Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7d262e74-2fc0-3e6a-9be2-94c45bf5e79c.roa
File:                     7d262e74-2fc0-3e6a-9be2-94c45bf5e79c.roa (raw, json)
Hash identifier:          FpAGo+UNytNxsp4pWSfnV5OwDJves/Ss1hSHc+3D9JQ=
Subject key identifier:   E2:74:56:D4:96:30:81:1C:AB:D2:81:35:D9:7C:89:CC:4A:57:98:31
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584DE84B5B92B0FD89AB41CD0890
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7d262e74-2fc0-3e6a-9be2-94c45bf5e79c.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     13335
IP address blocks:        172.64.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:5b:92:b0:fd:89:ab:41:cd:08:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=b23ce33d-5b09-4bb2-bc4f-b9057eceee56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a5:9f:22:de:bc:e2:7d:c9:66:55:85:f1:0c:
                    02:0d:58:02:02:97:30:9b:c6:e5:fe:87:c5:a5:07:
                    0d:a7:b3:b7:b3:b5:f1:ae:03:6b:79:f9:51:34:81:
                    c7:1c:9f:e7:85:d1:c7:a6:e0:f6:ce:65:d0:cc:02:
                    24:c6:44:87:62:24:4e:d9:e9:db:f4:46:f5:dd:5c:
                    21:b3:43:b3:60:06:67:ad:2b:2a:25:fb:98:35:a0:
                    57:e8:81:89:4c:23:c8:ea:f5:9b:06:91:e3:a1:37:
                    23:98:5a:e3:7e:37:37:70:83:0a:eb:d2:f2:77:db:
                    b4:85:12:06:91:9c:94:60:c1:85:95:87:fd:eb:ee:
                    a7:55:09:a9:de:cb:72:5c:1a:8d:c8:71:41:2c:a1:
                    3d:e7:0f:ea:b6:5d:56:00:78:35:26:42:11:2d:95:
                    63:86:93:dc:67:1a:b0:ef:71:6a:69:9d:d1:5f:3c:
                    0e:65:79:04:e7:b5:97:bb:d6:b5:e5:84:86:45:d4:
                    32:8e:73:7c:67:18:22:ce:f9:86:ad:52:20:b5:2c:
                    76:88:5c:fb:46:59:8f:f1:77:51:3f:da:80:e6:a3:
                    12:de:83:9e:47:7e:e2:47:09:8d:7a:44:49:9a:8d:
                    bc:c9:db:b2:5c:23:9a:19:a8:14:83:7e:f4:d2:91:
                    5a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:74:56:D4:96:30:81:1C:AB:D2:81:35:D9:7C:89:CC:4A:57:98:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7d262e74-2fc0-3e6a-9be2-94c45bf5e79c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:9a:12:e0:af:dd:0b:3b:3b:c8:ef:79:dd:72:c4:13:19:fd:
         c4:28:4f:e0:a3:47:fd:6b:ac:3c:9b:f4:cf:9e:9f:e7:1e:9b:
         bd:96:20:ea:3a:3b:81:e5:7d:9b:60:55:d3:ff:5f:01:0d:f7:
         8b:be:93:cc:88:0d:4f:a8:a8:e1:d8:37:48:4a:ef:a7:7f:de:
         d6:b4:2a:be:1a:d2:af:d9:95:03:71:56:9b:29:6f:c5:8e:49:
         61:c7:62:a3:4b:8e:93:72:ec:2d:21:5f:a7:2c:e7:72:4c:27:
         ba:a5:f2:5d:57:c6:f6:ef:b5:c9:0f:91:be:42:b3:79:62:ae:
         79:24:16:e5:6a:f1:cd:53:35:7c:c8:0a:69:23:3e:c6:0c:df:
         bd:2d:76:7b:eb:b1:1d:10:21:90:f4:1a:60:a3:cd:ca:76:0d:
         d4:11:ca:30:26:e1:76:e7:08:d0:da:2d:f3:53:f6:c6:4f:c5:
         4d:9d:a1:1c:a8:25:7c:65:e3:2e:69:a3:1a:ed:c8:88:82:8f:
         bc:6a:23:f1:f9:47:bb:cd:35:fe:04:e5:52:4f:cb:61:cc:6d:
         e8:8d:0e:f0:4b:2b:cf:1e:55:4d:33:9e:74:22:a4:6f:41:50:
         8f:f0:93:7b:80:7d:05:9c:0c:c1:9d:9a:a2:1f:7c:a8:83:89:
         8c:0e:56:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:33 2026 by rpki-client