Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b1957526-2582-3d7c-ad26-2a5bd0b93c79.roa
File:                     b1957526-2582-3d7c-ad26-2a5bd0b93c79.roa (raw, json)
Hash identifier:          RVSaElslu67ovLStwNDYH5t+n9159QIm1ZfBb84D3hA=
Subject key identifier:   7B:95:C1:D6:5D:61:42:18:55:6A:F4:32:13:AC:76:9D:C7:91:F2:50
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4824B4537D7AFBCDD42F9580
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b1957526-2582-3d7c-ad26-2a5bd0b93c79.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        172.70.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:b4:53:7d:7a:fb:cd:d4:2f:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=b245977a-92e4-4d8a-8c1a-3949c634c26d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4a:c5:fc:4e:03:2b:e3:3d:2f:59:9f:bd:db:
                    f5:ce:f1:a0:a4:d3:0b:20:5c:58:72:f0:ae:58:1d:
                    22:76:29:13:c3:af:6f:3d:6e:4d:f0:ae:d9:f2:5b:
                    e8:85:01:f3:87:d0:77:69:8c:a4:6a:6f:c3:da:b1:
                    a7:32:cf:bb:31:d4:d5:31:6c:bc:12:84:38:e8:b6:
                    49:05:86:4b:18:01:1b:2c:bd:1a:db:5d:a9:bd:8f:
                    da:e9:c2:2f:a6:34:24:95:cf:b4:7d:d7:43:6b:9d:
                    af:31:33:1e:7d:b0:85:eb:50:90:05:77:a3:2a:84:
                    6d:f0:ad:93:33:41:51:0c:02:7a:93:0a:7d:f3:c3:
                    13:1b:35:79:50:ac:90:16:82:e0:bb:0c:93:3f:08:
                    c6:d2:6a:c9:dc:7d:8a:74:7a:b0:8e:81:89:2d:e8:
                    39:f6:5a:e8:a1:dd:d6:0d:7c:b6:13:65:0a:4b:d2:
                    19:c1:9f:1f:68:24:e0:31:10:42:32:22:4d:01:b3:
                    0f:b5:cc:f2:59:bf:8b:9f:c2:e4:0f:b3:27:b6:06:
                    46:80:10:24:f7:eb:82:e4:41:ae:54:a2:2c:ce:13:
                    f6:c7:81:1d:2f:0b:e6:53:40:44:80:9a:a0:9c:0d:
                    0a:d5:80:5d:5e:a7:46:59:bd:ed:f7:ac:9c:4b:e7:
                    d7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:95:C1:D6:5D:61:42:18:55:6A:F4:32:13:AC:76:9D:C7:91:F2:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b1957526-2582-3d7c-ad26-2a5bd0b93c79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:14:79:08:b5:d7:b0:f6:51:6b:f8:1e:b5:fc:67:94:d9:d1:
         26:0c:41:64:86:58:ae:f0:6d:0a:05:20:a1:85:2b:8e:4e:e8:
         81:dc:2e:e7:b5:6b:88:20:c1:4c:86:07:10:59:bb:27:d2:db:
         64:36:3b:e4:14:c4:37:2e:6e:26:57:5d:78:1d:09:60:6b:5c:
         95:bf:e1:e1:3f:cb:69:6a:95:41:06:dc:c7:65:e9:30:4e:e6:
         ee:19:77:86:98:70:97:83:ee:f3:30:37:fa:ba:32:fd:48:e9:
         4a:12:54:f9:ea:a4:8c:93:53:24:f6:15:97:4a:8c:36:9c:66:
         8a:e5:7c:2c:1a:5c:c9:81:21:29:e1:e6:24:1c:35:fe:e7:1d:
         e7:44:ca:6f:90:5b:fc:c2:af:8c:67:1b:4f:68:c2:64:c3:d2:
         af:b2:98:32:e0:1a:b6:50:eb:a2:38:d0:e6:ea:bc:5a:bf:83:
         af:99:94:01:14:5a:d1:a2:f3:68:b7:e2:03:5b:b0:51:11:3b:
         df:47:6b:9f:6e:68:bf:5c:37:bc:d1:c1:41:7f:55:46:ed:a6:
         b9:12:c1:65:60:41:26:13:28:58:13:b9:41:1a:6d:34:57:1a:
         10:ef:ee:9c:f5:1a:a6:2b:53:a6:11:98:7d:a9:98:8a:a5:b9:
         06:50:48:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:54:51 2026 by rpki-client