Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/141dee75-4120-3d28-a13b-cb170daaeb93.roa
File:                     141dee75-4120-3d28-a13b-cb170daaeb93.roa (raw, json)
Hash identifier:          BMjiXvpH+uhnzwmsGHjrqUDwZ0ySJKJCWtkLOB7LYyY=
Subject key identifier:   D9:25:43:D2:8E:4F:17:76:7F:A2:D6:AB:F5:1B:A1:E0:2E:83:10:A3
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEEB767205861D3C265AFD800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/141dee75-4120-3d28-a13b-cb170daaeb93.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     13335
IP address blocks:        172.69.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:67:20:58:61:d3:c2:65:af:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=aeb1984e-d8fe-4981-ad9d-6ff15ba4b555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4f:cb:86:50:f4:43:d7:f5:7f:ed:63:89:cd:
                    a6:fc:68:eb:08:76:0e:2b:85:10:54:00:a0:3d:d0:
                    3f:c9:2b:fa:78:22:c4:1b:ba:f6:12:a0:6b:9b:11:
                    bf:c2:de:09:d9:2a:f9:df:cd:29:6e:76:e6:53:cb:
                    9a:04:ec:ba:88:72:a4:7c:87:f9:b7:7f:69:bb:af:
                    5e:93:46:29:c7:cc:3a:1d:eb:2b:68:4a:60:46:0f:
                    56:c4:d5:53:82:1c:9e:f1:4a:70:5c:a6:2d:b8:eb:
                    96:fa:78:72:2d:e1:c6:b7:fc:05:17:28:d3:7c:28:
                    8c:d4:98:2f:7d:cc:8c:c4:fb:49:ee:4b:9c:e2:70:
                    64:1a:3e:b5:5c:88:ca:b8:b0:30:28:f1:11:cb:cb:
                    d0:79:9b:91:2a:de:22:55:74:c7:5f:4b:1c:b3:ab:
                    52:a9:02:ba:fb:46:b4:5b:f3:5e:91:0c:45:e9:39:
                    1f:95:96:d4:a7:f8:90:ba:1f:d4:fe:a4:a8:d7:e5:
                    0d:c7:70:a7:59:bf:27:df:15:fc:95:8f:b2:be:f1:
                    74:ff:73:eb:e3:32:b4:d5:0b:9c:18:b0:a0:34:3f:
                    d2:c3:1e:0e:22:9b:cf:b7:f0:7b:a4:7e:36:c8:51:
                    9d:e9:c1:04:73:50:16:f0:d5:80:6a:11:35:d3:75:
                    5b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:25:43:D2:8E:4F:17:76:7F:A2:D6:AB:F5:1B:A1:E0:2E:83:10:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/141dee75-4120-3d28-a13b-cb170daaeb93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:0c:2c:82:69:2c:47:a2:87:ae:67:b9:c8:2c:0a:02:19:10:
         7f:39:5a:f3:7b:39:1e:25:d8:c4:a8:be:bc:14:7e:27:8e:bc:
         d1:7c:35:93:23:e5:d0:df:0c:e5:62:e6:15:65:15:e4:a2:da:
         dd:2c:34:06:7c:f5:e2:cc:57:f8:b6:00:c6:43:c8:ff:81:b8:
         e9:10:25:9f:0e:ea:d9:0a:a7:16:c8:2d:ec:d1:b9:ad:dc:63:
         3f:73:b6:a2:e1:34:cf:53:4a:f9:0d:49:fd:c0:e4:d7:5d:49:
         ff:77:4d:c5:00:07:90:a0:7b:f9:b1:7b:83:3e:a7:3e:79:24:
         d2:8a:2f:af:ac:b4:7f:ab:38:33:07:4d:f5:a8:3c:0a:28:e4:
         4d:54:f0:2e:a5:00:be:3c:be:89:b8:72:32:df:91:e6:3a:ef:
         ed:53:4e:d4:cb:55:fc:99:1e:7d:c0:7b:78:a7:67:ee:7e:40:
         db:79:f0:8c:b9:f4:b6:cb:9c:bd:0f:f7:3d:c8:b3:c5:5b:b7:
         66:5f:fb:7d:31:8c:62:0f:a5:ad:25:eb:85:df:57:fe:f3:0a:
         aa:78:2b:04:00:9a:c4:96:13:f0:45:af:e0:aa:b0:35:d0:7e:
         38:5d:24:31:8d:e1:40:3e:81:39:83:f1:43:6d:0f:81:08:ef:
         5a:c8:4d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:01:06 2026 by rpki-client