Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8d0f8056-33cb-3c9a-99ac-076cceb94861.roa
File:                     8d0f8056-33cb-3c9a-99ac-076cceb94861.roa (raw, json)
Hash identifier:          ijn0F8DrbeEZCHP4XZEnqMttKGojWeok+k5dRzRfFpQ=
Subject key identifier:   2F:35:C0:D8:C0:91:8D:CE:42:4D:87:D3:F6:61:DD:9C:82:24:23:B9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EF2E7774706737420D7B52200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8d0f8056-33cb-3c9a-99ac-076cceb94861.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        172.70.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:77:47:06:73:74:20:d7:b5:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=854853e6-daf0-431b-89fa-74ecfe617b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c4:3c:f1:dc:38:f8:65:5f:16:cd:99:e7:45:
                    06:1c:76:9b:f8:2a:25:d6:bc:ee:3c:60:e8:13:c0:
                    cc:d5:0e:b9:30:d5:e5:ce:73:03:4a:61:da:a0:b7:
                    9e:f8:d9:10:39:21:b3:51:88:6e:18:34:94:b8:5c:
                    ae:ca:a8:d2:62:f6:85:86:65:9e:e2:e7:77:c4:21:
                    46:32:e5:92:7f:b9:ed:d8:e8:be:51:1d:14:1c:41:
                    28:b1:e5:cb:b1:f0:9e:d9:38:10:e4:8e:7c:0f:be:
                    22:c8:93:72:72:cb:1a:f2:3d:14:cc:32:d6:2f:97:
                    c5:02:44:3f:9e:0d:a6:b5:9e:5b:c5:90:64:10:50:
                    f3:24:c0:3b:18:a7:90:ff:17:e6:bf:32:ca:d1:e9:
                    84:73:ad:10:55:02:63:30:f0:83:04:4e:50:0d:d7:
                    6a:c3:e9:40:a9:64:c4:d3:df:cf:a7:90:9e:28:b9:
                    90:2a:bf:3a:79:ed:39:c2:59:7f:c6:fe:a5:c8:f0:
                    94:64:f2:81:62:3d:8f:c3:12:5d:a7:fc:18:c3:97:
                    ca:27:19:20:3f:44:38:72:29:c5:c2:a4:43:23:c6:
                    7d:e3:2e:e3:fe:08:70:ed:97:63:f3:86:0e:46:c8:
                    7e:7b:59:4e:eb:d5:69:e1:8c:79:15:93:56:7d:d1:
                    0b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:35:C0:D8:C0:91:8D:CE:42:4D:87:D3:F6:61:DD:9C:82:24:23:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8d0f8056-33cb-3c9a-99ac-076cceb94861.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:e9:21:34:4e:55:15:9d:b1:4f:b7:48:8f:2c:b3:b8:fa:04:
         26:07:de:9d:2d:ea:36:b6:ee:3e:25:ed:4b:8a:a6:85:50:1b:
         11:a0:bb:2b:ae:54:85:ec:bc:43:65:f9:79:c7:ae:c3:24:a6:
         43:c5:e7:84:ea:0c:ea:6a:97:35:11:69:98:24:9a:e2:28:7c:
         20:25:f3:f9:c5:44:b1:bf:f0:97:b2:40:bb:6b:62:6d:4c:dc:
         02:fc:96:c4:77:51:66:61:45:bf:ca:9e:f5:54:78:84:80:ba:
         84:59:ba:4b:3a:a0:e1:fb:a6:43:38:ba:d0:22:1d:3a:11:72:
         4c:f7:0a:2b:99:f5:49:10:d4:34:d3:95:29:79:7d:3c:b3:63:
         8d:06:a1:52:b7:a0:61:0c:bc:38:42:e4:c5:e4:2f:0c:b5:cc:
         06:9e:03:63:22:02:10:99:ee:55:e1:0a:16:a7:9d:c9:28:8f:
         3f:ec:c4:bf:47:47:88:a3:7a:18:84:dd:32:c1:3c:f9:d6:d3:
         f2:ce:48:df:68:88:1d:05:4b:b3:6b:cb:c0:2e:6a:17:72:8d:
         cf:0b:35:1f:8c:4f:be:54:96:73:18:f6:84:07:59:23:83:6d:
         21:bf:e9:8a:98:99:2d:30:1d:6e:2f:52:15:7d:80:1c:ad:d8:
         0b:ae:25:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:43:55 2026 by rpki-client