Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b5d4932-dc15-3b11-b0c2-2a87a1ea9b03.roa
File:                     6b5d4932-dc15-3b11-b0c2-2a87a1ea9b03.roa (raw, json)
Hash identifier:          tSYQLtpnbxYCJWBL2Efwo/qxHMX87iwF182gWTEq0kw=
Subject key identifier:   2F:44:2A:6A:DA:C4:0B:B9:97:5E:2A:A3:54:29:FC:4B:27:0C:BC:29
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEEB7659269640BFB36A77340
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b5d4932-dc15-3b11-b0c2-2a87a1ea9b03.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     13335
IP address blocks:        172.68.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:65:92:69:64:0b:fb:36:a7:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=d44d241f-0a58-4f57-a97a-47b85a8e55a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:70:09:68:1e:cf:45:ec:01:3e:f1:21:73:b2:
                    35:36:6f:8f:d9:1f:91:5c:ac:a8:ab:b2:a5:8a:e2:
                    78:bc:10:6b:b6:a8:90:9c:56:26:68:0c:e7:69:34:
                    ba:d8:ae:e8:94:dc:c3:29:37:86:a4:f2:88:81:f9:
                    e1:89:df:d0:36:87:1b:e5:ff:f7:bf:32:4f:52:19:
                    c2:65:0c:1e:35:20:a0:23:32:be:32:51:c6:f8:1a:
                    06:c5:49:fa:a4:f4:bf:3a:3f:13:2d:7b:c1:6e:9e:
                    4e:31:a8:7a:84:77:d4:6d:85:fa:e6:1d:18:66:e3:
                    43:d0:be:a2:a0:02:c3:8c:91:b0:c1:39:7e:13:72:
                    1b:47:0f:9b:d4:6e:98:b1:08:c1:84:63:43:e4:4a:
                    c4:c5:b7:51:c3:d3:2c:5e:c5:78:37:12:ff:50:e8:
                    96:29:a9:e1:d1:45:ca:25:c6:6a:da:00:c7:e6:b4:
                    90:3a:4f:33:ee:e2:3e:7a:2c:c7:2a:f9:c5:6e:a1:
                    e1:ed:75:a1:a6:98:5a:bd:2e:cd:ff:86:4d:38:da:
                    b0:41:45:1c:de:d5:1a:a9:56:12:2c:9d:dc:d7:9e:
                    1d:d4:82:3d:c1:86:bb:eb:2e:9c:8b:1e:e7:c7:c4:
                    74:0c:b0:b4:bf:5d:96:50:68:5c:87:15:f7:98:0d:
                    63:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:44:2A:6A:DA:C4:0B:B9:97:5E:2A:A3:54:29:FC:4B:27:0C:BC:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b5d4932-dc15-3b11-b0c2-2a87a1ea9b03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:76:07:aa:31:29:fe:c0:75:ee:d0:b0:fb:89:fc:be:f6:dd:
         b2:1e:fd:f7:73:21:76:3a:98:a1:15:54:62:42:fe:a6:36:22:
         8a:6e:d6:c2:86:ef:fa:a6:37:30:c7:d7:72:36:2d:22:fd:7d:
         d6:b0:5b:6b:ed:87:72:ce:33:a1:10:14:20:f1:cd:df:d8:3c:
         77:58:eb:fc:01:14:67:44:0e:0b:ef:7e:5b:8b:f9:b3:fc:8c:
         f9:ab:d5:4b:95:00:98:11:4e:b4:ca:95:46:98:44:91:99:c1:
         16:0d:f6:66:0b:0f:65:84:45:72:9b:21:c1:ba:5e:1f:97:05:
         4e:4d:59:3b:c8:50:59:6c:86:97:04:07:04:d9:ab:89:35:a3:
         22:28:6b:56:af:b8:4f:a0:2c:87:15:eb:6e:2f:4c:92:0d:56:
         de:77:2c:f5:12:0d:04:ce:31:f2:1e:e0:b0:51:4a:9f:d4:5d:
         e8:ee:ad:a3:43:72:14:8e:43:e4:ce:72:7c:6b:01:55:e4:de:
         a6:85:50:b2:2e:be:ad:6c:ee:df:23:58:5e:e5:eb:f7:3b:cd:
         6a:00:33:aa:c1:68:38:03:ac:36:03:e0:a4:16:00:ef:f4:52:
         a4:3b:e8:09:01:a2:8f:47:55:88:26:b6:6d:79:08:d7:f1:6d:
         76:62:19:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:07:02 2026 by rpki-client