Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/70a1c225-fd7b-391b-abfb-217090082f34.roa
File:                     70a1c225-fd7b-391b-abfb-217090082f34.roa (raw, json)
Hash identifier:          P0rIKnd1VclU7uPD/lPhjNPkH1LV7ZF1PudZX5yAflM=
Subject key identifier:   E5:DA:7A:65:DC:5E:EF:FC:47:A5:70:16:5A:4D:2F:9A:E8:E7:5B:DB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEEB76A0ACE1EF337B257A580
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/70a1c225-fd7b-391b-abfb-217090082f34.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     13335
IP address blocks:        172.69.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:6a:0a:ce:1e:f3:37:b2:57:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=def1452c-d7f3-41bb-af62-383f2978dc8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a9:42:2f:7c:80:9c:96:31:96:57:3a:e9:67:
                    1c:cb:4b:d1:ad:d1:13:54:e3:02:62:35:1b:a0:13:
                    77:39:2c:d9:1a:ef:82:65:c0:c1:54:22:69:f0:c7:
                    eb:a6:ac:3e:86:33:3f:00:4e:cb:20:b2:50:94:c1:
                    8d:3c:7d:3b:e6:ec:cc:52:c5:45:b2:ac:ab:d1:c5:
                    6f:74:ee:bd:03:df:29:e6:d3:1b:e1:38:1a:b9:2c:
                    b1:3c:35:89:97:2a:7f:6b:f2:e3:2e:5f:53:77:a9:
                    45:7a:66:0e:3d:d2:fc:d7:a8:84:2e:25:5a:2f:8f:
                    51:f7:a9:ff:48:28:52:d0:46:0c:1b:da:7e:5a:53:
                    5c:2f:75:53:f2:0b:73:ae:a9:a5:ab:84:2e:e8:d9:
                    a2:83:3b:87:12:c7:81:a5:18:2d:9e:23:d0:71:01:
                    7f:90:b5:4d:5f:31:e6:2e:31:74:ff:a6:fd:a1:11:
                    42:97:1d:fd:3e:97:02:62:ca:72:6a:28:c9:d8:d8:
                    f3:fc:0d:eb:53:63:ec:ed:c5:26:8d:0b:c0:f3:51:
                    24:a9:f3:66:0f:f0:5e:96:01:71:cf:03:c4:81:a1:
                    81:d4:a4:f5:1f:92:ff:c8:c8:0f:ff:d8:2a:52:04:
                    a0:b1:4c:66:c1:5d:3b:80:3f:e6:c3:3d:66:ac:2d:
                    23:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:DA:7A:65:DC:5E:EF:FC:47:A5:70:16:5A:4D:2F:9A:E8:E7:5B:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/70a1c225-fd7b-391b-abfb-217090082f34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:d9:80:7c:47:d4:13:eb:fe:31:3a:0b:69:4a:6a:ef:d6:ff:
         50:6c:91:9d:77:59:de:76:47:8e:fd:2e:81:1d:5d:2e:c4:db:
         7d:fc:91:d5:a9:f4:1b:80:56:4b:c4:ac:ca:8a:32:1e:25:b4:
         df:77:f9:bc:60:5c:04:67:a7:b5:33:2f:87:62:07:30:22:70:
         a2:a3:8c:41:42:65:d4:56:6c:bd:50:2f:36:9e:07:1a:87:bf:
         87:1f:b1:8e:d0:77:ad:71:2e:bf:b6:c8:aa:eb:98:0a:b8:7f:
         89:0c:8a:2a:2c:48:6b:32:27:74:47:26:c8:c1:1f:88:52:0a:
         10:3b:d3:38:8a:a7:55:f3:38:42:0e:bc:e8:de:32:91:18:22:
         de:b9:3f:7c:dc:ee:6e:c7:0d:bd:28:37:47:e5:84:da:23:32:
         25:03:8b:55:42:7f:87:de:aa:bc:1a:55:2b:cc:30:85:b9:e3:
         2f:d2:ca:99:22:1c:eb:df:57:ae:da:b0:4e:62:30:df:5e:9f:
         51:1e:be:a3:6a:39:bb:f8:2e:2e:5f:1c:6c:95:42:44:85:2d:
         b4:50:37:45:42:7f:04:92:8d:ad:a2:99:f0:54:fd:da:2c:e4:
         b2:a8:17:02:aa:c3:df:e1:4b:96:b3:25:ee:f5:bd:10:d4:2c:
         bc:28:01:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:51:24 2026 by rpki-client