Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c036fd1-a80e-33c5-a8c0-aeaf0d414728.roa
File:                     5c036fd1-a80e-33c5-a8c0-aeaf0d414728.roa (raw, json)
Hash identifier:          7Vac2jmjrzikSw1Hx97kTXhpVzOMr0VUOlpu8uPGHWM=
Subject key identifier:   59:94:48:A2:B7:33:FA:10:F4:9F:56:EB:81:71:EA:82:91:A8:28:BD
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EE42333FDA418640DD7261C80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c036fd1-a80e-33c5-a8c0-aeaf0d414728.roa
Signing time:             Wed 19 Aug 2026 18:03:45 +0000
ROA not before:           Wed 19 Aug 2026 18:03:45 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.68.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:33:fd:a4:18:64:0d:d7:26:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 19 18:03:45 2026 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=69bd6f3e-55bd-41ce-a5e8-3712a5ded050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:49:1a:46:ed:63:b7:fe:38:c6:b2:67:5a:09:
                    b8:e7:41:2f:51:5e:0b:23:2d:67:2c:fa:44:3d:31:
                    17:8e:61:a6:d8:3b:64:2f:1f:84:f3:f3:04:d8:cf:
                    82:f1:e2:45:9b:06:26:ba:3b:01:4d:e9:32:0a:2b:
                    07:0c:76:26:8e:c8:d9:c1:ef:9d:0c:31:4a:33:4b:
                    9c:d1:b1:65:f5:55:14:7a:ed:d2:3a:c7:f7:ea:e2:
                    b0:90:7f:a0:21:6d:15:1b:e8:1a:83:cc:dc:bf:49:
                    e8:71:c3:df:6a:f0:f2:12:a3:06:66:4f:14:40:34:
                    3a:35:c3:93:22:04:d0:17:3e:e9:1d:4f:e9:01:47:
                    e8:dd:1f:9d:01:fb:8d:12:4e:45:a0:c8:3c:9a:79:
                    29:f8:85:aa:e5:3d:5f:c9:66:25:23:c9:70:e5:59:
                    48:4d:6b:9c:4a:bb:c6:5c:11:68:7e:4c:06:99:74:
                    8e:67:5b:d2:ee:c0:59:54:ba:96:ac:ce:32:5e:3d:
                    66:c4:90:e5:3b:8a:a0:0a:87:21:67:ed:b4:e2:0d:
                    12:07:4e:68:ab:9e:44:90:90:0e:43:ef:d7:e1:b6:
                    ee:4d:49:df:f1:fd:2d:5a:10:a3:5b:47:a7:76:66:
                    07:40:95:69:23:c9:b5:d6:4c:f7:ce:7c:5c:cb:91:
                    c0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:94:48:A2:B7:33:FA:10:F4:9F:56:EB:81:71:EA:82:91:A8:28:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c036fd1-a80e-33c5-a8c0-aeaf0d414728.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:b9:8b:59:4f:15:2a:e2:ef:00:91:4f:8e:24:dc:e2:c3:e2:
         7e:df:70:4e:ea:d2:45:eb:53:2a:06:7d:fc:5d:04:a6:7c:a2:
         62:cf:e9:3e:1e:21:08:57:82:20:71:06:d3:54:96:4c:23:4e:
         3c:c0:e2:02:23:52:6a:a1:f6:88:80:f7:8a:df:28:00:55:2e:
         80:35:2a:73:78:0f:bd:09:f5:91:66:6b:b3:dd:b0:22:7f:62:
         87:dd:43:7b:cd:02:a9:3c:d3:0d:5a:d9:50:fc:67:e7:29:57:
         d3:cb:59:e3:0e:97:0b:af:06:91:5b:26:f5:61:a0:2b:ac:35:
         49:71:01:59:b3:28:a4:d3:46:54:36:46:44:32:bf:b7:5c:ae:
         df:15:83:7a:82:49:39:ca:04:be:66:3a:a5:b8:82:2b:11:cf:
         28:d2:99:72:ec:a1:6a:99:1f:17:23:a7:18:2d:09:d2:ed:a0:
         93:2b:ad:3d:f2:c8:00:1e:db:de:bf:0d:aa:59:87:06:e8:0e:
         d1:ae:ad:48:65:03:54:1a:2b:95:57:ab:55:76:78:1f:2c:94:
         26:f4:42:25:78:5c:8c:20:ed:b9:f3:b7:8b:14:f8:be:f0:7a:
         b1:7c:d2:9c:34:d1:42:8b:e9:94:73:73:0d:9c:ba:c7:aa:e6:
         e9:6d:e4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:57:49 2026 by rpki-client