Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/64dada41-a1e7-3f21-9240-9d3cbc668d68.roa
File:                     64dada41-a1e7-3f21-9240-9d3cbc668d68.roa (raw, json)
Hash identifier:          0SziMjt3w1JW7PzkwOLTNgmCDlWHLpQBizrmTzDoZtQ=
Subject key identifier:   8B:B6:79:61:44:4A:9F:46:86:9E:F5:CC:EC:B0:D3:8E:1F:C7:EF:1D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E51E9ECF752FC4C80E0F39640
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/64dada41-a1e7-3f21-9240-9d3cbc668d68.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     13335
IP address blocks:        172.71.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:ec:f7:52:fc:4c:80:e0:f3:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=c45c3f90-6494-4e40-bc42-b2aee0d03621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cb:fb:1a:01:5d:37:82:82:d7:29:21:53:8c:
                    73:1a:cb:7f:d9:f6:8b:7b:50:f7:42:64:75:9d:08:
                    b4:c9:1d:0c:14:e3:7c:cf:78:69:27:9c:5a:55:3d:
                    36:06:f9:68:3a:78:cd:4f:50:54:b5:83:14:2e:c3:
                    f1:5a:90:20:8f:10:32:8a:2b:66:d5:de:d3:80:c5:
                    bc:ea:30:92:d7:83:c0:3d:c1:54:6b:19:e6:b2:8d:
                    78:24:44:9d:01:08:6c:7f:64:3f:b2:a8:5d:13:01:
                    be:e9:3f:9f:0c:af:5a:73:b3:5a:7a:42:82:6c:e3:
                    3a:9c:f7:12:16:5d:c3:f9:cc:9b:bf:59:2f:27:89:
                    04:e4:ea:1f:75:9c:78:75:dc:32:4f:43:ad:74:15:
                    84:90:6b:4a:43:ba:90:5c:16:ec:1c:b3:6c:d5:f2:
                    ef:5e:01:57:74:57:98:6b:ae:f1:7d:62:87:85:22:
                    c4:af:7f:db:43:88:8f:eb:b9:68:fd:42:4f:63:40:
                    a4:b7:93:52:d0:94:03:e3:c2:a9:17:24:aa:8d:34:
                    ed:6a:88:91:61:fe:96:03:0a:fd:a9:8f:55:78:4d:
                    9e:b5:31:77:c7:2f:ec:c7:2a:79:18:10:24:64:48:
                    af:24:e5:83:08:b0:ec:9c:64:f1:1f:b7:58:3f:56:
                    81:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B6:79:61:44:4A:9F:46:86:9E:F5:CC:EC:B0:D3:8E:1F:C7:EF:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/64dada41-a1e7-3f21-9240-9d3cbc668d68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:29:b1:80:84:9b:1e:6c:0e:b1:56:17:41:23:57:f8:a3:c7:
         a5:d3:c6:96:62:d4:84:06:6e:f4:1b:04:f8:98:c8:c4:ef:c4:
         9a:ef:7c:1a:69:18:66:c1:2b:0d:c4:6b:1d:54:5b:db:9a:74:
         cb:07:5d:f0:12:12:7a:4e:0f:f3:11:68:4d:b5:5a:5b:be:41:
         48:f4:4d:f5:23:2d:96:66:fa:02:57:e5:fd:d4:46:71:1d:7b:
         ed:7f:eb:fb:69:d8:b3:d6:5f:bb:25:87:6c:a9:25:bd:74:47:
         d7:43:a4:d0:68:66:14:7f:e7:12:d8:63:fa:2c:57:c1:60:91:
         52:71:f2:e7:f2:6e:0b:cf:c4:3c:f2:d0:9a:96:9d:22:28:93:
         2e:89:29:c8:c9:70:ef:55:c9:49:2f:9d:04:4d:93:9a:85:75:
         98:90:6b:1a:fc:24:a1:84:da:eb:d9:a3:1b:25:7a:fe:7f:cf:
         1e:ca:f7:99:82:67:14:5d:6f:dd:73:b8:6f:c4:a3:52:18:9d:
         3e:26:4f:73:3b:21:2d:c4:38:76:39:16:4f:bd:a7:54:a9:4d:
         0d:e4:f0:2b:b6:7a:1f:a7:8a:7a:26:71:bf:0f:0b:20:86:f6:
         bd:e7:41:0d:25:e0:02:3b:23:a4:57:14:e1:f3:93:8f:f7:9f:
         b5:4e:67:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:48:06 2026 by rpki-client