Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5de7646d-f907-355b-9e28-57c8ca681211.roa
File:                     5de7646d-f907-355b-9e28-57c8ca681211.roa (raw, json)
Hash identifier:          sPjJdUmbo53NBpjli2+2QiE9iKedkN47+2931Tzzwik=
Subject key identifier:   2F:80:BE:AA:C6:7D:70:C6:7D:89:05:4D:51:4F:9E:ED:4A:6E:51:0E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEA8780249D698A2B80AD2120
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5de7646d-f907-355b-9e28-57c8ca681211.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        172.71.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:80:24:9d:69:8a:2b:80:ad:21:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=9ca3e1eb-7a39-4db4-91e3-10ed7ad1f3e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bb:44:00:37:a5:f5:a0:c1:cb:55:ea:1a:d4:
                    6a:78:25:6a:8b:05:dc:bc:60:5c:77:e0:81:30:65:
                    2d:f8:b1:fa:ec:76:2c:1d:3a:e1:f1:fc:d3:f9:dd:
                    3a:59:71:7d:ee:59:0c:8a:44:d0:43:e0:2b:70:d4:
                    64:80:74:4d:5e:d9:59:e5:a3:d2:e6:6d:04:07:e8:
                    cf:46:12:db:c5:31:bb:d3:4a:b7:d6:56:cc:57:3f:
                    c1:21:ee:36:79:e5:c7:99:2d:90:f9:45:d0:26:fb:
                    fe:b8:9d:31:dc:68:24:10:e7:94:1f:9d:7a:24:9b:
                    eb:20:a2:08:09:11:a4:9b:66:48:27:8c:7e:ea:86:
                    61:19:d4:ee:8a:ba:16:f7:4a:ab:24:8f:66:02:45:
                    21:5d:79:55:23:96:2a:9b:01:aa:43:e7:24:dc:8b:
                    51:dd:cc:3a:34:ca:19:18:c3:52:8d:4e:4d:fe:93:
                    15:e2:60:23:99:6d:8d:ee:fd:75:79:15:3d:86:fe:
                    39:37:18:31:d0:eb:62:e6:ab:64:69:71:ad:a2:48:
                    10:4d:76:8b:9e:a6:ca:a8:90:c0:89:7f:09:8b:f3:
                    a6:9a:81:3b:d7:83:f4:05:89:94:d2:a4:9c:96:2c:
                    8e:ac:f7:a5:e3:65:92:3d:b3:3b:8f:13:37:9b:77:
                    50:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:80:BE:AA:C6:7D:70:C6:7D:89:05:4D:51:4F:9E:ED:4A:6E:51:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5de7646d-f907-355b-9e28-57c8ca681211.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:d0:e9:14:f0:de:a9:da:87:7d:1c:22:3e:3c:62:63:bb:05:
         1c:58:4d:ac:e3:2b:c9:53:4f:7b:b7:7c:6f:f7:b6:9e:8a:78:
         fb:82:86:10:a7:0a:0d:51:28:4e:21:a1:c6:69:cc:4e:cb:21:
         f1:fa:6f:72:ba:97:f0:15:84:04:38:3b:07:d5:48:51:47:d6:
         79:b3:8c:74:a8:f5:61:d8:63:31:2f:64:3d:d8:a6:7d:41:af:
         2e:60:dc:15:17:11:46:c3:26:da:3b:07:49:b5:2f:78:7a:25:
         71:e8:d6:f4:71:72:c7:fd:e1:12:88:b2:d5:1e:87:9c:14:25:
         3e:b8:54:5b:80:4d:63:da:0b:7a:86:89:06:06:dd:83:cd:dd:
         06:c9:67:97:0f:97:31:11:52:ec:81:a1:ad:d7:12:56:99:20:
         b6:77:a2:df:99:6e:96:93:9f:3b:11:49:79:bc:48:74:a4:03:
         35:38:d2:5b:99:43:5d:2c:bf:79:69:aa:9a:c0:2d:05:05:61:
         1c:26:9c:ce:00:72:2a:77:a6:61:55:e9:ed:a7:5b:e0:a2:dd:
         57:0c:e0:f8:48:8e:e7:8c:6d:e7:74:af:46:fe:70:10:6b:3c:
         af:3b:e3:0b:bf:f3:a5:cb:53:f6:c1:54:17:20:6d:de:74:77:
         18:45:56:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:52:29 2026 by rpki-client