Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/803eff81-bbb5-3e6b-9c51-1b5ff293b221.roa
File:                     803eff81-bbb5-3e6b-9c51-1b5ff293b221.roa (raw, json)
Hash identifier:          SFu2W7pAM272HXmyXPNHGmML+q/i7RUr7JPbYlT8jH8=
Subject key identifier:   E6:71:9B:9F:EB:EB:71:0A:61:14:E7:E8:E1:02:95:81:5E:D3:42:75
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EF44CBC65DF52B423CADB1380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/803eff81-bbb5-3e6b-9c51-1b5ff293b221.roa
Signing time:             Tue 25 Aug 2026 13:00:12 +0000
ROA not before:           Tue 25 Aug 2026 13:00:12 +0000
ROA not after:            Mon 23 Nov 2026 14:00:12 +0000
asID:                     13335
IP address blocks:        172.71.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:4c:bc:65:df:52:b4:23:ca:db:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 25 13:00:12 2026 GMT
            Not After : Nov 23 14:00:12 2026 GMT
        Subject: CN=a9a64842-37f2-4ef5-bb1c-c0cf49d25a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:53:f5:75:35:8b:84:34:29:80:e8:d1:21:48:
                    19:17:b0:6b:a8:bb:ff:85:0d:f6:11:72:c8:4a:56:
                    06:10:3c:a2:8a:5b:9a:88:c0:29:a8:02:0e:d8:6b:
                    38:f7:71:f4:75:60:51:43:0a:bb:18:46:da:72:df:
                    e9:21:60:7c:a0:ad:e9:fc:d5:8b:0f:00:26:05:b1:
                    de:fe:98:59:e0:43:b4:e1:1d:89:c4:64:a2:a7:77:
                    b4:14:7c:ec:6e:e7:1d:4b:7f:02:89:43:18:d7:76:
                    9a:38:9d:c9:be:c8:4e:e0:20:6d:63:3d:c8:97:03:
                    99:dc:d0:9d:ed:98:1f:4d:26:46:fc:84:14:a0:cb:
                    7a:51:94:d1:b9:7a:e9:00:c1:f5:86:a9:e1:02:1d:
                    bd:5f:08:d3:61:b3:7d:26:cf:d6:92:55:bd:70:fa:
                    cb:7b:d7:0c:79:fb:ec:4f:bc:16:a4:0f:56:3f:10:
                    66:da:4a:28:96:1f:24:33:c1:7a:44:e5:7b:47:5b:
                    16:92:7c:42:3b:26:af:40:72:5f:e8:90:62:ad:b0:
                    a2:98:22:78:f8:28:ef:5f:36:2c:90:77:16:67:38:
                    2d:3d:28:f1:f4:f3:fa:2b:ff:ae:79:59:27:da:a5:
                    64:25:f0:5a:3c:ab:aa:48:34:a7:cd:d8:c5:8a:bd:
                    be:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:71:9B:9F:EB:EB:71:0A:61:14:E7:E8:E1:02:95:81:5E:D3:42:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/803eff81-bbb5-3e6b-9c51-1b5ff293b221.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:f3:41:35:2b:80:59:a0:4d:01:37:37:ac:cc:7b:25:c5:5c:
         98:72:eb:cb:92:8e:77:ea:ed:ef:35:29:b8:2d:b5:60:62:fc:
         ab:4f:10:4d:54:ae:4e:29:8a:f3:9f:44:26:1a:6e:65:ac:d3:
         c2:18:51:43:e2:37:e0:3d:2b:06:60:6b:97:e5:4d:b2:e8:62:
         ef:a9:83:cc:95:1a:12:94:c6:1f:fc:4f:0c:47:f1:25:79:bd:
         cd:f1:d6:3d:4f:67:81:c9:dd:37:2f:0d:99:9e:88:2d:b1:9e:
         95:7a:8f:44:af:c1:6f:fd:da:c7:7c:01:e7:f5:96:16:99:69:
         34:16:21:a1:a9:18:a0:8b:05:62:28:f1:6a:a0:5e:c8:f9:99:
         8f:97:f0:1d:40:c2:02:8d:ca:c5:98:9f:22:c3:28:5c:a0:cb:
         50:68:32:c1:b9:d0:9d:fc:ff:0c:ea:eb:cd:93:e8:f9:93:f1:
         51:08:e5:60:20:21:c9:5a:6b:39:38:f7:fe:68:f4:06:18:c3:
         ee:20:1c:0b:46:4f:1d:87:a7:ee:6a:53:a2:cf:1d:ef:0c:82:
         6d:0c:8a:86:c7:2f:31:d1:ad:eb:bc:70:d1:3a:8f:3c:dc:7b:
         ef:51:53:7e:a6:64:73:f1:93:5f:44:a1:86:30:b7:42:7a:23:
         17:51:ce:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:21:08 2026 by rpki-client