Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e26c143-1fa5-3e0b-b7fa-f7117d980c08.roa
File:                     3e26c143-1fa5-3e0b-b7fa-f7117d980c08.roa (raw, json)
Hash identifier:          ZNOoEHSOyFVrKQguBubeddperVe/k6044Sr4UiWU0T0=
Subject key identifier:   CE:4C:00:30:5B:9A:38:F6:C6:D1:80:49:4B:99:3A:DA:F2:60:07:5F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EED523918035EBB95F3E19480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e26c143-1fa5-3e0b-b7fa-f7117d980c08.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        172.68.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:39:18:03:5e:bb:95:f3:e1:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=94f5e12e-76b3-434f-906f-2025dbe1b76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bc:b4:fa:d1:e2:42:2e:e1:08:7c:7a:af:c1:
                    04:cc:d6:5f:b0:b1:9d:5a:36:0e:6a:45:81:f3:c2:
                    b8:90:ea:41:ca:0e:6e:86:cf:9f:79:18:cd:9a:90:
                    05:39:65:d6:48:95:07:cd:48:db:45:ee:37:b2:9a:
                    3c:af:a5:6d:45:5a:81:0e:75:c9:50:db:ac:4a:08:
                    56:7d:25:1f:b0:c6:ca:b7:af:81:99:25:c2:d8:0d:
                    db:21:10:cb:0a:b2:56:be:68:2f:19:46:55:89:ee:
                    7b:ec:f6:f8:c9:d3:c4:65:0a:ec:ab:45:aa:43:91:
                    20:2d:81:f1:77:28:70:3d:d4:23:73:09:87:5b:2f:
                    db:77:b1:38:81:8f:c5:fb:84:4a:b4:aa:57:7b:8c:
                    70:06:26:0d:1c:9d:b8:16:04:a8:a2:40:37:32:f5:
                    5f:ca:f5:17:a2:55:37:c0:1d:23:80:b7:d8:c4:42:
                    75:f8:df:21:39:1e:38:9a:1c:0a:7e:0e:77:bc:ac:
                    38:6e:9b:f4:ae:99:31:34:79:b3:38:ea:d4:b6:67:
                    3a:e3:c4:d8:58:46:ab:6c:37:ed:f8:f1:55:fa:61:
                    2c:22:93:ef:53:b7:41:75:99:12:fc:c7:c2:93:c6:
                    75:b1:eb:1a:45:0d:60:21:27:f6:30:68:14:7a:c9:
                    e4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4C:00:30:5B:9A:38:F6:C6:D1:80:49:4B:99:3A:DA:F2:60:07:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e26c143-1fa5-3e0b-b7fa-f7117d980c08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:0f:d7:db:21:36:6c:53:c0:3e:d3:5e:f9:ec:40:cf:3c:0e:
         d2:8c:46:c4:30:32:02:c4:96:60:1d:d6:00:a7:f4:d5:c6:b7:
         51:bd:c9:00:0f:98:1f:72:f9:ff:94:ca:c1:db:0e:4c:bb:1d:
         51:5c:00:66:48:3b:c1:56:82:2f:18:6d:17:b1:64:b7:89:74:
         d5:a2:6d:36:dd:d1:f8:b3:b6:8b:95:f0:3b:72:08:69:4d:9e:
         52:82:f9:9e:fc:02:93:e2:f2:22:1f:f6:5c:a7:53:56:8d:e9:
         22:d6:2c:62:54:a6:5d:7c:d9:5f:97:eb:39:fc:a6:6c:f0:0c:
         97:52:a8:6a:ff:b9:ec:54:73:f2:27:5d:f9:3f:11:66:1e:91:
         6e:2c:57:c9:c0:c0:c9:fd:dd:82:51:e2:42:24:1d:d8:65:29:
         61:4d:9d:c8:d2:ce:46:b3:4c:ca:1a:3f:9f:e9:3d:5e:ed:50:
         a9:be:04:b4:1b:ff:9f:0b:51:30:92:9f:2d:73:b8:5c:f2:5e:
         dc:99:19:be:31:ed:e8:53:f4:72:3f:d3:ff:cf:ba:69:ab:d2:
         3d:5d:51:36:f5:99:ba:b3:a0:6a:72:23:08:16:e6:0b:53:17:
         67:ca:7c:a6:28:16:80:17:90:e8:b1:cc:5d:7d:4e:be:07:42:
         27:6c:e6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:13:51 2026 by rpki-client