Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9346992-f358-3044-b41e-e5b433a129f8.roa
File:                     c9346992-f358-3044-b41e-e5b433a129f8.roa (raw, json)
Hash identifier:          MB6CCZ8Gad4XWvh0BfdI6pWj7/82g7EXFZCa1kGtN9Q=
Subject key identifier:   47:09:80:FD:D6:9B:0C:B9:4C:2B:9C:B6:95:C9:0D:FC:D9:44:7F:95
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEA876E1C9F6FF7DFF1509CE0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9346992-f358-3044-b41e-e5b433a129f8.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        172.71.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:6e:1c:9f:6f:f7:df:f1:50:9c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=cc3b6bbd-5345-4cfa-a74a-7bbf619a03cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:b5:26:cf:ad:2f:3e:a5:b8:93:2f:a3:1b:
                    f0:42:18:e8:81:1d:1d:40:90:8f:7f:87:41:7c:87:
                    e9:40:15:31:11:44:55:7d:72:da:f4:39:32:a2:59:
                    21:95:da:2b:ce:e2:59:cf:a6:d9:87:01:49:d5:5f:
                    a3:01:78:dd:59:7e:97:09:d7:d1:eb:63:a1:db:14:
                    24:61:e1:39:ed:dc:c1:bc:1b:60:c9:c3:39:bd:70:
                    72:3e:5a:02:e3:0c:59:8e:6c:c3:3c:c0:9c:b9:f8:
                    f6:3e:f2:49:c9:04:8f:d4:cd:f3:08:02:ad:95:f2:
                    27:11:df:db:a4:1a:54:2e:76:b9:a7:f9:43:de:92:
                    1d:76:33:5a:05:50:a8:85:9b:3f:fb:26:54:0a:73:
                    fb:22:17:fc:9c:15:35:43:db:10:f8:bd:6f:ac:64:
                    e6:df:d9:bc:4c:ea:cf:a2:4a:77:38:ef:22:25:e7:
                    27:b9:2a:9f:0f:d2:a8:f1:f3:be:cd:35:8a:e6:66:
                    2d:44:67:34:75:95:86:87:67:0c:bc:4a:d2:95:aa:
                    92:a8:8b:2b:05:77:7a:a1:4b:43:36:b6:6e:36:10:
                    be:78:7f:a2:e5:b5:92:ab:15:ca:f9:73:a2:e5:e3:
                    db:97:91:8e:5d:59:bf:5c:fa:88:c6:12:ae:b9:63:
                    c9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:09:80:FD:D6:9B:0C:B9:4C:2B:9C:B6:95:C9:0D:FC:D9:44:7F:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9346992-f358-3044-b41e-e5b433a129f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:96:19:52:52:8a:06:75:95:99:a0:b4:80:31:e8:08:ef:64:
         0d:d0:92:75:16:55:d7:c1:30:4d:c6:5c:8a:d4:e5:17:ae:3a:
         07:4a:15:e3:cb:a3:24:4f:cf:ac:09:c6:71:b9:4c:1d:a9:f5:
         27:b2:77:fa:a6:0e:ea:ac:a4:da:45:bb:b3:b7:75:c3:18:a8:
         c5:3b:6b:f0:6b:35:40:24:52:c9:78:0d:fe:b8:0b:e4:3e:59:
         52:3f:28:38:ab:91:12:ef:a7:02:d7:0f:e4:74:0b:1b:dd:30:
         3a:48:dd:76:ee:d9:c4:47:1c:ed:4d:fc:bf:7c:de:01:39:af:
         7c:f0:03:ea:19:6b:34:40:4c:0f:59:2c:e6:52:50:f6:13:ec:
         4a:b6:b2:33:da:8a:86:0d:20:75:44:ad:57:7a:cc:4a:31:02:
         8a:68:eb:95:6c:cc:66:1b:60:3c:af:4a:36:39:e8:6a:73:f2:
         4c:11:b2:76:81:13:b5:76:52:0b:cb:eb:fd:da:c7:8e:11:cb:
         9b:34:23:c7:87:c3:38:f9:84:9a:7d:45:d8:0a:a0:db:56:44:
         bc:94:dc:f0:e5:7e:e0:37:92:57:69:6f:6c:0f:47:b3:e5:59:
         66:0d:21:a6:3e:96:33:9d:50:33:2c:f9:6b:1b:95:0d:3b:24:
         69:d1:69:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:58:17 2026 by rpki-client