Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae6e4398-63a3-34ab-857d-e3ac0252898d.roa
File:                     ae6e4398-63a3-34ab-857d-e3ac0252898d.roa (raw, json)
Hash identifier:          GpntMK4GiwJvEv5ddI621wVLd2V0UUHpUnFCFtoglWQ=
Subject key identifier:   6F:F0:D5:99:4F:82:8B:46:3A:FC:A6:D3:97:74:5C:BA:BF:6A:D9:CE
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EE423235FCCD232CECF781080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae6e4398-63a3-34ab-857d-e3ac0252898d.roa
Signing time:             Wed 19 Aug 2026 18:03:37 +0000
ROA not before:           Wed 19 Aug 2026 18:03:37 +0000
ROA not after:            Fri 30 Jul 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.65.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:23:5f:cc:d2:32:ce:cf:78:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 19 18:03:37 2026 GMT
            Not After : Jul 30 04:00:00 2027 GMT
        Subject: CN=8252a4a5-032c-43c5-88f7-14c78147f3cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e2:b0:02:24:d6:44:d2:14:c5:3f:dd:5f:20:
                    49:ad:fd:6e:c2:70:78:b9:f0:52:79:c8:32:7a:41:
                    34:c6:a7:15:7d:3b:b4:46:37:a1:42:a0:e0:40:2e:
                    75:ee:76:af:09:1d:f9:51:17:06:1f:be:07:ae:07:
                    81:b9:03:eb:3b:d0:e6:dd:cf:d0:22:ae:c4:6a:da:
                    64:d1:ea:f5:8b:5f:4b:58:f2:80:c1:48:9b:fd:9a:
                    77:9c:2d:72:b5:12:31:4c:c5:1c:db:b9:00:86:96:
                    02:88:70:fb:38:dd:aa:96:ae:30:29:fd:a4:7d:50:
                    2a:ce:e7:a3:db:4a:35:ba:3d:42:3d:10:b8:3f:0d:
                    c1:02:26:30:e7:e5:6c:f7:8c:a7:38:c4:59:b8:e6:
                    f0:a2:00:97:de:dd:4e:19:4b:76:29:9c:a4:0a:9b:
                    d0:d2:c3:dd:79:e4:74:ff:9f:e0:ce:14:c9:e9:9b:
                    bf:ee:17:bd:9d:8c:77:0a:34:12:f7:ec:6d:f0:b1:
                    69:a9:c1:38:f7:df:55:81:5f:98:5b:a8:6f:72:c5:
                    86:5a:c3:44:98:43:b8:20:2d:33:5b:2f:0a:8a:a9:
                    d7:50:79:c6:a3:43:42:57:7d:c5:87:1e:d8:34:72:
                    e8:f0:45:10:c6:fd:24:49:da:60:41:d7:e4:e8:91:
                    7e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F0:D5:99:4F:82:8B:46:3A:FC:A6:D3:97:74:5C:BA:BF:6A:D9:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae6e4398-63a3-34ab-857d-e3ac0252898d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.65.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:57:56:99:9e:7e:c7:03:3d:88:0c:69:9c:fd:be:b9:1d:48:
         d9:b6:ca:4b:70:be:4c:87:2c:09:25:20:fb:53:53:84:2d:da:
         18:f4:b1:59:e0:be:bb:98:c4:e0:a1:fc:98:b6:38:18:5f:8e:
         0b:4a:f4:38:71:a6:66:9a:0d:09:20:f0:bd:59:d5:ae:d4:30:
         ee:8b:ac:14:c3:c6:9f:9d:d4:87:f3:9d:e5:6b:06:43:51:96:
         dd:1b:61:9b:35:42:0b:6c:2f:7a:6b:80:a3:25:6f:34:8a:88:
         6f:2e:13:eb:02:e2:6b:71:04:03:87:79:e3:0b:99:7d:17:3b:
         fe:b9:3e:66:e9:1c:7c:66:04:50:3b:c4:64:49:19:0e:ec:da:
         3d:04:3a:ee:6a:0e:97:de:ff:10:4f:3d:9d:cb:05:7a:7e:10:
         21:9f:aa:fd:0f:37:9d:1f:48:d9:c1:55:cf:22:e5:ad:6d:75:
         af:b5:6f:52:3c:d9:65:9e:d4:57:4a:52:32:48:8d:ba:be:cb:
         39:09:70:ee:d5:b9:e6:fa:bb:fb:e2:52:89:62:ab:c9:22:0a:
         b7:71:2f:77:5b:b1:85:97:75:ae:32:74:27:bb:c3:de:c0:b5:
         55:de:c2:3b:b5:15:dd:d5:bc:e5:5f:e1:13:8d:70:75:92:f0:
         d4:a4:c7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:45:19 2026 by rpki-client