Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00434dbe-934c-3458-968b-e11bc6f1ad39.roa
File:                     00434dbe-934c-3458-968b-e11bc6f1ad39.roa (raw, json)
Hash identifier:          +AQanMZicL2pWo3MZthaarCjC3m5IB0cpSmMR6TpezQ=
Subject key identifier:   A8:63:71:7A:FF:D2:1D:39:47:2C:46:07:DD:F5:3C:9D:29:2E:EA:18
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F19FCFD3724D12D81E8F58440
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00434dbe-934c-3458-968b-e11bc6f1ad39.roa
Signing time:             Tue 08 Sep 2026 01:00:12 +0000
ROA not before:           Tue 08 Sep 2026 01:00:12 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        172.68.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:fc:fd:37:24:d1:2d:81:e8:f5:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep  8 01:00:12 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=25442b63-c96e-4021-81c6-59e496ceaddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:95:87:40:c4:a9:98:e9:6a:32:4d:77:f1:55:
                    9e:27:cf:ae:02:be:18:c9:c1:e6:ad:98:01:b3:0c:
                    c2:06:93:31:d6:61:6a:9d:83:64:0a:db:22:b0:49:
                    88:42:24:61:9f:77:93:be:50:dd:f9:0b:07:15:10:
                    40:86:5b:7a:a6:b9:0b:a6:7e:c4:1f:43:2d:a1:b7:
                    07:a1:ba:49:fb:c8:19:f3:eb:ef:7c:7a:2f:34:3a:
                    62:51:90:60:bb:71:b7:56:00:48:e0:64:c4:c5:02:
                    03:aa:5d:f8:30:38:da:f9:cd:c2:84:2d:f4:a3:6b:
                    47:c0:24:08:6d:f7:79:2c:18:3d:aa:52:19:a6:29:
                    89:a8:d3:ab:db:19:77:02:4b:95:d6:e0:86:75:dc:
                    f1:3e:2c:92:15:fa:13:f2:fd:00:48:41:fb:39:8e:
                    24:b5:0b:8e:12:23:21:1c:01:83:07:fd:ea:4d:44:
                    3e:68:5f:71:80:81:b6:ef:96:4a:01:61:11:e0:87:
                    80:4e:b7:98:a0:2c:95:d8:84:0b:6d:67:ba:52:77:
                    1f:f7:45:6b:9f:09:29:0f:c6:ce:cd:0a:4d:16:da:
                    a6:ce:57:16:f6:ba:33:4b:34:8f:42:2b:cd:4c:29:
                    e5:d2:0a:72:33:d8:00:00:df:97:4e:92:31:da:04:
                    49:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:63:71:7A:FF:D2:1D:39:47:2C:46:07:DD:F5:3C:9D:29:2E:EA:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00434dbe-934c-3458-968b-e11bc6f1ad39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:8e:d7:1f:9a:6a:0e:0c:5b:34:83:2c:99:ea:13:a2:d1:c5:
         0e:47:3d:42:a3:35:42:9c:d2:19:e7:c0:bf:5c:df:08:72:4d:
         22:58:95:f0:0d:05:1f:81:23:ca:b9:8e:83:c6:f1:44:2a:70:
         1f:41:39:3e:73:17:aa:dd:1d:80:5d:7e:47:70:7b:c3:63:51:
         d8:30:bc:8f:da:a4:f4:58:8e:17:ab:b7:3b:cb:07:85:34:0a:
         da:bd:39:91:05:e7:f3:d9:3d:63:66:06:37:9f:2f:23:10:68:
         73:4a:1d:32:32:5f:ea:63:98:c7:a0:8f:c1:fc:a4:15:e5:0e:
         88:9e:7d:7e:30:bd:f6:ba:53:11:19:22:05:6d:23:ab:a5:17:
         f5:92:8e:c2:e6:c8:97:4a:6e:50:3a:2c:6a:c3:5b:b3:d9:ce:
         fa:23:4c:72:63:1d:bd:2b:22:14:e8:76:4c:19:14:6f:9d:5a:
         34:87:73:55:c3:10:14:4e:d8:24:54:07:d5:d9:59:7d:26:63:
         30:b8:19:45:38:67:72:48:c2:fb:9e:d1:40:bf:6e:d5:00:36:
         9b:ff:4c:35:e3:d6:1b:f9:6f:c7:ef:3a:7e:9a:01:89:2c:a1:
         f3:fd:9e:46:be:d0:8b:e9:8f:e5:be:7e:56:fa:2f:a4:dd:5f:
         eb:ea:c7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:06:58 2026 by rpki-client