Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a6b75dc-d449-3359-8d1d-fe73c077c81d.roa
File:                     4a6b75dc-d449-3359-8d1d-fe73c077c81d.roa (raw, json)
Hash identifier:          rGOzCW/JyVyfSMqizu+plsc2YUR4CqpQiyCwAnuyVtY=
Subject key identifier:   72:DE:C2:6E:17:58:B3:8A:18:61:17:44:DF:82:8A:F5:A7:ED:8A:11
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EE4234B7F802B50D4D58A2000
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a6b75dc-d449-3359-8d1d-fe73c077c81d.roa
Signing time:             Wed 19 Aug 2026 18:03:56 +0000
ROA not before:           Wed 19 Aug 2026 18:03:56 +0000
ROA not after:            Mon 20 Sep 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.67.0.0/20 maxlen: 20
                          172.67.16.0/20 maxlen: 20
                          172.67.32.0/20 maxlen: 20
                          172.67.48.0/20 maxlen: 20
                          172.67.64.0/20 maxlen: 20
                          172.67.80.0/20 maxlen: 20
                          172.67.96.0/20 maxlen: 20
                          172.67.112.0/20 maxlen: 20
                          172.67.128.0/20 maxlen: 20
                          172.67.144.0/20 maxlen: 20
                          172.67.160.0/20 maxlen: 20
                          172.67.176.0/20 maxlen: 20
                          172.67.192.0/20 maxlen: 20
                          172.67.208.0/20 maxlen: 20
                          172.67.224.0/20 maxlen: 20
                          172.67.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:4b:7f:80:2b:50:d4:d5:8a:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 19 18:03:56 2026 GMT
            Not After : Sep 20 04:00:00 2027 GMT
        Subject: CN=552df0c3-280c-4cd6-833d-4252e2ec30ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6a:76:69:d8:68:6e:45:0c:7f:aa:fd:d3:05:
                    38:60:18:f6:9d:98:df:c0:64:fa:ba:01:e0:4f:ac:
                    da:58:e4:fd:9f:86:14:50:54:24:84:cc:93:b9:83:
                    70:34:dc:4d:b9:b6:13:0d:34:75:41:bb:dd:f9:ae:
                    61:b4:f9:0e:ad:6b:9f:34:33:d0:29:68:f8:82:e2:
                    f7:ee:df:c2:f2:71:8e:1c:82:6d:e7:55:43:0e:f8:
                    30:77:33:c4:78:29:e5:7e:50:8c:81:1b:87:82:b6:
                    b2:26:09:fd:f8:c6:9a:a8:02:f4:63:09:42:37:4f:
                    39:6c:ff:0d:15:e7:76:2d:af:b2:a3:c6:e1:45:96:
                    9a:99:ac:22:12:cd:2c:95:0b:8b:80:ea:95:ce:a4:
                    dd:2a:1f:42:27:d8:a8:f9:dd:6e:05:3e:5d:61:17:
                    79:2a:bf:6a:c8:3f:37:96:0c:b7:73:81:b9:f1:c5:
                    0b:26:93:d6:b3:a8:60:47:6a:e4:02:34:97:af:5d:
                    30:12:61:3e:79:8c:c3:36:b6:28:1a:29:cc:65:0e:
                    19:3b:51:23:ad:de:b6:a2:a3:e7:81:93:7f:54:00:
                    ac:c9:c9:53:00:1c:5e:29:26:5d:f4:0e:0f:5d:54:
                    bd:d7:ed:74:d0:7b:f6:01:8a:a3:10:90:f7:7f:b2:
                    6d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DE:C2:6E:17:58:B3:8A:18:61:17:44:DF:82:8A:F5:A7:ED:8A:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a6b75dc-d449-3359-8d1d-fe73c077c81d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.67.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:10:35:7e:a3:55:7f:3c:21:b2:92:c0:7f:96:1b:3b:6d:fb:
         95:ed:d2:2a:d1:22:25:15:bc:25:dd:49:88:6a:cb:af:96:d0:
         01:a2:4e:0f:2a:c3:e0:cf:c9:75:3e:2c:bb:af:b4:99:ba:99:
         b9:55:44:54:0a:6b:2d:17:54:f8:ef:8a:f4:05:cb:44:48:05:
         b2:c6:00:75:15:ef:d0:5c:cd:77:3c:cc:34:d7:b8:a0:e8:94:
         64:3f:66:b3:ea:ce:98:3e:94:08:4e:26:5a:06:e3:70:39:4e:
         02:ef:ab:8e:10:fc:35:3b:2c:fe:b8:98:eb:2e:82:1e:b7:4a:
         23:1f:cc:b3:ac:3c:e3:99:a1:2a:bf:20:1b:5c:00:51:d3:f0:
         0f:bf:e7:93:de:a0:d8:23:37:92:da:31:e8:58:3e:7f:d9:66:
         28:da:fa:45:25:c4:0d:a3:c8:df:ab:d3:c4:e4:44:bb:f3:04:
         0c:cf:27:6b:12:93:c0:41:4a:98:18:97:f1:6f:6f:ed:c1:c7:
         45:91:26:d9:42:b3:b3:da:0e:67:90:0e:b0:62:7d:c8:e1:c1:
         dd:75:2c:40:02:14:9b:ae:00:d9:ff:b8:7c:b7:9b:8b:8a:e8:
         eb:99:36:fa:44:45:9b:a1:7b:fc:cd:f6:d1:d2:3f:bd:a7:15:
         0d:0f:ed:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:57:36 2026 by rpki-client