Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a2cc6459-5130-369b-9b78-9fe51c849182.roa
File:                     a2cc6459-5130-369b-9b78-9fe51c849182.roa (raw, json)
Hash identifier:          xI4MeRPO0kD33v0jaXVADoHLN98AV2kZUjKNeicS5R4=
Subject key identifier:   7F:88:02:DD:03:B0:59:2C:E6:48:11:6E:36:66:EC:0E:F8:31:AD:F3
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4C54A92994D445347667C7E0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a2cc6459-5130-369b-9b78-9fe51c849182.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     13335
IP address blocks:        172.69.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:a9:29:94:d4:45:34:76:67:c7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=0ab23e53-bd39-47be-bbf9-5aa7acb75e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:ae:20:18:97:92:05:fd:1a:e4:93:8e:de:
                    ca:41:02:98:83:b3:d5:7e:de:25:35:51:45:4c:c2:
                    02:e3:ab:c1:b0:cc:5b:0f:f4:25:2a:b1:80:87:69:
                    ac:ed:d4:c6:56:27:69:a9:bf:31:e6:c6:c3:f9:41:
                    90:61:68:4c:f6:8b:73:d8:81:b3:24:36:55:6c:85:
                    f2:83:34:ec:0a:3a:dc:d6:83:43:6b:fe:7b:01:ce:
                    c5:81:a1:e5:f6:0d:36:3c:3e:6f:12:8d:0b:a0:5a:
                    af:70:9e:5f:9d:d4:98:ad:3d:35:f7:47:eb:a0:3d:
                    71:5c:2a:98:b9:04:ff:cd:24:ab:a1:c4:d1:ff:9f:
                    8e:3d:e9:06:57:18:cb:3b:63:92:18:14:3d:09:7f:
                    f8:86:8d:55:42:5c:bf:89:80:e5:44:70:43:68:2f:
                    13:38:96:2d:26:7c:99:e4:9e:f5:d7:58:02:11:fc:
                    41:9e:e5:71:72:9d:0c:bd:74:6e:c0:0a:80:bd:a3:
                    26:8a:6c:95:22:bb:c7:12:a8:91:82:80:d4:fb:0c:
                    5e:24:91:f5:42:95:14:a8:31:3e:c7:3a:79:a3:59:
                    13:4e:b2:02:40:ed:3a:c4:cd:bb:52:1a:b6:58:52:
                    c8:f7:c7:27:a5:c7:6e:9f:17:d1:65:66:0e:58:c8:
                    87:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:88:02:DD:03:B0:59:2C:E6:48:11:6E:36:66:EC:0E:F8:31:AD:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a2cc6459-5130-369b-9b78-9fe51c849182.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:76:e2:b5:aa:1e:19:03:90:be:0b:39:a9:ab:e1:1d:c1:e4:
         5b:df:2c:8c:df:57:82:28:95:76:8d:66:dd:74:16:bc:7d:9a:
         a2:3a:17:cf:7d:2f:58:db:1b:21:fb:91:6c:c8:74:f0:f4:b8:
         47:51:77:6a:45:c4:3f:22:7a:82:0e:19:4e:d7:f2:93:29:de:
         14:16:c5:a7:15:82:ef:e2:a2:18:92:bb:0b:cb:38:a5:12:2b:
         b3:47:93:6b:6d:54:5d:0b:6c:ed:29:0c:be:a5:9f:9d:c2:1b:
         e7:f8:bd:86:01:36:b8:82:39:55:f0:cc:3f:77:7c:37:e6:13:
         ba:69:f6:dc:d2:76:31:de:7b:30:cf:b0:90:d3:3d:88:76:03:
         8e:b0:a1:23:37:52:5b:9c:4f:87:73:55:d0:d2:a4:3e:5c:ac:
         e8:ca:65:5b:f4:a5:7b:c0:e0:1c:32:0f:09:7f:81:1f:da:bb:
         07:ba:1f:45:cf:54:2d:f0:90:e6:e3:71:18:12:c5:c0:48:87:
         06:7d:75:b6:82:8f:f8:61:c9:f0:51:a3:18:80:c4:5c:ba:5f:
         9b:22:ad:72:61:c3:dd:87:2a:12:7e:8c:a5:d2:22:30:fb:1e:
         10:7b:93:2a:0f:ea:6f:6f:35:74:18:77:6f:da:3d:16:39:b3:
         06:11:1b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:55:09 2026 by rpki-client