Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/11b89bd0-db2d-35b1-82f1-0bc39d3ff2f6.roa
File:                     11b89bd0-db2d-35b1-82f1-0bc39d3ff2f6.roa (raw, json)
Hash identifier:          Gm7tw5H0mZ0MswH1tuCgNTpGJu6sZW0BaGomrPuNMLI=
Subject key identifier:   0E:88:BC:55:04:E1:3E:AF:74:A2:67:D6:6A:25:A3:AD:3D:7E:F2:D5
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4AEF5A0129DC015F9640F220
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/11b89bd0-db2d-35b1-82f1-0bc39d3ff2f6.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        172.64.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:5a:01:29:dc:01:5f:96:40:f2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=52a9a09c-dad3-433b-a135-d5054175fd81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:70:8e:68:90:2e:46:76:74:da:b3:46:92:3d:
                    18:a3:6a:ed:6d:0c:8f:3f:8a:76:41:39:9b:76:87:
                    60:bd:be:a9:b1:c4:2d:b5:e8:f2:81:79:e5:65:22:
                    c7:e1:05:45:50:12:e9:57:0c:f4:61:56:a2:c8:21:
                    ad:d3:70:b4:80:2b:f9:b6:72:fa:d7:7f:0a:a4:38:
                    41:3e:c0:3c:ff:21:a1:68:6a:71:ed:5a:3c:5f:a9:
                    39:94:2f:f0:66:8b:cb:a4:5f:b6:7f:8d:3a:35:59:
                    2d:e0:62:b6:78:95:6c:2d:4b:b5:3c:c0:fe:3d:bd:
                    cc:50:c3:f9:75:2b:46:55:ee:01:ab:eb:91:9e:93:
                    4f:46:a1:ba:9c:b5:0b:11:cd:ff:26:0a:71:7b:a6:
                    b6:5e:a6:2b:b2:ca:91:a5:ff:01:96:f2:3d:2c:f7:
                    71:3a:91:e9:66:cb:97:c1:ad:b2:1e:f9:93:95:13:
                    00:23:f9:e3:4f:2b:89:0f:ca:9f:b2:fd:5f:58:0c:
                    44:cb:e3:e1:48:f5:64:53:0a:af:07:12:88:7b:58:
                    59:df:80:1b:33:ed:12:ef:4f:57:6e:6c:7a:19:23:
                    72:9c:68:81:2f:a9:e5:2b:65:0b:93:d9:8b:6a:69:
                    f2:0c:23:b3:ab:98:41:8c:32:d6:48:ea:34:b5:3d:
                    7b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:88:BC:55:04:E1:3E:AF:74:A2:67:D6:6A:25:A3:AD:3D:7E:F2:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/11b89bd0-db2d-35b1-82f1-0bc39d3ff2f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:b4:91:33:c5:a7:1f:cc:8f:07:e8:8d:f6:d5:56:2f:e3:fb:
         96:5f:7b:e4:df:ee:be:cd:a4:9c:95:89:40:d6:1d:7e:86:2d:
         6c:09:99:d2:d8:d8:90:92:0d:c3:88:d2:00:ce:9a:32:6f:43:
         17:22:b3:c8:df:e9:0b:09:cc:69:0f:fd:12:12:b2:f5:fa:06:
         90:8a:d5:f0:17:c0:b1:00:ae:7c:6d:b0:0f:89:76:60:d2:6a:
         be:ae:05:67:6b:62:e8:4c:d8:97:0a:20:e4:c0:5d:f3:32:0f:
         26:c2:9e:83:cb:9b:4c:2f:91:66:95:92:fe:be:56:1f:72:0d:
         20:5e:fb:95:16:33:57:89:cc:57:56:f8:ab:48:4c:29:cc:0e:
         7e:02:b9:70:cc:63:1c:77:e9:fa:59:12:78:92:2d:f3:f5:a0:
         d0:be:fa:e9:90:81:53:0c:db:75:25:c6:bd:48:6e:04:65:d9:
         3a:37:26:69:29:d2:c9:6b:a9:5a:6b:c4:fd:36:5a:6c:00:43:
         15:9d:11:00:c9:4c:e7:cb:f3:03:df:06:4c:5e:d1:3a:a0:f7:
         01:8a:90:f2:2d:90:49:b1:31:3b:1c:34:79:8d:22:6c:e4:1e:
         9f:87:c3:60:8b:aa:4c:ff:54:56:4e:6a:af:f0:b7:0d:7c:cd:
         0d:88:9c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:46:36 2026 by rpki-client