Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/13b81e0c-b9fd-3c6d-8214-becdb3df2f47.roa
File:                     13b81e0c-b9fd-3c6d-8214-becdb3df2f47.roa (raw, json)
Hash identifier:          jHtlNAqmyRq044KAV07gTGE84jfwEelzPL/GHmut/NI=
Subject key identifier:   C9:0E:37:8F:12:AD:66:43:E5:56:5A:6A:45:CD:AE:37:3A:55:58:B8
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEA8781F8783048090D028480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/13b81e0c-b9fd-3c6d-8214-becdb3df2f47.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        172.64.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:81:f8:78:30:48:09:0d:02:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=7955323a-4091-40f6-a95c-cae466e5c439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:df:75:5f:2f:cc:df:96:fb:29:c5:f1:c1:af:
                    47:5b:bd:01:b4:97:7c:be:49:56:1a:57:3d:4a:86:
                    75:c4:84:13:af:80:f7:c7:fe:73:97:be:a8:c6:ca:
                    c7:02:cc:b5:a7:2e:09:13:2b:88:e7:6b:f2:89:fe:
                    d9:0e:54:36:4c:67:b8:3e:c8:d9:ab:d6:6d:0f:d2:
                    51:82:f7:1b:c6:2b:cf:0c:49:96:5f:4e:84:37:80:
                    ba:49:81:6a:7c:ab:09:21:77:e3:47:31:81:37:c9:
                    06:ff:97:78:3c:03:9f:74:d4:66:90:42:3a:e4:3a:
                    fd:dd:11:57:07:1f:7a:02:32:83:15:00:36:91:80:
                    ec:e7:00:7b:09:63:b0:e9:23:8b:e5:dc:9c:2a:90:
                    40:37:4b:69:63:0e:c3:09:a3:22:ca:25:7c:33:d9:
                    98:d1:a4:29:7f:31:bf:81:82:37:ff:f4:48:d3:f0:
                    31:6a:21:ba:a7:63:cf:04:dc:70:22:11:46:55:3c:
                    a8:a2:33:38:ad:0e:b3:be:e6:cd:0b:9f:8b:79:8f:
                    42:aa:06:79:03:f4:85:87:ee:23:60:37:27:74:25:
                    ef:85:c9:b1:e3:3a:7a:f5:ae:74:6f:6a:2c:7a:07:
                    60:66:93:bc:bf:25:f5:fd:ef:53:7f:0b:e1:45:37:
                    e2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0E:37:8F:12:AD:66:43:E5:56:5A:6A:45:CD:AE:37:3A:55:58:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/13b81e0c-b9fd-3c6d-8214-becdb3df2f47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:da:ec:d8:ca:e8:c8:a9:cc:0d:33:06:02:d1:85:02:81:3c:
         29:22:a8:82:36:5a:b9:82:10:ca:62:49:70:36:02:26:35:01:
         fb:a7:f0:12:59:7a:43:bf:c1:31:f9:0e:f6:81:07:8f:d6:44:
         e3:c2:46:00:9f:2c:80:dc:8b:0f:55:b5:8c:56:8e:61:d2:1a:
         23:c6:61:e0:1f:79:91:ee:3b:4a:5f:78:08:de:d6:77:f7:d0:
         78:fa:95:ab:af:9e:32:6d:98:f3:f3:7d:26:32:2a:85:84:54:
         08:74:87:21:5b:d2:90:68:af:95:81:f6:fd:f7:04:78:10:59:
         b6:a3:5e:4b:92:b9:97:24:e3:e6:26:08:e8:80:14:46:80:12:
         5c:89:eb:a1:a3:c1:ad:5c:c3:76:84:7f:f9:3f:cc:a6:63:76:
         65:68:73:80:11:3d:c9:ed:b8:09:4b:91:d7:23:06:3b:89:1a:
         29:da:86:72:fd:1a:c9:6d:98:02:ad:f5:ff:63:c0:23:5f:6f:
         cc:a0:34:32:72:a7:b5:ec:2d:99:99:02:33:c5:d3:cd:f4:6b:
         83:63:e6:e2:a7:47:30:65:04:04:aa:6b:19:e2:b8:fb:d9:87:
         ec:47:7e:a7:89:2b:cb:3e:11:d1:25:06:c2:dc:5d:79:4c:1d:
         5a:78:98:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:44:24 2026 by rpki-client