Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9812098a-0c58-39ae-93ee-cb7e10ed042e.roa
File:                     9812098a-0c58-39ae-93ee-cb7e10ed042e.roa (raw, json)
Hash identifier:          cJg9BImdymC+2VltHm6STNsOfKZkNP1MCkxp+sAz1N4=
Subject key identifier:   93:C3:18:59:E0:6A:7E:30:05:7D:29:54:71:6E:6F:2B:BB:CA:6E:2E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEA87737002DC174B7FC3EEE0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9812098a-0c58-39ae-93ee-cb7e10ed042e.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        172.71.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:73:70:02:dc:17:4b:7f:c3:ee:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=b86b4d5b-9daa-49d9-94d8-e44b644992b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ee:5b:a9:5c:5e:6c:ad:d2:96:2a:09:05:07:
                    2c:eb:ee:e8:1e:54:14:d6:d8:53:21:7d:a5:e1:be:
                    2e:7e:7e:00:29:ae:31:c3:47:86:27:93:37:af:9c:
                    37:9e:2f:64:9f:88:6f:2c:50:46:e4:55:35:02:a7:
                    4b:1d:cc:e0:98:db:56:37:16:be:97:87:cc:1b:c1:
                    0a:4d:fd:cb:df:3a:50:f6:57:ca:77:6e:a4:d1:b1:
                    4d:bc:94:32:9e:4c:d8:bf:2c:a4:48:44:73:83:c8:
                    55:00:6f:fd:55:1a:50:2b:ac:bc:f7:f7:f0:24:41:
                    5d:a5:a0:6a:de:60:12:e4:62:07:8b:c4:2e:5a:4a:
                    24:8a:6f:e8:ed:02:ff:8a:b0:49:05:35:04:75:1a:
                    5b:52:23:8e:33:99:a1:84:ac:e5:89:36:9b:2c:42:
                    b3:7a:50:a5:10:29:a7:90:41:0d:6a:ff:5f:58:2e:
                    fc:ca:74:5e:e6:3d:15:59:93:99:d8:37:ad:fe:1f:
                    fb:6f:90:d8:65:4a:7f:76:33:e5:48:0e:33:8a:77:
                    02:86:d2:08:6e:3a:e6:c2:ba:05:b0:76:15:02:13:
                    58:35:a6:1d:44:34:52:c3:64:f5:26:48:f0:32:22:
                    6a:00:0e:ff:a9:1a:0f:e3:3c:e4:8c:e5:ba:dd:93:
                    14:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C3:18:59:E0:6A:7E:30:05:7D:29:54:71:6E:6F:2B:BB:CA:6E:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9812098a-0c58-39ae-93ee-cb7e10ed042e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:ef:2e:d5:61:14:a8:d9:f9:f2:ec:6b:38:ce:85:1e:b3:84:
         80:a3:01:c5:24:d9:13:c4:76:41:95:b9:ff:1c:c3:fd:4c:ef:
         b7:4e:05:35:48:28:b3:5f:0f:1d:67:be:60:c5:f1:2b:8c:5b:
         cd:90:91:43:16:31:f6:16:c2:e1:9b:7f:bd:6d:57:b3:5e:5a:
         73:32:45:b4:90:cd:d8:7c:e6:6b:48:73:62:00:a9:eb:8a:62:
         01:7f:41:c4:06:7a:82:a7:23:bc:7a:5c:7d:74:20:e1:95:2c:
         f9:ed:8f:db:14:06:2f:af:d9:56:e7:ec:74:25:c3:d5:32:f6:
         c5:c2:d4:07:23:cc:3d:8a:82:53:37:40:df:c5:96:e0:48:4f:
         d4:ef:dc:03:2b:ca:84:28:7d:ec:c7:9c:b9:70:2f:1d:29:1c:
         f8:4c:0b:28:a0:22:00:70:77:c7:24:f5:e4:61:bc:f9:62:72:
         cb:a4:9d:9f:4b:f1:43:dc:ea:48:24:5a:4d:4d:ca:e9:fa:c2:
         ba:4a:e3:2a:b9:a8:69:98:b5:16:bb:1a:ad:05:41:15:22:a5:
         9a:3d:93:81:6a:8c:10:30:69:26:93:1d:be:93:a2:9e:8f:40:
         5c:93:35:d4:fd:4a:5d:6d:0a:0e:32:98:d2:8d:db:46:91:8f:
         25:d6:e4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:44:15 2026 by rpki-client