Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/97ac2746-b4f5-3895-94d0-017d5a7b9527.roa
File:                     97ac2746-b4f5-3895-94d0-017d5a7b9527.roa (raw, json)
Hash identifier:          pGS/dhbU4si4MrM/e/Csp/EY4JiCdwa1PKGbhEXbkN8=
Subject key identifier:   66:1F:F9:E2:34:23:E2:81:5A:53:C2:75:88:0E:A1:5D:D8:B6:74:C7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E2D9F3FE5124C86606C909505
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/97ac2746-b4f5-3895-94d0-017d5a7b9527.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     14789
IP address blocks:        172.69.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:3f:e5:12:4c:86:60:6c:90:95:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=542b9d94-586e-46de-8e13-1225c8395948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1b:4e:82:84:4c:36:16:00:3f:d9:a3:43:a4:
                    55:24:ca:af:37:e1:e4:93:90:90:93:e9:f4:89:18:
                    ff:5f:58:2a:d8:d2:2e:8b:08:90:f4:d9:36:5f:ad:
                    46:1a:ba:65:b7:88:2d:76:01:45:f5:70:b9:84:51:
                    e6:9c:56:ab:25:9b:77:7d:8b:b7:c7:c9:5a:e6:f3:
                    44:fe:a0:8f:30:22:25:7f:13:b1:49:8f:3d:72:c8:
                    13:87:e4:53:a3:ac:76:5f:a8:38:ee:a4:06:e1:0d:
                    6f:4b:f6:d7:5d:84:e1:86:e9:b3:94:65:54:dc:ba:
                    3f:19:82:f2:3c:22:81:1a:4b:be:26:44:87:ab:28:
                    a5:1f:4a:45:e7:a3:d8:df:36:de:21:d3:51:e1:a7:
                    ae:76:ae:2f:f7:d2:41:7a:f2:2b:7b:0d:08:66:f4:
                    90:c8:9d:70:33:be:bb:ba:e5:39:ea:af:2d:53:49:
                    c9:f3:04:8a:a6:39:ad:66:db:dc:b1:d9:02:9d:f8:
                    10:41:a0:ec:a9:04:27:95:3e:af:33:dd:7e:2c:3c:
                    23:63:e8:27:bc:a8:ae:42:dc:76:a1:c9:bc:6b:8e:
                    2b:04:f7:a3:29:06:3d:df:9e:fd:0a:55:d2:23:38:
                    f3:00:82:ea:2b:21:38:ad:f9:90:8f:2f:9c:72:1f:
                    38:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1F:F9:E2:34:23:E2:81:5A:53:C2:75:88:0E:A1:5D:D8:B6:74:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/97ac2746-b4f5-3895-94d0-017d5a7b9527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:24:ef:d5:75:c7:6c:f6:c4:c6:3d:e4:11:ef:81:ed:0c:04:
         af:c2:e7:71:2e:87:72:6f:08:c2:0b:c0:5f:a8:b4:3e:36:46:
         f3:17:eb:f5:d7:16:4f:90:aa:82:1e:38:8c:9f:02:70:58:28:
         d7:02:65:b0:61:c3:e2:03:df:ca:83:65:fb:da:4b:13:ab:8b:
         3c:56:4d:7b:48:bc:d8:04:d2:cb:53:fa:dc:d8:c1:72:82:ac:
         41:26:07:88:33:8f:82:6a:24:b2:08:86:cb:e4:ac:f9:52:f0:
         64:7f:3d:d6:c7:2d:ee:b4:cf:10:55:fe:76:13:c4:03:7a:ee:
         57:57:33:77:09:02:f9:e9:ee:28:a6:bb:8b:ea:7b:ad:10:09:
         6e:8e:f3:f3:ad:2e:49:92:e1:f7:6d:b5:3d:d9:af:19:16:89:
         f5:37:e1:cb:d3:0e:6f:08:52:2f:c9:b4:97:65:ec:ae:d2:1d:
         3e:d1:4c:07:1e:bd:0e:8d:88:74:cf:37:b8:a3:ca:0b:1c:e0:
         22:a4:f3:e0:3c:6b:32:3b:b4:b4:2b:44:4d:f7:4e:4e:61:c5:
         b1:26:0b:65:5b:b8:88:ce:c8:5c:70:1f:0a:e1:44:e1:85:11:
         16:82:4d:a3:b2:fc:6f:f9:e8:ed:9b:7a:64:d0:e4:7d:ec:18:
         99:7a:76:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 19:30:46 2026 by rpki-client