Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43a081bb-cde3-3137-9e47-27d887425097.roa
File:                     43a081bb-cde3-3137-9e47-27d887425097.roa (raw, json)
Hash identifier:          cuNkF4atbtCgrrn0hDejWzpzgsYvQD0O84+CqeszdAU=
Subject key identifier:   EC:ED:E1:39:41:69:79:8E:4E:BF:AA:82:E4:B4:23:50:87:9A:A0:38
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEEB76650AF244E7737A39C40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43a081bb-cde3-3137-9e47-27d887425097.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     13335
IP address blocks:        172.69.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:66:50:af:24:4e:77:37:a3:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=a30f17b1-c3b2-45f2-ac56-45c0bbca777a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9a:c1:06:22:5d:5e:7d:a3:22:0b:79:17:34:
                    72:b2:11:4d:ee:6e:4b:28:0f:51:b5:dd:e2:10:bf:
                    fd:c9:6c:76:6f:65:95:31:4d:09:a5:86:2e:7a:55:
                    32:e6:d6:9c:c6:be:59:d3:f4:b4:b3:18:13:c6:f3:
                    a5:62:42:19:60:85:e3:ea:e9:62:13:60:1e:ac:93:
                    23:c8:fc:93:b6:ba:d5:df:eb:d5:dc:11:17:6c:7e:
                    dc:a7:ef:47:e3:76:36:68:ec:34:53:5e:d1:cf:f4:
                    e5:03:25:56:55:d1:03:2b:6d:8b:a8:ab:ef:df:80:
                    02:a9:fc:75:ce:da:07:82:42:71:0c:47:1d:af:10:
                    a0:e4:77:a4:7c:80:4d:22:f6:71:cd:a2:95:2f:bb:
                    a2:db:e8:a0:fb:b9:90:d8:7d:48:6d:24:a8:f3:58:
                    2c:36:9a:b5:1a:cc:83:af:52:c3:82:89:f9:c2:27:
                    72:43:fb:24:1a:ab:c8:68:14:41:1d:d0:33:87:6f:
                    eb:b2:64:10:66:69:09:85:45:c9:5e:f2:6a:79:06:
                    16:63:f0:f2:c2:e2:68:bc:fb:4a:63:a8:ce:8d:44:
                    9e:7f:b4:59:00:24:ac:9a:fb:6e:33:6e:67:72:86:
                    44:5f:42:ee:bc:17:a0:ac:2b:3b:ed:d8:b0:cc:85:
                    59:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:ED:E1:39:41:69:79:8E:4E:BF:AA:82:E4:B4:23:50:87:9A:A0:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43a081bb-cde3-3137-9e47-27d887425097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:dc:f6:61:e3:e9:eb:c0:8d:bb:74:23:36:3c:f8:96:97:1c:
         5d:01:41:4a:27:24:d7:6b:d3:7c:19:34:cc:c1:e2:f9:c2:02:
         07:ba:4c:b9:7b:54:73:c4:a0:f3:8c:ff:21:18:2b:68:0b:0e:
         6a:94:a9:fb:67:0b:7a:9f:14:51:87:8b:82:14:fb:af:36:6f:
         32:90:60:37:fb:a0:86:ad:a9:ef:63:c0:b2:b7:d5:41:ab:d4:
         4a:5d:85:3d:f8:76:70:32:be:b1:56:b3:87:37:da:f6:d2:b9:
         b6:b9:bf:4e:10:1b:53:56:aa:d4:d4:08:a8:c2:37:49:9f:6a:
         f5:32:63:54:28:ad:f9:0a:36:48:67:a2:97:ec:df:c7:9b:34:
         0b:f2:55:98:3f:f1:28:21:32:f1:c9:cc:71:21:81:71:dc:43:
         f7:1a:77:b7:bc:53:f0:b0:a6:5b:01:bf:35:30:6c:87:26:9f:
         53:de:34:dd:2f:51:11:02:f5:9f:38:8c:43:58:3c:2d:a8:d5:
         b7:13:68:64:fd:35:b1:01:27:7a:2a:c4:f5:1f:68:fc:82:98:
         f2:7a:49:a9:95:c8:7f:82:3a:7e:7f:9d:26:73:5e:87:ef:46:
         d2:58:2c:e2:ff:5a:06:17:b0:7f:58:42:d2:bb:a1:96:74:39:
         c6:28:de:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:39:22 2026 by rpki-client