Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f7b260a-9bf9-32f1-bf09-bcff7a2df3fb.roa
File:                     5f7b260a-9bf9-32f1-bf09-bcff7a2df3fb.roa (raw, json)
Hash identifier:          UOCvCAUGstrD/ZgTXPUpO9bHcKytwKJ0QpdJlML47X8=
Subject key identifier:   2E:61:B8:82:41:22:A7:DB:24:7F:F9:52:56:E9:05:86:CA:73:3E:CE
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F8DD876D119DE254CF1418700
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f7b260a-9bf9-32f1-bf09-bcff7a2df3fb.roa
Signing time:             Mon 19 Oct 2026 13:00:12 +0000
ROA not before:           Mon 19 Oct 2026 13:00:12 +0000
ROA not after:            Sun 17 Jan 2027 14:00:12 +0000
asID:                     13335
IP address blocks:        172.70.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:d8:76:d1:19:de:25:4c:f1:41:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 19 13:00:12 2026 GMT
            Not After : Jan 17 14:00:12 2027 GMT
        Subject: CN=98ab4e1a-3071-47e4-9fc6-749fb5c1e47d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a4:09:52:39:76:9c:8a:48:db:91:c8:5c:bd:
                    bc:84:64:b9:75:cf:0d:96:84:64:c3:8e:ec:86:48:
                    d0:43:4c:2f:9c:57:b1:9e:86:6a:59:9c:11:78:b6:
                    44:54:e4:49:9e:36:38:d7:32:76:fe:75:00:e9:f8:
                    40:6d:ce:5e:8a:cc:31:ed:ae:9f:19:69:b9:cf:43:
                    78:12:c1:9c:ff:22:ac:8c:ca:94:b4:ca:cc:4c:df:
                    a1:94:4c:0d:5d:e5:4a:8a:db:cd:7d:44:ad:8b:98:
                    6d:8d:76:3e:a3:90:a2:a5:bd:e4:1c:cb:66:0c:36:
                    9e:de:68:a9:bf:b8:39:09:bc:b6:33:ed:05:a4:0e:
                    9e:a7:b1:e7:b8:be:78:77:90:77:0a:ed:92:86:5c:
                    8c:94:7f:66:a3:a4:a4:72:4f:cb:51:71:55:db:49:
                    1e:15:41:fd:a0:bf:5d:6d:32:73:13:f7:7c:1c:a6:
                    21:2e:77:23:d4:16:25:2f:93:da:a7:9a:01:cd:f5:
                    2a:94:c3:fb:5a:25:31:ed:19:34:44:ae:5b:ab:22:
                    b7:14:ef:58:ba:6b:7d:eb:3d:2d:d7:63:d2:55:69:
                    57:9c:af:06:ef:d2:0a:35:1b:fc:c1:67:65:a4:ef:
                    a6:06:eb:c4:b2:17:0a:c6:ce:fd:9e:b6:6c:ad:46:
                    89:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:61:B8:82:41:22:A7:DB:24:7F:F9:52:56:E9:05:86:CA:73:3E:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f7b260a-9bf9-32f1-bf09-bcff7a2df3fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:81:ae:ba:46:f2:3a:d4:72:13:26:e9:69:74:61:6c:de:76:
         35:90:65:39:3c:bc:62:94:3f:a8:78:d6:c4:67:a7:1d:4a:5a:
         b7:db:a5:e9:c1:a4:bd:50:6f:69:45:50:06:03:d8:0d:b3:f7:
         cd:46:b6:27:c8:ca:3f:d0:2b:ac:03:b6:c4:d6:c6:1d:3d:8c:
         21:1d:5a:a6:01:8d:30:4d:49:85:59:6e:fb:59:89:55:41:29:
         04:47:51:d0:36:aa:d8:86:7d:97:25:b9:99:b7:3b:8b:61:05:
         59:0a:4e:77:0f:93:0a:eb:25:28:b8:f5:93:12:aa:bc:b3:a9:
         e5:fc:9e:a0:c4:d3:c8:1f:c0:1f:fc:a5:fc:b2:20:35:aa:4b:
         45:2a:84:2f:e0:0c:57:5e:19:04:71:ef:a0:cd:4f:cd:ec:d2:
         42:c9:d0:e3:19:bc:81:4e:86:ad:91:54:0c:fc:54:b1:a7:dd:
         c2:7d:a4:87:1c:42:af:3d:fa:20:bc:b6:0c:74:d8:b6:2e:eb:
         c2:03:a0:bd:59:8e:27:74:94:25:75:07:d1:8b:36:ea:be:4f:
         5a:b3:c3:62:6b:65:15:48:b7:4d:01:a8:8b:c8:8f:ac:71:5b:
         63:82:ed:39:89:d6:85:64:ea:64:6f:20:09:a3:ad:92:40:87:
         32:48:12:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:41:43 2026 by rpki-client