Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f781fa5-216a-318d-81c3-28358b633e96.roa
File:                     1f781fa5-216a-318d-81c3-28358b633e96.roa (raw, json)
Hash identifier:          xAajzlxl5W+qNkJ7FLVNNGv7XAzJ8FR432jnl2Em0kk=
Subject key identifier:   77:1A:39:3C:F9:AB:D5:54:C9:83:5E:1C:62:59:0E:BD:E4:95:B1:57
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EED523A1EF0058C560ED70600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f781fa5-216a-318d-81c3-28358b633e96.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        172.68.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:3a:1e:f0:05:8c:56:0e:d7:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=3e5acff2-0f57-4f64-882d-49c722f73da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ca:58:2a:65:b7:73:81:09:60:ac:76:29:6d:
                    d8:02:90:24:cf:3c:a3:28:89:57:84:b1:6f:12:81:
                    66:19:cb:f5:21:c9:82:17:67:79:e5:d8:b9:69:31:
                    88:29:ad:f1:2a:6c:b4:be:5d:d3:87:fb:e8:e3:ab:
                    5e:23:09:65:2f:38:66:61:a7:c9:77:ba:54:5e:32:
                    14:76:75:4d:ad:a5:9e:b9:a6:4a:fc:26:ab:1f:0a:
                    e7:91:a7:67:ef:33:22:78:c2:91:29:e9:d3:ae:27:
                    c1:a1:62:80:2f:69:43:b2:af:44:08:0e:1d:85:3a:
                    32:ad:b5:31:07:fa:18:8e:63:02:e7:c2:ce:8a:b6:
                    82:c3:59:c6:77:60:e1:f1:8f:c6:7e:21:a0:e3:15:
                    79:e3:6b:6b:ea:79:37:99:18:26:89:c9:cc:ad:bc:
                    87:5d:0d:4b:92:ff:c4:b6:21:08:db:f7:90:03:d3:
                    70:da:3b:c4:f3:d3:89:29:3d:2c:de:47:a1:58:b4:
                    71:71:90:b8:cf:4a:77:3f:a6:6e:1c:97:48:56:01:
                    cf:20:94:4c:29:77:d3:2e:cf:c6:55:d0:ae:6a:7e:
                    d2:5a:ff:17:05:91:4c:78:73:5b:2d:f3:2c:c4:c5:
                    14:52:11:09:cc:1b:7a:1e:ee:f6:d9:a8:04:da:a8:
                    62:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1A:39:3C:F9:AB:D5:54:C9:83:5E:1C:62:59:0E:BD:E4:95:B1:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f781fa5-216a-318d-81c3-28358b633e96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:d4:7b:7b:5b:a7:23:26:7c:45:5d:9f:5e:c5:89:e1:23:3c:
         8a:4c:61:af:6b:e9:b5:0c:11:f0:57:db:7d:20:c4:fc:3e:b4:
         92:fb:45:fc:9d:23:8a:23:ec:a3:d6:c7:6f:77:ba:48:e8:b5:
         bf:38:57:60:3f:0b:0b:67:fe:c4:2b:c0:36:b8:85:b4:fd:6c:
         3b:15:37:46:59:97:b4:15:48:0e:76:54:7d:ce:b5:dc:b9:85:
         b5:27:93:1c:9c:dc:4f:1f:33:78:e7:bb:49:68:29:7d:78:71:
         36:34:d9:1b:cb:7c:48:51:e0:eb:8a:78:a4:71:d9:c4:36:2a:
         04:94:0d:83:fa:af:5e:6c:29:10:e0:2f:b3:15:71:9a:0f:12:
         ad:88:80:0f:9f:61:ef:fe:1e:a1:26:0e:15:ac:c7:70:c5:5a:
         e1:d7:c6:8c:16:ad:c2:7b:79:6d:54:b6:ef:65:23:2f:ba:6a:
         cc:5c:81:a6:d0:0c:57:3e:10:90:a8:f0:d9:fd:3a:b3:3c:d9:
         d9:3d:69:cc:eb:91:9f:37:eb:1b:1f:20:ad:dc:52:21:00:dc:
         91:3f:68:99:e8:e2:3e:9f:d1:46:d1:98:50:bd:d0:fc:1a:98:
         3e:00:1b:d1:ea:a2:f0:ed:07:ee:31:20:33:67:18:ff:f6:b0:
         40:8a:70:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:36:37 2026 by rpki-client