Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cc13973e-b895-31ab-a03b-1d14cbea8429.roa
File:                     cc13973e-b895-31ab-a03b-1d14cbea8429.roa (raw, json)
Hash identifier:          hJwMHcnHriKaVt0ZG+5gLY1Ug5ouCP59aD+BEydrJ70=
Subject key identifier:   83:B9:58:D4:B3:97:0C:D7:A6:A5:E7:CD:94:3D:AE:BB:EA:00:F8:87
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EE4234B8ADE59CA1F06F81110
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cc13973e-b895-31ab-a03b-1d14cbea8429.roa
Signing time:             Wed 19 Aug 2026 18:03:56 +0000
ROA not before:           Wed 19 Aug 2026 18:03:56 +0000
ROA not after:            Fri 05 Mar 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.68.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:4b:8a:de:59:ca:1f:06:f8:11:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 19 18:03:56 2026 GMT
            Not After : Mar  5 05:00:00 2027 GMT
        Subject: CN=5d8e81c5-1876-45fe-a2dd-00e716ca0d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:30:be:be:94:ed:97:b4:fc:6b:82:08:b5:
                    a0:80:6f:79:d4:3c:e9:40:e2:6e:f7:92:dd:91:9e:
                    2d:d9:c7:d0:1f:a9:d7:a7:a0:8d:e4:c0:cb:37:fd:
                    7b:22:9c:e8:79:b4:08:11:42:4a:83:f8:16:bb:b4:
                    bf:d2:d0:e6:72:8c:9d:ad:f9:4e:a2:88:f6:df:18:
                    ae:3d:a6:39:2f:ac:54:37:d6:70:e6:1e:f6:66:a9:
                    d0:8f:ac:2d:7e:5b:f0:89:1e:70:57:4e:e8:d3:6a:
                    f2:2b:c7:75:56:fa:e1:9d:39:cc:0f:55:fa:42:8c:
                    0c:89:b7:b5:8d:1c:87:9c:38:9b:c8:2b:b4:37:f4:
                    ad:19:a6:6b:87:ec:9c:38:b2:f4:b8:dc:31:72:eb:
                    fb:9f:a7:94:88:50:a7:c5:54:0b:1c:75:4b:50:b7:
                    09:36:77:de:d6:9e:2c:c8:4d:e9:1f:de:11:a0:f0:
                    f9:0f:44:10:1f:1b:dd:e9:96:e3:3e:e4:4b:94:e7:
                    44:e5:91:c4:b8:ac:46:01:1b:f7:3b:12:2a:6d:1d:
                    f9:9d:2e:1b:ac:38:cb:3a:4f:b5:40:92:4a:40:c4:
                    99:6f:e7:8f:95:cd:1a:ae:a3:d9:f1:17:37:67:8e:
                    e6:27:7a:90:13:0f:73:0d:74:02:d1:5d:f2:5a:51:
                    f4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B9:58:D4:B3:97:0C:D7:A6:A5:E7:CD:94:3D:AE:BB:EA:00:F8:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cc13973e-b895-31ab-a03b-1d14cbea8429.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:93:8b:5d:ff:aa:09:e9:14:42:2d:a3:3d:a6:e7:6d:77:b5:
         76:14:59:59:dd:ae:3e:5b:df:2a:02:07:88:ea:ee:ca:04:2e:
         e9:13:51:69:95:74:fb:be:1e:b6:7d:46:4f:e8:a9:7a:b1:72:
         dd:4b:80:33:25:05:7d:64:d4:e5:a8:25:4f:81:bf:9e:e2:c6:
         b7:ed:67:93:7a:e8:b3:59:07:6f:c2:07:ed:1b:66:10:6a:ab:
         6a:18:a5:61:07:39:d1:cb:2c:a3:46:43:db:32:3c:67:5c:80:
         76:87:0a:0c:77:96:32:52:cc:2a:e6:21:99:8e:57:93:63:8d:
         da:f0:fd:2e:98:f3:d8:47:59:47:f8:df:60:05:2e:4e:3c:a0:
         24:6a:58:7d:8e:cb:55:af:d4:b9:c9:c3:be:bb:2d:72:2d:ae:
         9a:03:f2:ac:da:f4:70:7a:0a:25:78:58:85:96:b1:a9:27:59:
         a0:7e:fb:43:82:af:ac:01:97:36:18:df:ac:81:8f:b2:60:91:
         0d:10:42:5d:6a:ac:6b:36:d2:10:ea:ce:29:ca:8b:b0:c9:20:
         6f:08:d8:97:d2:5a:85:30:b3:5b:83:c0:b7:50:79:0b:fa:8b:
         c5:0e:9d:00:e5:4a:dd:17:a5:1f:c0:fe:01:7a:f1:b7:53:ce:
         15:da:2a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:08:56 2026 by rpki-client