Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5bdd0ee-392a-3f40-8c1b-a6b9113ba5a5.roa
File:                     d5bdd0ee-392a-3f40-8c1b-a6b9113ba5a5.roa (raw, json)
Hash identifier:          zMx1v+RrLT4SK3t2R1n2ISkSIszFJv5atRHR+H1OgXo=
Subject key identifier:   9A:EE:F8:D4:56:21:51:0B:EA:B4:2A:1B:70:15:BE:13:18:83:65:B6
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4AEF683FE7B81E8C7A92D300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5bdd0ee-392a-3f40-8c1b-a6b9113ba5a5.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        172.68.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:68:3f:e7:b8:1e:8c:7a:92:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=037114eb-db22-404e-ab46-f2dabc8ee7a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:c7:5a:4f:4b:5b:26:a8:e7:d4:c7:fb:6d:
                    d8:2c:cc:46:ae:8d:47:5c:ab:86:71:c7:c6:15:04:
                    fa:48:27:bd:64:be:9b:53:b4:47:7a:73:93:c7:e2:
                    68:cd:fb:1e:c2:46:49:8d:9b:9d:0e:86:03:42:f7:
                    be:bc:2e:4d:42:02:2a:cc:32:97:4f:6b:23:93:60:
                    df:61:af:db:df:cb:2b:a9:6d:e0:f1:2d:a5:5a:b8:
                    0b:6a:6b:b8:10:d1:9f:f8:a0:83:29:c2:5d:0a:fb:
                    ef:bd:a7:18:6c:79:fd:4a:3b:b9:0f:47:9f:11:b5:
                    6a:3f:e9:73:56:31:88:87:d0:41:e0:04:f8:f7:61:
                    64:fa:e6:f2:8a:e4:7d:4d:71:27:a4:43:77:a0:f9:
                    f0:00:f3:67:55:b8:63:19:79:58:3d:7f:c2:a8:72:
                    08:c0:8f:ac:82:c7:e4:ea:03:37:2b:e8:ed:bf:0c:
                    31:b4:32:37:13:02:23:93:ea:f0:11:dd:26:f2:41:
                    e6:42:99:c9:dd:a8:3a:74:65:c2:8d:04:9c:86:d6:
                    e6:c3:50:67:fe:f4:e9:fe:af:54:9a:5b:78:cb:0c:
                    8f:12:47:1b:67:29:59:6f:15:a8:bc:e6:b8:2e:da:
                    da:a0:45:bf:67:a2:75:80:de:9e:38:fc:41:c0:70:
                    f8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EE:F8:D4:56:21:51:0B:EA:B4:2A:1B:70:15:BE:13:18:83:65:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5bdd0ee-392a-3f40-8c1b-a6b9113ba5a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:b4:72:97:eb:86:83:73:15:13:09:b9:88:c2:c8:ff:01:25:
         9d:37:60:19:c3:85:d5:c7:71:32:4c:70:69:c0:2f:44:6b:98:
         10:4a:6b:3f:93:30:b0:e4:b5:66:01:f7:de:64:9e:49:87:82:
         4f:39:71:09:9b:ce:29:a1:a8:71:c3:95:f3:a6:fc:dc:15:f5:
         9e:c6:02:b7:2c:1b:82:95:86:8f:85:00:41:f3:96:cd:51:27:
         5d:ef:d9:0a:88:cf:22:ce:d5:0e:9a:dd:82:5a:f9:ee:17:81:
         07:70:98:0a:13:16:e2:de:64:62:51:a5:4f:a2:2f:f4:48:dc:
         95:9d:e2:48:2f:a3:92:4d:a4:b8:f2:38:56:fc:bc:85:bf:86:
         0e:bd:71:ff:e9:0d:50:72:f6:ec:77:1f:ec:6f:95:d4:84:9d:
         26:04:b8:a2:7a:49:43:20:93:57:74:76:9e:a3:f1:ba:4a:27:
         29:27:75:eb:df:19:06:f8:7a:63:3c:ed:1a:36:a5:1f:0b:56:
         67:43:2c:a9:85:b0:2a:9c:2b:10:7a:ab:54:86:97:06:29:9c:
         a5:6f:d0:a2:fd:92:6a:32:bf:c9:b2:fe:c2:38:ef:dd:35:82:
         14:03:f2:74:32:69:d4:6e:07:86:7b:2a:6f:8a:17:9d:a0:ca:
         fc:64:a1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:52:58 2026 by rpki-client