Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1269e5ce-966e-33aa-acfe-c911aab4511b.roa
File:                     1269e5ce-966e-33aa-acfe-c911aab4511b.roa (raw, json)
Hash identifier:          6+0kaj84vgaZHgDmCWwbotBvTjuCGDEPBPCni/eD9zA=
Subject key identifier:   D6:29:08:F2:9C:D4:DE:78:FF:04:EA:57:60:05:C9:FD:FA:17:E4:2B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F1F92465140AAFECB8FE94900
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1269e5ce-966e-33aa-acfe-c911aab4511b.roa
Signing time:             Thu 10 Sep 2026 01:00:12 +0000
ROA not before:           Thu 10 Sep 2026 01:00:12 +0000
ROA not after:            Wed 09 Dec 2026 02:00:12 +0000
asID:                     14789
IP address blocks:        172.68.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1f:92:46:51:40:aa:fe:cb:8f:e9:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 10 01:00:12 2026 GMT
            Not After : Dec  9 02:00:12 2026 GMT
        Subject: CN=5c0ecaf4-d379-4d43-9110-c08638a0745b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:56:23:7a:cb:b2:87:2a:e7:1e:69:11:2d:e7:
                    57:9c:aa:ae:25:33:4f:e4:28:0f:75:32:8e:89:a2:
                    a2:07:01:e6:2b:e8:32:06:4a:96:c6:d2:ee:3d:73:
                    f2:bb:ba:b6:c1:c1:ae:0b:a4:2b:cf:13:ce:33:8b:
                    15:f0:14:5e:04:5f:f3:58:9a:de:f7:3d:74:aa:37:
                    f6:fc:1f:f2:87:3b:68:5e:29:68:6a:03:6f:0d:5d:
                    18:a4:c2:85:0a:64:74:b2:3d:14:64:ce:59:5c:a5:
                    eb:7c:94:9f:8c:35:60:a8:7e:9a:8a:8f:63:4b:40:
                    dd:c5:58:4f:92:fa:e4:e6:22:28:aa:e8:7b:34:81:
                    e3:ad:71:ac:13:9a:b2:d4:88:40:0a:4d:05:e9:1d:
                    c4:43:6f:fb:6b:59:be:04:f2:b8:ce:07:f7:36:c5:
                    bb:0e:12:26:26:db:8d:d2:7a:61:df:9d:2c:1d:39:
                    b0:e5:fe:e6:e9:77:30:ef:66:c5:d2:7a:72:69:eb:
                    b0:3d:99:5a:85:07:04:83:e5:19:9b:d0:17:73:35:
                    dc:5b:10:a6:dc:d6:8a:bb:db:54:be:dc:81:37:4f:
                    e7:9b:ce:be:96:0f:d0:25:ee:55:83:29:be:62:de:
                    21:a7:ed:67:cc:59:c5:1a:67:d1:c1:9f:8d:29:d8:
                    de:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:29:08:F2:9C:D4:DE:78:FF:04:EA:57:60:05:C9:FD:FA:17:E4:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1269e5ce-966e-33aa-acfe-c911aab4511b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d9:b1:1b:bf:2e:56:40:2f:e7:b2:1e:c6:c9:b3:1b:0d:af:
         79:0f:37:f4:4c:71:36:94:3a:eb:7f:c2:e0:e5:76:64:d4:f4:
         34:dd:70:3d:5d:bd:71:74:a8:4c:5c:38:10:a9:8f:ce:85:19:
         ad:e4:50:65:9d:ce:bd:d8:b2:31:a2:3c:b3:d6:eb:f7:8d:eb:
         f8:fe:ae:c0:6f:23:36:4a:d8:4d:81:aa:8e:da:8b:ef:2d:19:
         f7:98:88:26:ef:37:39:87:bc:fc:4e:37:08:47:f3:aa:1f:ef:
         a9:92:0d:21:69:b5:3b:1b:13:1d:50:35:60:a9:89:48:42:ad:
         d8:8c:d5:e1:6a:93:73:c9:1c:1a:ce:26:46:09:ac:0c:9c:96:
         0d:59:f3:5a:94:83:86:0b:f7:0b:c7:6c:5d:13:55:d2:81:bb:
         fe:1c:67:c4:a7:75:2e:54:80:42:b4:bd:0f:86:0d:40:b9:63:
         69:14:00:dc:c8:24:8f:73:30:9a:bc:5e:1c:19:db:23:52:d7:
         74:f7:38:cc:a2:01:8f:f9:9b:0e:2e:86:06:2c:a7:8b:5a:a3:
         6b:51:9b:6b:f5:09:a2:bf:1d:ea:b1:25:ff:36:67:f8:ff:31:
         5c:ee:5d:92:ad:72:79:9c:47:88:75:61:4f:e5:2f:8d:67:e9:
         c7:e7:b7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:17:35 2026 by rpki-client