee:27:9b:a2:1b:4c:bf:18:07:
                    b1:4d:eb:ff:e7:44:f9:6d:8b:4c:98:57:8c:6a:f3:
                    59:5d:03:52:dc:6b:dc:3a:dd:f7:19:02:df:38:95:
                    20:33:0c:a7:8f:28:77:a6:ae:80:db:79:52:e9:fd:
                    39:be:31:ee:12:63:87:75:6e:45:28:04:a5:b1:84:
                    9a:3a:19:6b:ab:f0:3d:8f:d6:dd:ac:68:84:c2:02:
                    b6:78:25:0b:41:e0:a1:3c:e6:2e:84:5e:9e:13:83:
                    91:a2:c7:1e:66:54:5f:b4:61:1f:92:5f:bc:e6:6c:
                    80:03:de:5c:d2:1c:ad:56:58:eb:3a:bb:ab:06:20:
                    1f:14:6a:89:56:c5:05:33:7c:82:28:d3:79:a2:e2:
                    0d:71:f4:3d:01:da:9b:ed:41:09:c2:9d:55:b2:c9:
                    aa:14:25:fc:3d:6a:13:62:6e:14:78:0a:b4:14:72:
                    0e:3a:a7:14:63:3b:81:d2:82:d2:b5:be:2d:99:34:
                    f3:57:89:07:0e:9e:e2:5c:db:51:1a:9f:bd:5f:67:
                    2c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F0:9E:BA:37:7F:9E:97:A1:3E:F0:58:3F:92:A7:50:A1:B0:8A:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ccfc4eac-3bd9-3a2b-b245-875bb5c3a142.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:93:7e:70:38:8a:e8:30:df:44:5f:34:0d:09:67:9e:29:05:
         3b:09:bf:57:ef:f9:ab:ed:37:91:6a:3f:0a:93:cc:e8:ed:c3:
         ab:47:30:2d:65:f4:70:9e:bd:05:b8:72:42:e6:f2:bf:36:17:
         ae:f3:b4:c5:ba:77:18:4a:39:c5:40:e8:53:cf:19:97:c2:32:
         23:2a:87:36:3e:72:d6:3e:3d:ca:5d:63:18:95:54:5a:2a:78:
         8d:fc:d6:1b:54:73:a0:18:ed:00:66:16:ba:b9:0d:9d:26:43:
         22:ef:aa:1e:f0:06:c9:9e:59:32:c8:39:e1:e7:d7:c5:c9:9d:
         be:26:c7:ec:d2:b2:bc:91:77:16:dc:87:6c:89:22:0b:7a:1d:
         0f:e3:e4:3d:bb:ea:17:55:dd:21:8b:7d:0b:72:ea:94:1e:3b:
         a8:91:a2:99:77:32:56:2a:33:d7:79:3e:3b:59:dc:66:64:d0:
         a8:fe:3f:61:ff:ab:f5:25:1f:ef:84:86:0c:51:ba:ea:a6:87:
         c3:95:35:d2:a3:88:72:9d:59:e9:39:b1:b4:54:2e:c9:d2:48:
         eb:cb:e3:7e:34:6e:be:ef:8b:38:1f:86:ca:55:b8:46:bb:b6:
         6d:57:55:40:5b:5f:fb:4a:cd:41:3b:c0:89:f6:d2:2a:8a:c5:
         ea:5c:57:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:20:02 2025 by rpki-client