Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cffec46b-e458-3fd9-ae6d-53c124c3859e.roa
File:                     cffec46b-e458-3fd9-ae6d-53c124c3859e.roa (raw, json)
Hash identifier:          N39teV+csax2EgQw2MONKGgWcw/dj6ASo/hxlL9b96U=
Subject key identifier:   62:5D:10:EB:15:F9:B5:1C:76:EA:97:AA:53:B7:5D:D3:C6:70:CD:0A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEA876F68F6078AEFEFCEA400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cffec46b-e458-3fd9-ae6d-53c124c3859e.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        172.64.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:6f:68:f6:07:8a:ef:ef:ce:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=e456010d-2a77-44f7-b15b-b615572017ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:80:fa:69:83:49:f0:37:b7:b0:4a:8e:e9:51:
                    f4:ec:c2:f4:83:09:b0:5c:a5:9a:dd:bc:24:ed:4e:
                    33:09:97:37:4d:59:89:a4:9d:f2:fc:08:e9:a3:73:
                    df:6a:11:80:25:c4:cb:5f:4d:12:13:85:4e:e4:b8:
                    c2:84:59:74:78:67:cf:84:48:c6:9c:cd:77:64:22:
                    58:a8:ec:59:76:c4:fb:e9:15:3b:6e:3b:29:88:b6:
                    96:0a:a9:7c:6c:06:fc:8a:3f:5e:88:22:5a:b5:b2:
                    6a:4b:4b:a3:a6:d3:d5:b1:79:f1:c8:74:b0:1a:c3:
                    cd:97:d4:10:74:0d:4e:4f:88:41:3f:06:99:27:7a:
                    41:18:cb:9c:10:12:54:3b:ca:a4:de:86:c3:c0:e9:
                    69:b8:f3:98:f4:c0:c9:e1:3d:4d:18:9f:b2:be:ac:
                    fd:5c:00:8d:6f:72:0d:d7:95:65:39:f8:39:ea:b3:
                    3d:69:ba:87:4e:92:ec:1c:cf:aa:dd:e5:be:b2:3b:
                    d4:49:dc:01:03:66:44:81:f4:e9:4d:da:6f:8c:fe:
                    13:8d:6d:f0:d7:c8:1e:3f:98:92:da:87:90:76:c6:
                    17:01:2d:65:b6:f8:cb:55:9b:a9:73:0a:89:74:fa:
                    19:eb:d7:c4:93:65:00:14:7f:f2:2f:46:f8:77:b5:
                    2a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5D:10:EB:15:F9:B5:1C:76:EA:97:AA:53:B7:5D:D3:C6:70:CD:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cffec46b-e458-3fd9-ae6d-53c124c3859e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:9c:0b:35:5b:0b:33:62:62:31:dd:8a:05:d0:02:15:e8:1a:
         a5:94:ab:8f:cf:0c:e2:ed:3a:4e:55:70:c0:84:d6:f0:e3:8f:
         4f:76:a7:4d:50:af:59:f7:98:1b:19:af:5b:0a:2c:78:6f:e5:
         5f:ba:b2:1d:2f:27:5a:57:e8:2e:31:52:c0:ee:5d:8f:50:db:
         15:f5:d2:a9:56:c8:7b:22:ce:62:d4:6f:75:7c:3b:dc:3b:70:
         30:07:c1:85:b9:6c:95:32:0a:98:b6:45:95:ba:96:3f:a8:8e:
         bf:b0:c8:93:3e:2c:45:9f:53:c7:19:b3:e5:54:84:46:60:ad:
         29:49:15:39:12:85:b0:47:7e:94:1e:b6:7a:92:41:a1:41:c4:
         c3:72:f8:c1:5f:18:60:78:18:3a:1d:f2:4e:33:af:b7:13:12:
         db:ac:45:40:f7:81:c2:fa:a3:30:ba:6e:eb:79:e2:cc:34:f7:
         25:25:df:89:e7:66:c1:b4:bd:b8:84:ca:d0:d5:97:65:9d:4f:
         77:76:2e:6a:2c:54:6d:7d:5f:b6:16:13:14:17:df:ab:30:f9:
         3e:b1:b0:64:5d:12:ca:73:3e:b2:c8:39:c5:3e:08:36:16:15:
         c6:c1:7c:54:fe:8e:44:71:94:5c:c0:7f:e8:cd:0b:8e:2f:40:
         2f:c7:52:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:01:43 2026 by rpki-client