Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9f91383b-f542-34f9-8a85-52cb460593ac.roa
File:                     9f91383b-f542-34f9-8a85-52cb460593ac.roa (raw, json)
Hash identifier:          FzEqwRO43CvvkJNSbi6RX8QxhoZkANgCPp2JdJNqzNQ=
Subject key identifier:   43:88:53:14:41:3B:48:CF:90:B4:85:B8:BE:94:02:73:C5:59:58:E5
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EED522DA33CDCEDAC70D72200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9f91383b-f542-34f9-8a85-52cb460593ac.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        172.68.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:2d:a3:3c:dc:ed:ac:70:d7:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=608ea175-fef8-4ead-bd5a-7033c0b6cc05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c8:8a:e8:76:39:ad:d8:e7:c9:3a:97:fe:a5:
                    b8:76:91:cb:c7:c3:2b:13:65:fc:4e:da:0d:7a:70:
                    60:90:c3:b7:31:7a:eb:e0:7c:34:d6:fb:da:e2:3a:
                    44:b5:0a:4a:fb:54:45:f7:b3:09:da:e1:eb:51:22:
                    c0:e8:54:61:17:d1:cf:5c:35:25:f6:09:72:d7:ca:
                    06:b2:59:7a:04:88:c6:35:1b:ec:45:17:53:14:07:
                    4d:58:56:36:ad:d2:2b:5c:e9:7b:3a:52:f3:52:8a:
                    5b:bd:1c:e8:c8:bc:c1:0d:6c:a1:17:e6:22:27:28:
                    75:fa:cf:07:5d:a3:ab:8e:55:99:11:a7:f4:cd:98:
                    9d:1b:33:e0:fc:a8:25:94:48:32:40:5d:85:71:0b:
                    f8:47:37:2b:de:7b:c1:6c:f4:7f:99:33:6f:a5:13:
                    e4:48:44:16:28:98:e4:d0:c7:bb:12:92:7a:b8:30:
                    35:57:54:0b:2d:0c:ef:fe:c5:12:96:20:64:c6:f5:
                    a6:51:5c:f6:8e:8f:19:3f:37:26:11:56:5b:0a:52:
                    84:12:79:9d:98:59:c0:d4:cd:85:b3:62:60:5b:fc:
                    af:aa:90:2b:48:96:28:81:3c:27:0c:e3:0f:74:4e:
                    23:05:c8:09:bf:b9:d5:c4:28:ff:ec:b7:64:f4:5f:
                    9a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:88:53:14:41:3B:48:CF:90:B4:85:B8:BE:94:02:73:C5:59:58:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9f91383b-f542-34f9-8a85-52cb460593ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:00:27:47:d9:7f:b7:00:59:23:10:a4:20:24:80:0b:db:8e:
         19:70:7c:f2:cb:fa:79:67:bf:c6:5a:50:f5:93:f3:75:04:6d:
         57:a8:8e:00:ab:9d:2c:3c:75:52:ec:90:83:d1:87:4e:d2:c9:
         8c:c4:56:12:0c:54:f2:44:b3:a6:ed:77:c9:ab:2b:f1:88:f5:
         46:4b:3a:7c:b4:0e:fa:85:9f:bc:6b:69:0d:73:d3:12:95:33:
         d2:09:c6:e5:81:1e:c0:ea:a0:44:16:b3:82:b1:e0:8b:62:9e:
         77:d7:6a:f9:e5:99:f8:de:38:07:0e:6c:8f:5c:8a:27:e9:4a:
         e2:cc:61:3d:10:ec:c3:9f:de:bf:26:f7:e7:4d:d4:d1:9a:93:
         09:34:00:70:a1:89:da:14:ef:85:ab:78:ba:81:e2:47:44:0f:
         47:f7:4b:0f:45:0b:3e:16:cf:5a:4a:57:43:df:41:44:4e:be:
         1e:65:5c:33:dc:2b:f1:ef:b0:e8:27:50:d3:37:ca:5b:6f:e2:
         f1:fc:3c:66:b0:68:d3:56:01:67:54:68:97:6e:33:31:0a:ae:
         ff:6d:b9:c1:9a:4e:a7:5d:3e:30:7e:2c:f8:8e:52:85:b1:10:
         1d:3c:ca:69:d6:16:d7:41:a6:3c:c7:dc:dd:90:47:d3:b9:11:
         15:f0:90:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:26:47 2026 by rpki-client