Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ef5db62-95be-3b03-9523-9fdf9a49aca4.roa
File:                     1ef5db62-95be-3b03-9523-9fdf9a49aca4.roa (raw, json)
Hash identifier:          TYjPpIrqEHm0vc7tLpuxD+ncqSNCPgSbYybamJSEsJE=
Subject key identifier:   5D:DD:06:52:3C:6F:C4:B2:9E:48:CC:AA:57:7A:F9:5D:27:0A:51:46
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EED522A5D235FC88821A83480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ef5db62-95be-3b03-9523-9fdf9a49aca4.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        172.64.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:2a:5d:23:5f:c8:88:21:a8:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=31527bcc-9eb0-45be-89de-7962bde08661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:77:97:19:bb:78:1e:6b:70:fe:9f:2f:a2:c1:
                    c1:38:12:c4:65:30:f7:e9:77:8a:4e:ac:ca:31:2e:
                    f4:a2:d4:4f:5e:60:66:58:9f:fa:05:2c:56:dc:41:
                    c6:32:27:44:b4:2d:6c:b4:ae:5f:c3:9f:d5:35:ad:
                    0b:2c:4d:2f:a0:ab:cb:63:66:48:a2:87:e1:97:f3:
                    33:7e:59:15:ab:05:d8:00:c4:3a:d1:09:8e:fd:ae:
                    2c:50:01:6d:0b:4b:0b:c4:91:1a:a8:b3:7d:59:24:
                    6e:f1:fb:81:cf:3d:25:3f:98:72:b1:bd:3b:3e:c6:
                    d3:00:aa:6c:2e:38:f6:68:80:d3:e4:53:37:95:8f:
                    59:f8:42:4d:e3:08:85:c5:ae:a0:11:65:c6:76:71:
                    02:38:41:24:65:00:61:ff:12:99:67:e6:f3:37:54:
                    c0:b8:ea:fd:40:6c:6e:c7:e6:78:34:0b:57:13:d7:
                    71:8b:59:da:68:87:d9:29:39:3f:6c:43:25:5d:b1:
                    e5:f0:c4:c4:ea:3d:c0:f2:d9:93:e9:f3:a5:c1:d8:
                    51:96:87:2d:4c:2c:2c:3d:10:9c:e4:82:fe:82:e7:
                    d1:59:7c:b0:cf:38:df:41:42:1d:64:5a:09:59:96:
                    1b:2f:84:9c:bc:b3:96:88:cf:9e:a1:9c:d4:3c:86:
                    ae:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DD:06:52:3C:6F:C4:B2:9E:48:CC:AA:57:7A:F9:5D:27:0A:51:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ef5db62-95be-3b03-9523-9fdf9a49aca4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:2b:17:34:a2:d0:96:51:96:8b:54:f9:43:14:78:0b:cd:c6:
         3f:ee:5d:d9:c5:90:88:30:09:c2:d8:a1:df:1b:9c:61:2f:48:
         62:96:cf:91:40:f1:12:a6:2b:08:08:27:d7:bc:36:53:ef:0c:
         da:aa:7c:21:1e:d5:3c:ca:8d:5b:b4:1e:0f:2d:72:6e:3d:22:
         c4:26:ce:ca:8e:ec:69:11:8f:7c:e4:b8:76:60:1a:54:9b:19:
         84:d5:fd:48:6a:24:b4:2a:01:73:b0:93:86:b9:90:13:50:4f:
         d4:1a:9f:35:f8:c8:de:3f:23:5f:fc:81:fa:53:a9:20:3f:89:
         52:f0:02:fc:da:79:4d:83:5a:0c:06:ab:f2:73:09:1a:ef:2e:
         2c:78:17:f6:ca:c9:fe:77:04:c7:31:99:70:61:18:e8:34:1e:
         b1:2a:82:3c:aa:ee:c5:3d:ce:b2:5b:b3:d6:4d:b1:7b:da:0a:
         04:75:ae:e8:e1:45:47:6f:ae:97:5c:45:34:24:1b:cd:03:c5:
         5e:53:64:bc:6d:65:61:34:13:32:3f:62:ef:81:8e:6d:82:27:
         8d:76:ab:ac:3e:0a:51:7b:e5:90:03:60:fe:52:e5:80:d4:ea:
         15:de:b1:eb:ea:79:21:de:4d:87:ab:ab:6b:ac:71:62:e1:d9:
         63:88:aa:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:45:01 2026 by rpki-client