Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7115ad1f-29c3-3885-ac49-5938bbf8ed3c.roa
File:                     7115ad1f-29c3-3885-ac49-5938bbf8ed3c.roa (raw, json)
Hash identifier:          jcIq0/FLJXVXZ8BWEbSCjh9yiBapct9HZ+hBo4GXRGU=
Subject key identifier:   49:3A:FD:D4:AE:F9:4C:8A:66:DE:96:00:0B:0A:ED:6C:FE:CB:75:18
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4AEF5BE28C2D80A26AACEA40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7115ad1f-29c3-3885-ac49-5938bbf8ed3c.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        172.68.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:5b:e2:8c:2d:80:a2:6a:ac:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=4cdd701c-6f35-43b8-9728-4af48f9dcdee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fd:ca:18:d5:40:81:25:d2:25:ff:45:f0:01:
                    4d:84:3a:47:92:5d:a9:e2:56:7b:73:8b:d7:65:75:
                    a9:d9:36:b0:f2:ff:96:e9:cf:85:3f:47:31:5e:fc:
                    7a:1c:40:3f:b4:a4:84:cc:4c:7f:29:ff:51:d6:96:
                    e9:d2:e6:76:65:e1:26:95:c0:a5:7d:95:04:6a:2c:
                    18:0d:7b:99:f2:4d:01:35:da:e0:65:fa:26:34:63:
                    9e:24:b3:25:00:34:b3:00:ac:3c:56:58:1c:bd:db:
                    c4:bd:47:a0:1e:41:bf:5c:8d:91:b3:ba:7e:6c:74:
                    25:4f:b9:fc:a5:c3:33:19:fa:52:99:1e:b8:7e:f3:
                    ec:cb:d6:36:ce:65:e4:c4:98:0e:4e:eb:eb:93:06:
                    93:5c:8f:f9:79:66:ce:0b:a7:25:31:94:35:cb:d2:
                    55:e9:54:45:59:0e:c7:e0:90:b4:a6:79:39:d7:37:
                    25:71:44:08:b6:14:f1:4f:3b:02:83:03:ab:98:c9:
                    c2:3b:a0:59:b6:0d:da:ff:0a:bb:80:52:53:53:aa:
                    b8:d4:0a:11:a3:08:f9:66:b8:4b:11:e9:ef:88:b6:
                    72:8d:7c:ed:35:74:fc:0d:f6:ea:da:a7:45:4e:b8:
                    fa:5b:69:00:95:56:b7:28:fd:bc:e3:b7:e2:77:a4:
                    3f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3A:FD:D4:AE:F9:4C:8A:66:DE:96:00:0B:0A:ED:6C:FE:CB:75:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7115ad1f-29c3-3885-ac49-5938bbf8ed3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:cc:b0:41:62:11:49:f5:b2:c1:5a:32:fe:63:b1:31:c8:ec:
         be:11:65:fd:db:1b:55:68:87:83:b7:cf:c9:06:03:a6:ae:fd:
         87:85:2f:35:5c:f9:6b:5b:d1:b9:3a:04:96:f7:aa:c5:4c:ab:
         09:e7:51:c7:c5:e7:b0:02:c8:8d:07:47:78:d8:b4:03:16:f3:
         4c:90:ef:1b:79:e6:5c:5a:5d:9c:92:56:01:6d:7f:d7:56:78:
         0f:13:fc:6d:8a:e5:67:45:9e:bc:d0:c2:b4:4d:ca:fc:b9:dc:
         24:fc:75:8d:4b:22:a0:8a:2a:01:e9:15:77:81:92:cc:37:01:
         8a:5a:32:88:87:3d:77:b9:9c:bd:c1:f6:e2:c1:a6:9a:64:57:
         dd:59:22:09:2c:74:b4:c1:1c:7f:b2:40:df:cd:88:4d:79:7e:
         a5:9d:ba:77:d1:c1:d1:3b:62:34:71:f2:c1:1a:8e:b2:5f:00:
         ed:57:f9:40:06:e0:2f:5f:29:bd:48:be:78:62:15:bc:b5:01:
         5c:0a:d0:48:1d:8c:5e:18:2a:78:cd:14:66:86:37:c2:30:18:
         e0:6d:55:bc:71:f2:c5:95:70:6e:ed:d8:78:39:48:7e:b7:1d:
         06:da:88:7f:ca:0c:cf:c0:b9:e7:62:16:9b:4a:c5:35:db:0f:
         fe:6c:10:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:55:55 2026 by rpki-client