Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38c48ef1-9ffd-3804-a807-2f8543ef3a35.roa
File:                     38c48ef1-9ffd-3804-a807-2f8543ef3a35.roa (raw, json)
Hash identifier:          ih49ZpqeXgXxCB53YV88tDT3i9xO9GkhWdMM0/IUlBs=
Subject key identifier:   1C:6B:B8:E9:21:44:2E:92:F4:27:43:28:95:EA:81:E7:3A:3E:BB:1C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E51E9ECCEA6C6487A60DF2D40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38c48ef1-9ffd-3804-a807-2f8543ef3a35.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     13335
IP address blocks:        172.71.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:ec:ce:a6:c6:48:7a:60:df:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=0d57c7d8-8772-4cbd-82af-dcccbdb72b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:28:2e:8e:a9:7e:d9:75:20:ca:fe:ea:6d:31:
                    68:cb:a4:57:21:bf:63:99:fa:7b:bc:50:c6:9e:51:
                    ca:bc:a2:39:fd:c0:0c:3b:b8:c3:b1:f2:43:18:05:
                    f1:f7:28:f5:f9:6a:fc:2a:15:b7:70:a8:cb:ee:42:
                    39:2d:4d:f8:b9:84:bc:ea:6f:88:3b:20:41:2d:ba:
                    e4:84:c2:7e:4a:81:44:d1:4c:55:b3:70:4b:74:09:
                    0d:84:3e:f5:49:31:14:0b:88:dc:08:61:7a:16:a9:
                    c9:3f:2c:55:e2:93:10:c7:d6:45:66:17:82:e4:49:
                    d7:a9:93:b3:dc:50:c6:02:3a:4b:1f:a5:0d:c5:0b:
                    b9:13:51:2d:da:e1:2d:86:c1:7f:8b:20:23:8e:11:
                    84:c1:15:36:9e:e4:4e:cf:b2:5b:fd:9e:01:8d:c0:
                    cb:c3:32:04:eb:46:f6:67:68:35:c9:4f:11:29:83:
                    81:ef:53:c3:01:e1:98:49:a7:a9:53:95:25:df:0d:
                    f8:69:00:5d:6b:f7:fd:1d:bd:29:6e:93:ba:78:bb:
                    9d:f6:4a:e7:00:28:c4:f6:d1:5a:a7:80:12:db:57:
                    f5:d9:ba:3d:c7:e4:c6:f4:73:c5:b6:a7:1c:91:c9:
                    5e:f7:f9:e2:5b:9a:75:d3:8c:c9:17:f3:c3:05:33:
                    ec:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6B:B8:E9:21:44:2E:92:F4:27:43:28:95:EA:81:E7:3A:3E:BB:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38c48ef1-9ffd-3804-a807-2f8543ef3a35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:47:a7:e4:d3:8e:9f:96:a0:b8:db:a2:2a:db:b1:20:05:74:
         94:ba:d3:cc:35:19:6d:77:71:c1:34:c5:d8:fa:ca:2c:e2:c6:
         b7:00:6a:8c:3b:b5:84:a6:78:4b:70:d7:91:3a:88:a7:95:41:
         ca:77:34:32:37:54:3a:19:6e:5d:2b:0c:3c:52:de:10:1f:60:
         8f:13:f4:33:cc:3e:ac:fc:3d:17:3b:d9:f1:6d:23:c9:90:4f:
         42:b4:1b:e6:47:17:d1:0b:a5:5a:42:1e:48:a9:7e:a3:1c:3c:
         b4:22:89:90:d8:4c:98:cf:bc:5f:e7:12:ea:d3:34:4b:a9:56:
         72:8e:14:dc:92:c2:cd:13:83:bd:2a:c7:27:52:9a:7a:ac:3e:
         6c:13:fd:17:96:fc:97:02:96:71:56:c8:13:ad:ca:26:96:83:
         d8:bc:93:b4:b9:c5:1a:82:02:f0:09:4a:8b:75:f9:ee:33:97:
         bf:83:d9:e3:9f:b7:dc:66:bd:0a:b2:6a:ee:11:f9:a3:38:7f:
         db:9b:c1:1c:58:8b:d9:7e:39:56:37:2d:65:e6:55:80:68:74:
         de:05:34:8b:0e:7a:64:e1:0f:0e:21:36:1e:75:3f:38:4a:c8:
         7d:ec:d7:cb:54:c2:d9:95:af:34:c9:cd:94:21:f6:5a:71:ad:
         5f:9f:e7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:48:27 2026 by rpki-client