Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b869e47-e643-3c42-a312-ea107bdf8b56.roa
File:                     6b869e47-e643-3c42-a312-ea107bdf8b56.roa (raw, json)
Hash identifier:          wJGGSyWoUrnujS5bAAT02gZwc81vxnh/E38Kxl8qikw=
Subject key identifier:   57:67:A4:31:3E:F7:CE:34:3C:FA:B2:CF:10:CD:65:2E:C0:69:C7:67
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E3E5F51B9E7721B2053D80000
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b869e47-e643-3c42-a312-ea107bdf8b56.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     13335
IP address blocks:        172.64.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:51:b9:e7:72:1b:20:53:d8:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=8d71c938-ea35-4b5d-ace3-e10a7c18f5fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:48:5a:ab:1b:0a:f6:8d:e8:52:d8:20:18:6a:
                    47:fc:6e:d2:29:ff:d3:8e:44:f1:fc:f5:c7:80:7c:
                    aa:22:c8:9d:c0:9e:c3:ea:2a:28:0c:c7:fd:db:22:
                    49:28:d4:c9:db:d7:d6:50:b6:bf:55:43:60:3b:22:
                    0d:04:a3:88:7d:d6:9d:a7:b1:48:b2:e2:47:5c:84:
                    a0:0e:c6:d4:25:20:37:8e:f0:b9:30:26:1b:01:6b:
                    79:e8:bd:f8:b0:c2:5e:da:f1:91:d2:f3:f9:35:51:
                    7c:e6:30:2f:1f:35:83:10:be:5f:98:1c:04:13:8c:
                    89:43:52:47:16:e3:96:66:b0:67:43:44:3c:5e:dc:
                    3f:79:45:ad:57:f9:05:5d:40:57:2c:57:11:e4:ed:
                    8d:96:24:38:7b:94:0d:3f:96:53:30:46:39:6c:68:
                    0c:c1:9e:96:3d:95:68:c6:a5:b8:ea:34:71:4e:58:
                    c4:0d:2d:50:e6:7d:99:10:35:ce:54:00:12:d2:7d:
                    50:79:60:27:d7:79:c9:b7:9c:ee:11:29:7b:e6:6f:
                    0f:0a:a4:38:38:9a:8d:64:ee:a1:cc:e4:e0:fd:b4:
                    e1:29:8e:e7:a6:b9:4c:8a:33:15:d6:13:d3:4b:10:
                    56:8b:cb:54:24:93:c1:38:21:39:60:4a:94:bc:e5:
                    0b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:67:A4:31:3E:F7:CE:34:3C:FA:B2:CF:10:CD:65:2E:C0:69:C7:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b869e47-e643-3c42-a312-ea107bdf8b56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:8b:1b:fe:5c:68:0e:90:7c:08:57:fe:bf:f0:34:06:90:8d:
         b1:6b:f9:ff:c0:94:64:d8:f0:76:c8:71:80:37:10:d0:3d:86:
         bb:c8:0a:29:48:a3:23:66:f2:28:72:40:ae:8a:d9:97:c3:ca:
         bb:60:3f:67:33:9c:6c:43:cd:b3:8e:24:98:34:93:25:9c:29:
         3b:03:61:36:32:45:9f:54:fa:ec:6e:19:f5:b2:5a:48:dc:69:
         e3:21:74:02:7d:62:1d:b4:95:d2:e8:68:64:c8:03:9b:a9:81:
         69:82:dd:37:cf:58:7c:2d:37:24:91:b4:e6:e8:2d:71:86:4d:
         ba:25:41:34:1a:4a:80:c6:43:f9:51:23:cf:9d:8c:01:ac:0a:
         0e:0a:22:47:fd:f1:13:21:97:fe:ac:ed:d7:a9:1a:55:ba:c0:
         8e:22:af:2f:b7:d4:a7:ad:80:4d:0a:e5:b6:bb:0a:1f:80:4b:
         f0:4a:a4:fb:b8:38:1a:05:03:9e:9f:3d:a3:fa:1f:a0:77:b4:
         35:3e:69:68:7c:44:5d:43:96:be:86:8f:14:cf:38:e4:f5:e4:
         51:26:6f:40:13:4a:7c:32:88:04:fb:af:69:b9:79:be:0d:55:
         c9:34:fa:95:9f:7c:35:a6:03:29:29:cc:ec:3d:87:3e:17:4c:
         4b:dc:78:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:47:18 2026 by rpki-client