Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/68b7a134-6bf9-3359-a44d-62886ae81902.roa
File:                     68b7a134-6bf9-3359-a44d-62886ae81902.roa (raw, json)
Hash identifier:          OtRzxHZC0fATz6BroKJvZqA5Jw9uFvMdkqmKSyEa/yA=
Subject key identifier:   62:CD:21:83:64:6B:36:BC:45:FA:A8:7F:3E:A3:B8:D9:39:C5:27:FD
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEA876E7A6CB02D4C3729FAC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/68b7a134-6bf9-3359-a44d-62886ae81902.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        172.71.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:6e:7a:6c:b0:2d:4c:37:29:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=28eb0419-4825-427f-820d-4206a59d074f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0a:b5:19:63:7b:5a:f7:e1:fc:c4:75:ad:46:
                    39:66:1a:d4:90:08:cc:26:b5:ed:d5:0b:a2:51:1d:
                    ee:a5:2d:83:62:40:03:b2:cd:d4:6d:e7:06:4a:ab:
                    63:85:de:18:94:66:15:42:44:ea:76:4a:54:df:52:
                    5c:d5:93:67:21:2b:98:ea:7e:f7:b9:60:df:a3:63:
                    84:68:76:fe:68:23:37:a0:e0:a9:3a:20:e1:fb:bd:
                    a6:de:1d:17:ba:99:4f:76:9e:8b:b5:ce:3b:cd:f4:
                    f5:1b:d5:d1:0a:7d:11:ca:ff:73:fb:dc:9c:e2:0b:
                    f2:df:d0:2a:31:25:0e:18:e9:a1:4f:a0:60:7c:6c:
                    50:bb:0d:46:6d:07:38:90:8d:a1:3d:40:ee:e8:e1:
                    33:a8:43:fb:93:c6:43:d9:9e:38:2b:f8:77:aa:f5:
                    a3:5d:72:74:35:56:ba:51:b6:d4:6a:ab:3b:b0:b2:
                    83:d3:8c:48:a6:72:2f:bc:64:04:da:f8:1f:fa:7a:
                    cf:9f:c7:f4:cf:bf:30:8f:00:0e:a7:1f:8a:2d:87:
                    b0:e2:1d:d1:6f:b2:c1:36:63:23:18:55:d1:72:ae:
                    4b:2d:85:4b:20:e1:0a:89:ff:6e:c3:57:4a:e7:fd:
                    a9:ba:5d:32:31:e6:4b:4a:c3:00:1b:39:13:e0:8b:
                    c8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CD:21:83:64:6B:36:BC:45:FA:A8:7F:3E:A3:B8:D9:39:C5:27:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/68b7a134-6bf9-3359-a44d-62886ae81902.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:e3:47:04:29:62:61:3d:04:b2:cd:9e:51:53:fe:6c:c2:fa:
         48:9b:c7:35:55:e0:83:43:5f:26:f2:fd:2e:f1:83:3d:ea:79:
         ab:f5:80:9c:e4:03:f3:65:5f:2d:ee:89:66:46:ca:f8:86:ec:
         02:65:46:3f:72:e0:46:37:d6:8f:a0:cc:78:03:2d:77:d5:ba:
         ff:0e:54:8a:a0:2b:36:75:53:f6:ab:fb:37:73:73:bc:b8:e2:
         37:45:bd:66:e3:41:b3:24:3f:63:38:0b:4a:4e:ca:3b:fc:a6:
         16:1d:1d:69:95:75:22:93:e3:82:01:b6:52:8f:52:48:50:6a:
         f8:57:b9:9f:da:c1:1b:ac:c7:b7:8d:6f:33:10:9a:b1:8f:1c:
         ec:a2:07:26:76:f8:99:98:07:d7:ee:d5:97:d7:dd:9b:52:aa:
         9c:66:be:c7:ac:4c:8c:71:69:41:84:bb:f1:22:2e:6b:59:41:
         d7:f2:7c:fe:29:a3:d0:63:e8:9a:f8:71:dd:33:64:a9:31:8f:
         c3:17:00:0f:42:ef:fd:07:22:c8:1b:fc:3a:95:25:0a:44:4a:
         f2:42:5e:50:dc:bd:99:7d:4a:96:d1:fc:32:23:ba:74:87:0a:
         5f:1f:1d:50:99:0c:86:f2:be:6b:95:60:9a:6c:88:dd:83:07:
         86:87:c7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:10:56 2026 by rpki-client