Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f01c3b1-b940-3c97-9cea-029ffef52889.roa
File:                     5f01c3b1-b940-3c97-9cea-029ffef52889.roa (raw, json)
Hash identifier:          muVuju66oE/HvqwgXNnA8ptWfqRZCy2WqoUja5EwQFo=
Subject key identifier:   D5:BD:A2:AC:E2:91:30:07:1A:28:3F:02:C8:8E:78:37:BE:70:47:19
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D20AF483C636FBF2A015CEF80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f01c3b1-b940-3c97-9cea-029ffef52889.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     14789
IP address blocks:        172.68.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:48:3c:63:6f:bf:2a:01:5c:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=b5a808e5-f13f-4984-b582-45c6045b912b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2b:ad:37:cc:56:85:c0:ea:4f:9c:31:f9:a3:
                    3f:dc:30:0d:b9:77:e9:99:1e:44:b2:75:2c:42:2e:
                    73:06:36:5e:f9:40:0f:c5:da:fe:55:fe:d6:0c:fa:
                    c0:14:9e:5d:d6:f2:4d:09:28:76:5e:a7:73:9c:bb:
                    a0:e5:3d:c5:27:8e:16:0d:94:be:18:4b:18:82:3d:
                    52:bc:00:a1:79:a6:3a:4a:b2:51:a7:7b:6f:97:a5:
                    af:0b:71:e4:96:7b:4b:b9:08:3f:6d:3a:9d:af:1d:
                    96:dc:1f:bc:c0:f3:cb:6c:c9:4f:5d:ac:b1:7a:30:
                    bf:bd:7d:e0:db:61:ea:3b:24:23:e6:8d:c8:23:8c:
                    6c:ba:96:1e:80:44:26:c6:da:f1:29:3e:a4:89:57:
                    ed:bb:28:e4:64:7e:7e:1d:50:57:3d:c8:04:ef:16:
                    e8:32:1b:cb:32:93:87:f3:4a:9b:0b:34:8f:26:8f:
                    d3:75:03:82:42:16:2e:7a:8d:a1:bb:bd:46:41:c0:
                    3e:b9:3d:07:55:4a:12:ff:e3:49:6f:43:7f:d4:10:
                    7c:1b:9b:e6:be:26:3d:f0:2a:42:4f:ed:64:52:9c:
                    c2:c1:02:99:42:66:54:cb:fa:aa:9f:ae:7f:c4:bb:
                    cf:04:fc:f3:74:c5:c3:99:fb:39:4f:c9:68:2e:37:
                    0a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BD:A2:AC:E2:91:30:07:1A:28:3F:02:C8:8E:78:37:BE:70:47:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f01c3b1-b940-3c97-9cea-029ffef52889.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:58:25:cd:f0:b7:dd:6d:3c:6d:b0:c2:06:1c:36:0f:41:ad:
         95:3e:66:92:49:e3:70:c1:f6:fd:34:36:6d:09:c9:1f:fb:31:
         27:7a:a8:7b:e0:f6:c7:86:f6:d0:3a:2b:78:69:ea:95:bc:63:
         3e:01:5a:e7:8c:89:63:86:b3:ef:b5:57:a6:9d:b9:5c:cc:b4:
         b6:b4:6f:36:83:3f:79:47:e8:9d:39:3c:c7:aa:43:c7:66:8d:
         ad:bf:8c:df:93:30:aa:fc:2d:69:15:85:20:16:1e:11:1f:fa:
         e7:85:2b:98:c5:fa:92:60:7a:49:28:9a:e0:e2:9f:c7:a4:17:
         d0:18:12:ce:d2:cf:87:2c:b4:4a:c7:ac:5f:05:1a:39:e9:11:
         b8:6c:a6:bf:bd:97:ee:33:d6:48:46:21:9c:8f:9d:bf:79:38:
         b3:38:a5:fb:94:ca:9f:09:aa:08:25:7e:f5:9c:19:79:69:c1:
         1b:60:36:6f:3f:40:c1:28:11:f7:f7:c7:cd:d9:2d:73:31:a3:
         db:76:56:53:22:aa:c3:93:57:c5:d4:b7:ae:b4:96:2e:83:26:
         d4:28:12:8c:93:27:e5:50:0c:13:f2:35:a2:15:e0:93:7b:c5:
         cb:2a:dc:b4:e0:5f:e7:b0:2d:ed:59:cc:05:4f:05:96:01:e7:
         2d:20:20:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:49:45 2026 by rpki-client