Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5876d04a-9272-3f3e-beff-37184a745d28.roa
File:                     5876d04a-9272-3f3e-beff-37184a745d28.roa (raw, json)
Hash identifier:          6D5cvdyEfk7VkJz5coJ9tKOym1x8qHPm1oHzP4eK+8w=
Subject key identifier:   C1:CE:D6:15:13:4E:F7:8D:81:BB:92:EF:74:31:91:3D:47:77:A0:26
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EE4233B83BD18E0D8F1393200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5876d04a-9272-3f3e-beff-37184a745d28.roa
Signing time:             Wed 19 Aug 2026 18:03:48 +0000
ROA not before:           Wed 19 Aug 2026 18:03:48 +0000
ROA not after:            Wed 18 Aug 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.69.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:3b:83:bd:18:e0:d8:f1:39:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 19 18:03:48 2026 GMT
            Not After : Aug 18 04:00:00 2027 GMT
        Subject: CN=c4dae761-b062-4e50-ae9a-be40a2c6673e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:96:af:e7:26:fa:88:ee:36:6b:ea:f0:05:cc:
                    d0:82:9c:cc:d1:ae:d6:59:30:7e:fb:6b:bf:81:af:
                    59:34:3e:13:37:7e:2c:42:3d:42:26:d4:59:f4:5b:
                    2c:66:2f:00:cc:ce:b2:ac:97:30:7f:96:0d:75:c2:
                    4c:52:47:54:7a:e5:36:02:f2:ea:2d:7f:d1:8d:c4:
                    e0:71:72:95:e6:54:42:ae:f1:a0:21:5c:a4:ab:7e:
                    13:33:f9:1f:70:4b:3c:f4:d7:55:a2:e3:e9:e9:a2:
                    84:0e:51:a0:ea:e8:b3:c8:6d:69:a2:ac:1d:87:b9:
                    b1:b1:6c:c7:1c:7e:38:20:f1:52:1a:12:41:22:7b:
                    cb:58:1e:1c:a3:51:e8:fe:3c:d1:4a:ea:a8:ab:0f:
                    86:ee:1b:94:f5:e8:4c:83:78:5e:f5:de:50:77:ae:
                    54:cd:a4:59:a2:c3:b5:ef:bf:8d:11:1c:66:8e:fd:
                    e8:3e:9e:7f:d1:b9:97:84:6a:db:a4:bc:87:6b:f8:
                    2b:69:7a:ef:8b:d7:77:f8:47:c6:7b:10:e7:51:d8:
                    ac:25:d5:28:39:49:39:77:af:21:40:b1:b0:d2:22:
                    5f:e7:b5:05:86:2f:db:e7:1c:34:91:0b:da:63:3f:
                    2c:3e:6a:84:d1:da:b6:63:21:17:7a:e2:c9:8a:6b:
                    7a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CE:D6:15:13:4E:F7:8D:81:BB:92:EF:74:31:91:3D:47:77:A0:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5876d04a-9272-3f3e-beff-37184a745d28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:e6:5f:78:12:75:c1:dc:c9:0d:80:86:68:fc:ad:1d:74:0b:
         cd:f1:5d:4d:73:72:e2:c0:01:a8:5f:85:63:06:b7:f8:c2:bc:
         4e:e4:c9:7b:77:11:fb:17:9d:c5:f6:8a:b1:63:d8:22:58:d1:
         9f:d4:ea:07:cb:f8:75:7c:af:22:1b:56:14:f0:8b:a3:0b:e0:
         7b:9b:0a:d3:d4:41:2b:14:8f:a6:5b:1d:4d:23:d1:c4:01:f2:
         fb:11:cb:74:50:28:f7:9e:18:c9:75:74:de:25:87:58:f9:07:
         6a:1d:0f:f5:b2:87:ed:0f:d7:b6:c4:ac:dc:45:be:bd:cd:32:
         d7:e2:cf:4f:df:37:64:a9:99:5e:7a:df:f0:50:4a:5d:92:c6:
         1c:63:d1:6c:b9:3f:00:11:b8:08:bf:64:d4:5b:37:57:63:2c:
         3c:a4:2b:29:63:26:32:d4:33:79:1c:ca:6d:22:f4:94:e5:6c:
         c4:62:39:70:15:83:20:76:9e:2d:e1:46:00:71:81:b0:d5:2f:
         3e:a2:40:fb:83:8a:ab:d9:8e:ae:bc:10:f4:fa:97:e3:db:dd:
         2f:a0:1e:53:6a:ed:82:4d:e2:ce:bd:ef:14:37:b1:96:99:2b:
         bb:34:fa:4e:b9:d9:1c:00:4f:7b:e7:c5:82:8b:26:b1:3b:bb:
         72:3b:d2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:16:46 2026 by rpki-client