Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ba2da0de-d168-3ee6-b96e-683411bd56b6.roa
File:                     ba2da0de-d168-3ee6-b96e-683411bd56b6.roa (raw, json)
Hash identifier:          lfY6TyqhUCOrGhal2H1gv6YnlmrJKaFTTta6dXbASHE=
Subject key identifier:   08:79:87:4E:40:4A:D0:02:FE:F0:E4:A9:33:91:4B:B6:92:7F:81:9D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EA79250388A0A96E940485120
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ba2da0de-d168-3ee6-b96e-683411bd56b6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14789
IP address blocks:        172.69.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:50:38:8a:0a:96:e9:40:48:51:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ae08b39b-e4d6-425a-b593-6108542812ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d6:5e:ae:ef:9c:6d:83:62:e3:4e:b7:86:dd:
                    b6:2e:c2:87:12:a1:43:d8:73:e7:bd:0f:d6:0c:24:
                    52:8a:c2:58:f1:c0:be:43:15:ff:01:be:08:24:ce:
                    5c:36:b2:ac:5b:81:8d:eb:04:af:65:0a:85:ca:99:
                    49:fc:b8:d7:60:6a:c4:bd:16:7a:16:c0:c6:2d:00:
                    0e:b2:33:c9:96:02:2f:13:b8:7e:e4:ae:ac:fa:a0:
                    e7:0c:2a:67:52:05:27:8e:48:36:0e:dd:fe:88:9c:
                    ed:8c:4c:b7:e8:93:62:45:3f:4b:95:ce:e0:37:e2:
                    3c:c1:de:9e:62:9a:e8:db:95:5d:f6:25:46:cc:5b:
                    e3:71:ff:21:88:74:72:80:06:61:dd:6c:92:72:cb:
                    b2:ef:30:d6:2d:fa:bb:4a:f7:c1:e3:98:e0:f0:31:
                    13:ee:37:d8:3c:3b:07:5e:d3:09:08:07:a4:6d:d3:
                    21:64:bc:12:ca:71:a4:9f:60:15:67:43:10:2b:a0:
                    2a:e4:b5:7b:de:87:1b:60:29:88:47:00:c1:e4:9c:
                    b0:b6:19:8f:68:31:bf:9b:c0:2f:c3:4a:3b:15:57:
                    32:57:ad:8e:51:00:44:33:c0:26:c0:81:3b:6c:32:
                    c0:5d:c0:12:c8:90:ee:d7:eb:92:60:08:7d:25:8a:
                    c5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:79:87:4E:40:4A:D0:02:FE:F0:E4:A9:33:91:4B:B6:92:7F:81:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ba2da0de-d168-3ee6-b96e-683411bd56b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:00:bc:b7:63:27:90:f9:95:08:a4:b0:af:39:11:3d:07:e3:
         2b:4e:3a:8b:b0:4a:b9:2d:b4:80:19:11:10:b5:e5:e2:d2:c7:
         a8:e4:a6:51:7e:ea:d0:81:7d:25:26:2e:71:bb:78:3b:37:c4:
         21:40:f1:d3:15:2a:f2:cb:46:66:18:88:7a:03:b2:e1:1f:49:
         56:ac:f9:a8:bb:6b:8b:26:fc:48:44:72:08:2a:1d:27:f8:f5:
         04:04:ba:ed:a1:8e:93:12:b2:ad:76:41:2e:64:d2:ef:5f:6e:
         8a:da:cb:ca:78:19:a5:96:f8:7e:b8:7a:66:e4:69:a4:e0:21:
         e5:75:c3:33:71:08:c2:a3:ee:b4:01:ea:51:c1:ed:f7:4a:87:
         d9:64:92:43:af:a7:2a:f5:29:82:28:4a:99:fd:3b:e0:a1:28:
         db:eb:0a:3b:00:84:c0:1c:bd:a7:cb:d5:04:7d:00:0a:c4:84:
         1c:4d:20:2e:76:63:3f:db:5b:5e:a3:e7:3f:25:17:48:ec:cb:
         b2:d4:36:a7:ac:c9:02:6a:ae:2a:ec:02:0e:d5:8e:30:1e:5d:
         c0:12:a3:13:a0:8a:67:0b:72:29:5a:9f:62:ad:03:06:dd:a7:
         80:1b:b8:90:88:09:f9:fc:65:a7:86:f7:e3:84:8e:72:77:04:
         89:54:dd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 02:51:48 2026 by rpki-client