Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bbf2c66f-03c6-3b63-9da5-a774e9085691.roa
File:                     bbf2c66f-03c6-3b63-9da5-a774e9085691.roa (raw, json)
Hash identifier:          u1NhCidr/hIBzyMucLaUqVIs/NM6eJ/dg0QIPShuaRU=
Subject key identifier:   A0:D9:C0:B1:4B:5E:D6:B2:1E:EC:41:80:36:99:97:CE:F3:E7:37:87
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEA877321679FFA7E4CCE9920
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bbf2c66f-03c6-3b63-9da5-a774e9085691.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        172.70.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:73:21:67:9f:fa:7e:4c:ce:99:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=05d86442-357d-424f-ac78-0b9995ab058e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:21:d3:3d:0c:80:6b:30:64:49:6b:0c:f8:d8:
                    26:ef:57:e5:1d:69:7d:e2:17:96:b3:c0:d6:fb:5f:
                    0d:bf:6d:59:66:75:f6:aa:dd:14:00:36:e5:ff:73:
                    63:aa:28:de:16:d0:42:14:45:f1:ad:2a:2f:4a:f0:
                    e0:0c:c2:48:2d:59:79:99:80:92:b1:4c:d7:31:27:
                    fe:56:44:fc:e6:9e:7f:50:d4:87:87:dc:17:81:31:
                    2b:94:01:0e:35:70:88:58:8d:86:a8:47:c9:fc:42:
                    eb:00:30:36:c5:ae:ea:c0:4e:82:68:b6:10:b4:02:
                    cc:77:53:b7:00:2a:fb:9f:f1:86:16:a5:de:1c:b7:
                    20:0a:54:80:5b:f9:36:62:d3:9d:20:cb:2a:ad:eb:
                    f0:e7:78:59:63:ef:e7:1e:69:90:c6:7d:c6:9d:20:
                    b2:45:0b:c5:5d:38:b2:91:6d:54:88:d9:13:1b:30:
                    9b:ef:68:c6:d3:eb:07:6c:f0:88:8b:2c:d4:6e:d7:
                    4f:f8:b6:57:0e:f9:88:e1:96:37:34:a4:ae:51:52:
                    e0:40:47:7c:55:24:ec:67:81:94:5c:46:4f:0d:c1:
                    2f:49:22:e3:f7:03:a7:ee:88:f8:28:4c:b5:bd:a2:
                    13:80:02:51:f6:a1:69:8d:79:69:1e:aa:9c:0b:e7:
                    3b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D9:C0:B1:4B:5E:D6:B2:1E:EC:41:80:36:99:97:CE:F3:E7:37:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bbf2c66f-03c6-3b63-9da5-a774e9085691.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:f2:62:71:19:0f:11:4c:a0:3e:2a:b2:01:36:df:0c:6b:d8:
         20:4b:b1:bc:11:8c:16:bb:a6:a9:57:26:e9:99:6c:4d:02:ff:
         db:fb:11:f5:44:5c:2f:5b:fa:df:c0:d7:3d:70:b3:32:2c:15:
         98:88:0d:39:6c:db:f3:d6:b8:ab:88:4d:be:48:ea:a6:a5:2b:
         1f:3a:ec:cb:22:c2:08:71:c3:54:80:c1:41:a0:ab:4f:76:1c:
         26:51:9c:80:71:34:9d:fc:4b:5d:d5:e0:41:60:c4:49:f3:c0:
         e0:31:48:3e:3c:b9:54:16:0b:99:7c:3a:10:22:fd:56:77:3c:
         b5:ae:82:22:90:10:3c:bb:87:08:31:a5:96:c9:a7:c9:76:fe:
         de:86:e2:9d:3c:b8:0b:7c:7f:8b:b6:ae:f2:2d:d6:f2:68:ed:
         08:d2:23:57:d9:a6:a2:72:9a:7f:da:e3:1f:88:75:85:25:1b:
         91:58:6c:7b:2b:28:a3:cf:25:e4:c2:36:84:b9:64:38:ad:71:
         2c:8b:1a:bf:fd:fa:ef:60:31:d0:0c:d2:ac:b1:96:bd:10:c1:
         6a:99:84:b9:2b:63:f2:64:77:27:74:3a:ec:f7:50:35:58:1c:
         4b:a9:c5:fb:09:9b:77:89:4f:dc:fe:e2:10:53:fe:f5:9a:9e:
         a1:6f:d1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:36:22 2026 by rpki-client