Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b4f2c2c1-4ad4-3754-bb00-3dcb24ec07f1.roa
File:                     b4f2c2c1-4ad4-3754-bb00-3dcb24ec07f1.roa (raw, json)
Hash identifier:          ZvqXbdcC6zXydDjY9iHT/PqAmVQofGiY/r7KcnwgmTA=
Subject key identifier:   2E:70:5C:DA:B7:55:62:2F:BE:9C:9F:03:42:6B:74:20:F5:F8:59:0E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EC371B345289E333D1FE14830
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b4f2c2c1-4ad4-3754-bb00-3dcb24ec07f1.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     14789
IP address blocks:        172.68.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:b3:45:28:9e:33:3d:1f:e1:48:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=68caeed0-e878-4497-aa1d-6c65d4970981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:41:ec:0c:dd:18:91:b6:4a:49:18:9e:57:32:
                    8e:71:38:dd:ab:1d:83:fc:4b:3d:4a:1a:10:e5:89:
                    4b:a9:73:33:a9:c2:35:8a:ef:67:41:aa:54:c6:10:
                    5f:eb:9c:3d:d4:e5:10:8c:2e:70:90:dc:f9:73:75:
                    ce:10:de:eb:6c:4a:bb:59:1d:ae:92:80:45:9e:f7:
                    74:55:25:de:bb:68:9c:9e:68:cd:31:74:6e:f5:36:
                    c5:fc:f3:55:52:e9:19:d6:56:40:d3:44:ba:57:51:
                    54:bb:a4:ff:55:7d:00:5b:09:51:f7:81:68:14:2e:
                    99:42:23:15:2f:11:54:5a:fc:54:10:d7:70:07:bc:
                    28:5a:8b:31:a7:01:c1:a1:f5:42:77:a6:cc:df:1e:
                    13:25:eb:85:ec:d8:08:4e:3d:0e:23:0f:f2:f2:2c:
                    22:e5:74:e9:79:48:6a:e4:de:7f:10:c9:22:a6:0f:
                    e4:8b:7a:c1:3a:0f:74:ab:90:75:c8:52:9f:0f:cb:
                    fb:12:b0:01:4f:77:af:68:10:53:9f:c8:14:24:48:
                    05:65:0b:3a:fd:bd:03:fd:ce:1c:e6:9d:95:ed:47:
                    1c:7d:86:32:07:f9:a3:31:83:6d:46:8c:bd:9e:15:
                    94:51:54:56:e1:57:0c:5a:bc:bc:57:49:1b:d0:fc:
                    1c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:70:5C:DA:B7:55:62:2F:BE:9C:9F:03:42:6B:74:20:F5:F8:59:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b4f2c2c1-4ad4-3754-bb00-3dcb24ec07f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:7c:07:19:0b:0b:02:01:ad:04:5b:8b:85:c3:9a:74:bd:bd:
         41:cf:54:6e:ef:bc:20:26:91:97:51:b2:be:5c:5c:fc:fd:2d:
         59:04:4a:a8:90:21:45:7c:71:18:0c:64:c3:7c:00:ce:9b:18:
         ef:38:b1:9a:3b:db:3c:0c:71:ec:12:70:69:a9:f4:7a:56:74:
         f5:e9:d4:f4:a7:9d:0e:c3:42:6f:23:c4:ab:8b:e5:ae:59:5f:
         13:5c:e8:b2:53:5b:71:d2:70:9b:aa:f0:1d:c8:f7:4f:5b:17:
         ce:37:ce:77:b9:54:03:f7:c9:8a:23:b2:bf:f7:38:5c:9d:c7:
         69:4f:44:f2:cf:7e:6a:1a:cc:a6:9c:c6:fd:58:4a:71:9e:fb:
         01:6d:a2:18:e0:ad:97:e2:33:f7:24:25:6a:6a:b9:9b:4e:84:
         e2:9c:56:9d:09:36:e6:b8:7f:17:3c:cf:d9:32:4e:0f:6b:05:
         74:e3:2b:ef:44:ad:65:fc:59:60:c7:d1:a8:3b:78:cb:d0:49:
         d6:f0:c7:60:e5:3d:89:59:fe:43:ed:b6:40:8b:23:39:1f:cf:
         68:78:6f:52:0e:38:fc:32:27:26:63:31:24:2e:80:56:4c:0d:
         24:f0:69:c0:4f:0e:12:ea:8e:ea:3f:fb:6a:59:94:50:88:77:
         b1:4b:c1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 02:51:56 2026 by rpki-client