Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/969b0afd-f5de-37f5-8fd2-c4c392870bad.roa
File:                     969b0afd-f5de-37f5-8fd2-c4c392870bad.roa (raw, json)
Hash identifier:          SrocfOmEb5VY5In5zY4ELS49BtvcYlt8gaz9Kq45ZOw=
Subject key identifier:   70:61:76:69:5C:42:F3:FD:AD:3D:46:8B:DA:02:39:B7:F1:A3:3A:B2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EF44CBC30B700A23D13E060A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/969b0afd-f5de-37f5-8fd2-c4c392870bad.roa
Signing time:             Tue 25 Aug 2026 13:00:12 +0000
ROA not before:           Tue 25 Aug 2026 13:00:12 +0000
ROA not after:            Mon 23 Nov 2026 14:00:12 +0000
asID:                     13335
IP address blocks:        172.71.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:4c:bc:30:b7:00:a2:3d:13:e0:60:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 25 13:00:12 2026 GMT
            Not After : Nov 23 14:00:12 2026 GMT
        Subject: CN=992a0ac5-9ac3-4916-8544-fc9490dc81b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:21:f8:44:31:2a:f4:b7:2c:84:a8:f8:ed:b8:
                    f2:d6:34:80:38:06:ec:27:8b:87:16:a8:9c:24:59:
                    de:65:47:04:13:a9:89:ef:84:7b:d3:06:fa:cf:35:
                    4e:2f:af:50:8f:db:e1:b3:8d:c8:99:6d:4e:76:f2:
                    85:3a:87:3e:de:aa:49:68:c7:c7:66:58:ca:58:50:
                    97:be:fd:c5:ac:e1:cc:4e:a0:73:43:af:d0:88:67:
                    36:a8:d5:ac:0c:b1:86:c2:2e:0c:f1:b7:89:93:48:
                    42:19:ca:c8:2a:b3:28:50:97:c6:2f:ab:91:25:2f:
                    9f:f0:38:9e:c0:57:09:3b:2b:7f:3b:b4:96:61:23:
                    81:0b:50:9d:8a:d6:10:83:a8:8f:28:72:56:ee:27:
                    81:7c:26:aa:bc:95:f9:81:e1:33:05:02:6c:86:5a:
                    12:7d:7f:80:d0:6f:b5:32:c9:a0:e7:96:57:91:8b:
                    ad:5e:c3:00:7b:1c:fe:75:d0:f4:d3:35:2f:9d:3a:
                    d0:20:93:75:af:07:fe:22:d0:8e:01:08:95:be:73:
                    cf:e1:81:02:e2:a0:ea:2b:ea:12:73:6c:cf:a4:bc:
                    c0:2a:ef:86:dd:3f:02:74:ab:6d:03:71:d4:d1:54:
                    8b:ef:45:d1:6e:6a:8e:fa:cc:a1:c9:c1:66:e6:8b:
                    5d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:61:76:69:5C:42:F3:FD:AD:3D:46:8B:DA:02:39:B7:F1:A3:3A:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/969b0afd-f5de-37f5-8fd2-c4c392870bad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:fa:47:56:14:51:28:27:30:09:44:66:7f:23:a9:38:c1:4d:
         b0:ce:31:70:5d:e5:9a:6a:1e:a2:e1:67:9b:86:b2:d8:bc:04:
         09:e6:44:87:29:99:7d:60:8d:4a:66:14:57:1f:c0:2f:63:36:
         f0:82:87:52:4f:51:16:a8:40:d4:43:9e:8e:d7:f5:61:87:8b:
         24:c5:fe:f1:48:61:fe:fd:85:a2:06:03:91:1d:8c:30:ae:e6:
         df:11:c6:77:e7:90:74:22:e1:55:23:a8:27:b5:64:ad:a0:dc:
         3b:c0:a5:40:1a:10:1f:cf:ac:eb:6d:24:7b:c1:a5:1c:4c:89:
         15:b7:0d:20:f2:4e:b3:52:3e:b0:c5:72:43:1e:83:f9:2a:45:
         ac:cb:f9:a5:2e:62:f8:5c:c5:98:a5:4d:20:66:a4:95:8c:72:
         94:92:53:12:66:c0:45:f0:ee:be:2d:b7:70:cc:61:b3:11:ec:
         27:44:92:39:a0:3f:ba:ae:3b:97:0f:3c:9f:46:bb:17:fe:34:
         f8:5c:48:55:fc:b2:f2:eb:e5:d0:66:0d:5f:f4:c7:80:1b:fe:
         c5:88:04:7e:d8:61:a1:d3:07:51:4a:6a:9d:54:1e:ac:3a:b1:
         88:eb:a9:b4:e5:87:be:50:4f:37:6f:3e:8c:d8:37:22:d6:92:
         bd:f2:86:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:25:11 2026 by rpki-client