Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/87ba178f-091e-37a1-a31f-70168bb2a2b6.roa
File:                     87ba178f-091e-37a1-a31f-70168bb2a2b6.roa (raw, json)
Hash identifier:          5n9cl770E5znYNvHhDgfHJ5Sn2o/UgpV5v+8gRLSbEo=
Subject key identifier:   D4:19:77:CE:0F:95:D5:5E:EE:2B:25:46:41:04:52:DF:10:52:AB:33
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EED522D797B6921034E9D7F80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/87ba178f-091e-37a1-a31f-70168bb2a2b6.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        172.68.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:2d:79:7b:69:21:03:4e:9d:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=119bb978-6cd2-4460-b04f-8d6973800070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ee:7c:13:b4:c1:19:4d:e3:af:fa:19:d7:98:
                    21:f8:e3:f1:fa:b4:8d:5e:f7:fe:fe:d3:40:cc:43:
                    b7:10:8a:f1:90:dd:35:dc:fe:2f:07:ae:84:eb:01:
                    c1:a5:a4:b3:d4:3a:b7:17:c2:60:bf:35:3d:72:b3:
                    c8:1e:3b:9a:f1:56:fb:a6:38:8b:92:e5:3d:1b:b9:
                    6b:70:d2:f0:8f:29:65:b9:50:0b:1a:a8:43:52:fc:
                    aa:cb:a8:ff:e1:b2:02:56:e6:f4:5f:ee:6c:0f:70:
                    85:2b:2c:9e:6d:14:32:a0:3c:5c:51:0b:af:5b:c2:
                    ef:9e:de:b4:aa:c9:f2:53:62:c0:78:a3:19:30:6d:
                    70:75:c3:2c:b6:86:f6:ed:9c:61:45:e5:bc:80:bc:
                    18:e0:4d:08:b6:8e:3d:21:01:56:24:51:0f:97:e4:
                    9e:31:27:e1:a1:51:13:cf:13:cd:b1:aa:54:52:c8:
                    3c:86:6c:ee:e6:df:62:4a:fc:f8:f9:36:58:67:9b:
                    34:de:fa:73:94:d7:44:ea:9b:cc:9e:c9:98:70:30:
                    9d:97:a5:0b:d1:82:0d:fa:6d:3d:2d:e4:5b:9b:83:
                    68:5e:6e:1a:d7:1f:69:5a:f8:b6:7a:c3:4b:24:a6:
                    be:01:57:5f:9e:40:20:a9:2a:ea:10:08:b3:8d:ed:
                    c6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:19:77:CE:0F:95:D5:5E:EE:2B:25:46:41:04:52:DF:10:52:AB:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/87ba178f-091e-37a1-a31f-70168bb2a2b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:a0:7a:f8:b0:78:31:1c:f7:3d:b9:3b:1a:ea:6a:e2:ce:d3:
         62:d5:67:4f:0c:60:4a:da:74:95:0f:c4:18:17:aa:df:8f:ab:
         4f:00:bd:00:b8:00:b5:cf:70:14:4a:f4:8d:61:41:25:5a:70:
         bf:cf:12:b0:52:9c:51:69:17:7a:29:64:92:10:ad:1e:7e:3c:
         2b:07:85:fc:d2:e4:64:6c:66:1b:5a:d4:3e:66:24:5c:81:41:
         fc:8f:d9:45:2b:cd:4a:4d:09:be:90:ff:27:aa:9d:d0:eb:ca:
         9e:3d:1a:22:ae:f1:9d:44:42:45:eb:95:02:72:76:b9:58:a9:
         d4:88:65:65:ac:0d:d6:48:1c:e7:8a:45:59:5c:78:5a:49:12:
         c7:98:37:01:9e:6b:3c:5e:1a:b2:01:39:a0:ed:53:ee:3d:cf:
         9e:6c:26:50:2a:87:49:a1:f2:91:0c:2c:2e:11:c4:58:60:e6:
         a5:11:79:bb:57:4f:3a:39:21:9d:16:4f:e9:ea:5c:7f:f7:7a:
         02:44:0f:71:97:1a:8f:98:2d:85:48:4d:d1:6e:53:74:a4:c9:
         f2:75:44:01:b2:ac:70:04:f6:c1:ad:1c:cd:52:a8:9f:72:a8:
         39:31:43:3b:8b:6c:e7:4f:ab:0c:3d:c7:64:1d:d4:b2:fd:da:
         99:e0:9f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:15:53 2026 by rpki-client