Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2661fc25-96c4-3ef0-befc-24f990019098.roa
File:                     2661fc25-96c4-3ef0-befc-24f990019098.roa (raw, json)
Hash identifier:          Iybe79BeeGe/vDG88R2Y6rDILgSyeHfh/Xz8jvcaidY=
Subject key identifier:   C3:77:D1:69:34:DD:5A:5B:0F:03:4D:EE:79:F7:84:71:FE:92:CA:63
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EE42335D17DC2753513071780
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2661fc25-96c4-3ef0-befc-24f990019098.roa
Signing time:             Wed 19 Aug 2026 18:03:46 +0000
ROA not before:           Wed 19 Aug 2026 18:03:46 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:35:d1:7d:c2:75:35:13:07:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 19 18:03:46 2026 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=b5cec9dd-39d1-485e-9c5a-9ac31036f406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:75:19:a8:12:60:59:c8:f6:d1:90:e8:91:
                    12:9b:50:dc:79:d3:77:8d:ce:52:d1:1e:d9:08:77:
                    78:7d:be:59:ba:55:16:a7:a0:0b:bc:aa:a7:9e:93:
                    14:ef:f1:85:cb:9a:1f:4a:08:c5:8a:71:b9:f3:bb:
                    30:96:0d:51:92:32:39:69:54:2b:e9:bb:71:d7:48:
                    0a:46:98:93:ff:7d:05:d6:8b:de:18:ef:bc:14:90:
                    5b:96:6d:81:33:d2:ab:e8:52:13:09:d9:65:0d:6e:
                    51:76:03:0b:f9:5b:82:7b:37:0b:9a:a9:9f:ba:87:
                    9b:22:67:39:07:49:b9:f6:50:0f:6b:4e:c2:22:cd:
                    9f:06:1b:ba:20:3a:37:43:16:d8:32:9e:44:09:5b:
                    a6:bc:f3:4a:c7:a2:ff:3a:d8:1a:30:0e:9c:19:ff:
                    2d:db:a6:20:01:58:d6:e2:0c:da:2b:ba:f9:ab:99:
                    93:a5:25:cf:b6:c8:73:dc:39:13:67:5f:8b:c4:01:
                    7d:97:36:1c:bb:71:e5:dd:12:c0:72:59:60:8c:31:
                    e5:2c:29:5d:1c:74:17:e3:58:3b:c7:d4:2b:cf:34:
                    08:52:d2:70:44:cb:e9:17:fe:8d:84:b9:a4:51:4b:
                    15:fc:b0:b9:3e:fd:a5:08:c0:14:26:15:ba:7f:b7:
                    27:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:77:D1:69:34:DD:5A:5B:0F:03:4D:EE:79:F7:84:71:FE:92:CA:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2661fc25-96c4-3ef0-befc-24f990019098.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:54:4a:db:c1:b9:cd:4b:f3:3a:b8:c9:81:48:25:d8:21:43:
         8a:31:69:c1:11:6c:8c:14:5d:f2:28:dd:bc:73:4b:16:51:f1:
         e5:73:a9:76:97:2a:61:b2:36:8d:40:b2:e1:5c:77:d2:dd:7e:
         03:eb:0c:8b:0f:f2:a0:c5:21:9d:ae:ea:46:88:f8:d5:0e:65:
         56:8e:aa:8b:94:bf:86:98:13:f2:dd:16:03:67:7f:98:73:45:
         be:45:c0:e4:0e:77:ad:82:3f:bf:01:ef:02:cd:54:bb:41:6a:
         50:1e:00:42:ad:a2:f3:e0:66:24:cc:11:ce:5c:1d:9c:61:4a:
         40:5f:98:be:fd:fd:ae:39:55:be:1b:6b:c5:40:35:14:91:a1:
         d6:e3:e5:f2:31:d1:ae:97:3b:c3:fe:b7:ae:d8:63:af:56:83:
         b7:66:e5:2c:7d:a5:92:b9:46:07:4b:d4:ef:d6:1c:24:c1:22:
         2c:ae:27:c5:d7:75:65:ec:e7:55:f9:4c:07:4d:14:f9:ac:45:
         82:2f:c4:0b:36:f8:1d:a3:7b:bf:ae:ca:97:39:fb:82:cc:9a:
         79:b7:4a:df:95:c7:8c:ab:57:5b:78:98:bb:a9:0a:1f:7f:87:
         85:5c:11:36:fd:b7:62:32:57:2d:33:d4:c3:5f:68:d4:aa:fd:
         b3:49:7d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:58:04 2026 by rpki-client