Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d469b3f1-1610-30fc-9a5e-91bc4b32d1ae.roa
File:                     d469b3f1-1610-30fc-9a5e-91bc4b32d1ae.roa (raw, json)
Hash identifier:          FiNYRattU1btDNDhlZjiNDW+d9CEYNK4Dy9C4OOiIkI=
Subject key identifier:   2B:C1:C0:60:F3:6D:D8:0B:B0:A5:69:85:D5:86:B9:8C:7E:7A:80:AB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584DAC458DA1A73FC25E4DDC9720
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d469b3f1-1610-30fc-9a5e-91bc4b32d1ae.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     13335
IP address blocks:        172.71.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:8d:a1:a7:3f:c2:5e:4d:dc:97:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=dbeab351-39d2-46e8-b4c2-bc667fff5fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:68:f2:60:8f:06:db:a0:6a:98:a0:d5:df:1b:
                    80:10:bc:22:d3:d1:69:5e:19:52:c6:73:87:51:58:
                    d0:16:41:2b:7d:f9:70:2f:5d:51:9f:fc:05:87:00:
                    05:2e:5b:6e:cd:16:fc:20:a0:63:9a:15:11:31:62:
                    82:d5:64:00:37:c4:f7:91:93:aa:54:df:7e:38:23:
                    8a:fc:ed:89:6c:39:84:b6:a4:fa:ea:05:68:4e:71:
                    0b:e7:c8:d5:e3:50:27:00:1a:c8:77:de:03:08:ce:
                    00:fa:e2:6c:12:7b:bf:fb:17:95:be:3a:c9:cb:79:
                    27:cf:53:f3:6f:d0:0d:0b:3a:c9:fb:ed:2e:8c:35:
                    32:ad:ba:72:86:36:91:99:be:9e:38:ea:38:2c:d6:
                    62:d5:de:93:1b:cb:2a:85:11:39:58:1b:ab:66:6e:
                    9c:31:0b:e8:08:18:a3:25:3b:1a:18:75:41:df:55:
                    2c:69:62:ac:6e:2d:6e:2f:bf:5d:58:a2:48:96:e9:
                    fd:5f:31:30:67:7d:1c:3a:c2:7e:6e:bb:2c:12:7c:
                    8e:6c:b6:ba:09:84:40:22:dd:a4:8f:a4:2b:20:bd:
                    c8:71:90:ce:db:41:e6:60:00:ce:b6:cc:63:ea:23:
                    e3:00:ac:25:ae:82:c2:25:86:70:e3:55:ec:d7:e2:
                    81:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C1:C0:60:F3:6D:D8:0B:B0:A5:69:85:D5:86:B9:8C:7E:7A:80:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d469b3f1-1610-30fc-9a5e-91bc4b32d1ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:13:d3:07:6d:19:d6:73:91:76:28:72:a8:08:20:ea:53:70:
         b8:c3:d6:a5:93:fd:c0:e5:9e:ea:d1:5e:66:e0:0f:a8:81:f4:
         d9:c0:11:3a:01:ff:26:77:dd:6b:54:d9:d8:a9:ff:11:da:35:
         ea:3a:5c:4d:dc:90:3d:48:f7:53:9d:a4:b1:7f:31:86:34:14:
         41:b0:eb:45:07:74:85:be:0b:ef:df:af:57:92:8b:50:8f:37:
         b7:b2:6c:de:55:0b:26:a2:e1:70:74:64:dc:45:55:26:14:44:
         0e:b5:e6:30:2c:3f:58:ed:0e:39:c2:ae:bf:3a:0f:11:75:1c:
         2a:68:e3:1a:ed:4c:12:7d:2c:e9:d9:76:74:c7:56:8b:7d:83:
         54:06:e5:24:b3:e5:e4:7e:ef:5f:58:d5:3d:e6:86:ca:84:61:
         97:bd:30:31:c6:9d:87:14:4a:cb:77:b7:b4:09:c8:09:dc:47:
         ee:61:15:60:58:34:a0:ae:00:e9:ef:ed:87:f2:ab:b6:21:fb:
         f1:e8:26:0b:a7:b8:b7:f5:13:f2:54:2f:c5:1f:c1:82:3a:84:
         dd:96:29:e6:35:7c:61:22:2f:7b:6f:8f:ff:9d:12:1d:26:8a:
         2b:11:fa:a2:09:29:f6:12:37:13:70:b8:90:a9:27:86:b2:56:
         05:70:7a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 08:11:47 2026 by rpki-client