Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c6ac8cf-b7ac-3364-81bb-2666168000cf.roa
File:                     1c6ac8cf-b7ac-3364-81bb-2666168000cf.roa (raw, json)
Hash identifier:          ANyqErebwiW2DyGX/IMCdGTsFGLtv0ZRyqERBFgRylY=
Subject key identifier:   A9:7B:F1:E6:A1:F5:8F:60:9E:98:DB:C6:10:92:14:B8:4C:DA:E8:B8
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584DBF0C6FE651B51534DFF7BA00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c6ac8cf-b7ac-3364-81bb-2666168000cf.roa
Signing time:             Wed 06 May 2026 18:26:02 +0000
ROA not before:           Wed 06 May 2026 18:26:02 +0000
ROA not after:            Tue 04 Aug 2026 18:26:02 +0000
asID:                     14789
IP address blocks:        172.68.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:0c:6f:e6:51:b5:15:34:df:f7:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May  6 18:26:02 2026 GMT
            Not After : Aug  4 18:26:02 2026 GMT
        Subject: CN=aa8d83ed-62ec-4d81-a2f9-8f129a8750c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ba:a8:2f:9c:99:b1:2f:24:7e:45:27:70:a6:
                    93:bb:ae:86:7c:c7:70:2d:6a:37:31:33:3e:85:d5:
                    49:81:af:ab:6b:ae:96:a8:ff:fa:14:74:f0:4c:0a:
                    14:d5:8d:d9:11:2e:17:fb:f2:d5:73:09:5e:80:a4:
                    c7:85:7a:a2:b7:46:05:6b:cd:c6:f8:58:1a:da:05:
                    b5:ea:36:87:f9:99:b1:45:08:54:17:aa:84:28:3a:
                    85:a5:00:a0:14:77:5d:c0:72:23:4c:74:6f:a4:1d:
                    f5:90:fa:16:96:db:65:bc:ae:dc:a5:9c:29:86:fc:
                    f7:74:97:37:39:76:d5:73:b8:b2:f0:30:0c:93:b2:
                    53:8e:7d:f2:79:0b:a7:61:a7:fe:88:9f:80:fb:d8:
                    a5:46:2b:8d:eb:59:bf:df:20:a4:a1:84:fd:04:fc:
                    87:5a:a0:a3:aa:52:71:b8:f5:09:03:6d:1b:70:73:
                    3c:78:f5:e7:53:f0:31:b7:28:54:e5:93:75:1e:af:
                    73:a9:93:13:da:46:60:ba:6b:cd:27:11:51:6e:1f:
                    bd:27:53:a0:f7:29:92:79:07:6a:68:0e:0b:b4:20:
                    d5:55:a3:40:33:0d:af:12:e1:ac:65:3a:d4:e6:c4:
                    fb:ba:7c:7c:9a:5b:47:cb:44:03:6a:77:2b:4c:82:
                    ed:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7B:F1:E6:A1:F5:8F:60:9E:98:DB:C6:10:92:14:B8:4C:DA:E8:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c6ac8cf-b7ac-3364-81bb-2666168000cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:5b:4e:5d:e0:3a:0b:ca:01:90:e7:8c:63:8a:f8:47:2b:0e:
         6f:be:1d:f9:86:0e:b3:17:1c:8e:a0:cb:5d:e2:af:ac:a7:a5:
         b8:d8:9a:ac:d1:e2:8e:82:9c:f1:52:cc:59:ab:64:84:04:74:
         9b:cf:24:28:15:7c:97:0a:d3:39:ae:8b:1a:ad:59:2b:9c:3a:
         91:7e:0a:57:8e:fd:c5:36:fd:f2:fa:51:47:26:b8:d4:75:34:
         8d:3c:4d:f2:57:d2:d3:2f:88:3c:c4:04:d7:2e:25:c6:85:b4:
         96:94:2e:58:e7:12:13:bb:82:83:d8:da:32:97:d5:0b:01:50:
         fc:e0:5e:11:1c:ce:be:93:84:da:05:69:43:ab:d6:b9:9c:45:
         24:e4:27:61:e6:11:97:59:c7:27:16:ad:a0:da:63:5d:ad:40:
         90:23:09:78:bb:8b:ec:66:cb:81:a9:22:73:05:15:57:b8:32:
         ad:4b:41:37:b5:35:cd:68:77:16:9f:13:ae:9c:db:4c:24:7f:
         f7:ce:9e:bb:cd:f2:e8:69:12:09:74:41:da:d6:2f:fa:67:4f:
         11:e6:aa:c8:8d:bb:3a:5b:43:0d:28:12:20:8f:0e:db:e3:dc:
         42:29:d3:90:32:66:f3:c3:ed:0e:3d:43:95:ec:60:85:53:f8:
         ad:17:fc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 06:09:55 2026 by rpki-client