Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0a692b3-54f0-3f79-9859-a0084e1ab35c.roa
File:                     a0a692b3-54f0-3f79-9859-a0084e1ab35c.roa (raw, json)
Hash identifier:          BdwFnzNaU8FpvFhAtUD/gm2EzDONeeM25XqR8d6z800=
Subject key identifier:   F5:1B:1B:D7:21:C0:70:6D:A9:B6:3B:C4:B9:3A:41:75:FA:4B:D3:A0
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEEB764D5C23D5E94CA2A93C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0a692b3-54f0-3f79-9859-a0084e1ab35c.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     13335
IP address blocks:        172.69.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:64:d5:c2:3d:5e:94:ca:2a:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=6ab802c3-e2f2-4b33-b787-7099474d7705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4d:d3:f7:96:3b:12:b5:8b:87:cc:cb:52:0e:
                    08:30:f2:c1:86:75:27:a4:76:77:e6:31:1e:64:32:
                    27:2f:d9:a0:a0:e6:e9:f0:68:92:b6:db:79:56:9d:
                    12:e4:c4:5d:10:6a:a7:71:bd:73:f7:d2:8c:c2:83:
                    31:9f:5d:ca:4f:01:9a:09:be:27:86:9d:79:8d:50:
                    0a:35:55:ba:37:62:05:37:34:b4:8f:44:80:ea:63:
                    15:fa:7c:a3:ba:1b:97:1c:29:9c:81:6d:6e:cb:52:
                    15:51:74:62:43:a4:a5:96:0e:00:fa:a7:df:d9:f2:
                    8f:f7:2d:5a:0b:6d:c5:42:66:a0:42:34:2b:a1:a8:
                    ed:68:e5:cd:f9:61:f5:bd:ec:35:34:0b:ae:42:17:
                    25:71:e2:98:cb:a6:81:85:e6:06:08:41:b5:91:c8:
                    68:47:9b:fd:6d:9b:e4:1c:9e:1f:04:7e:d5:9f:20:
                    2f:fe:9b:0c:4d:01:4e:00:d9:29:69:14:35:fb:bb:
                    5e:b1:6c:b5:2f:ac:e5:2c:10:14:64:ed:9b:df:7a:
                    de:cf:1f:31:0b:a4:23:3f:e2:61:24:99:6a:09:1c:
                    77:0c:70:89:8f:64:43:2b:e1:cb:4a:3e:41:36:7a:
                    dc:4a:e9:0d:a5:02:56:3e:7c:a2:b9:85:13:64:1b:
                    1c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1B:1B:D7:21:C0:70:6D:A9:B6:3B:C4:B9:3A:41:75:FA:4B:D3:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0a692b3-54f0-3f79-9859-a0084e1ab35c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:55:be:53:66:58:3e:25:41:17:90:19:45:06:64:fc:c1:84:
         14:2b:4a:12:cc:68:e9:43:80:18:76:c2:0c:5f:9b:87:0b:47:
         12:76:91:08:4e:13:45:d1:de:8c:2e:f6:45:15:23:ba:e9:6d:
         36:49:e7:78:4a:ed:f2:01:d5:4e:dc:a7:51:81:f2:4d:46:ef:
         0e:99:ab:18:8b:75:81:fb:2f:5a:a4:dd:cd:a6:3d:98:e1:5d:
         66:c2:8a:97:b3:15:13:13:33:7a:4f:d2:9f:7d:08:ff:7c:37:
         5d:63:56:f4:64:1c:e2:a0:f1:be:da:4f:19:35:fc:b9:ac:22:
         fa:b7:41:b2:5d:b2:30:53:a7:28:23:eb:13:67:b6:6d:b5:86:
         79:74:51:88:fb:35:35:4e:d9:be:1f:7d:87:00:8c:00:61:90:
         54:bf:15:bf:99:d5:8b:98:b3:3d:2d:ba:06:94:d0:97:d2:9a:
         37:98:11:6f:2c:3d:0d:33:63:e5:91:ee:f4:d4:2e:e1:05:57:
         17:36:ea:6d:b8:17:2f:b6:02:8d:da:4a:a0:4f:86:11:06:c2:
         f4:b9:8f:42:9a:d2:fb:b2:f3:99:f2:73:31:92:c5:17:a9:bc:
         a3:a0:05:1b:84:14:15:51:1b:ec:bb:b3:0e:35:9a:88:9d:5f:
         e9:c1:7d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:52:02 2026 by rpki-client