Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da59fd2d-323a-3905-9f5f-8b77b9fd1e82.roa
File:                     da59fd2d-323a-3905-9f5f-8b77b9fd1e82.roa (raw, json)
Hash identifier:          VuOK8rMCPusxvGys4F61WUHP+OeI9HY9Hu/UgzJShtU=
Subject key identifier:   67:FB:11:31:A2:30:6F:1A:A4:31:13:01:2E:E7:1B:29:12:22:FE:7E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4AEF6967E485A9244D218480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da59fd2d-323a-3905-9f5f-8b77b9fd1e82.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        172.68.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:69:67:e4:85:a9:24:4d:21:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=d9aa4dad-5bca-451a-a59a-fe283a1962a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bc:13:44:07:b5:d7:0e:29:bd:1f:57:1a:1d:
                    c2:7f:da:0d:e9:5c:04:3c:fd:4e:43:18:01:3b:cc:
                    ba:e4:2f:15:2b:3c:35:65:30:be:18:2e:d5:c8:7e:
                    ec:5c:1d:55:0a:be:d2:81:64:79:c3:24:97:bd:2e:
                    82:b4:fb:8d:f8:16:ef:45:f7:0a:35:74:a7:db:3d:
                    5e:f5:97:3b:01:ad:58:8a:96:d4:41:1d:67:22:6c:
                    22:ef:48:f8:8d:6d:2a:d3:d0:6c:7a:fc:3c:dd:cc:
                    b5:d8:18:d9:76:8c:5e:e5:08:88:15:c8:57:dd:0c:
                    d5:90:d2:d2:94:4d:eb:4a:50:43:81:bc:3d:2c:ac:
                    55:c8:f6:51:06:37:83:aa:79:5b:f3:5f:2b:e4:01:
                    57:d9:88:b9:a6:48:27:77:73:c2:c2:0c:8f:61:10:
                    55:bc:a6:36:8a:ad:f3:4b:c3:c0:32:82:af:12:a3:
                    47:7f:b7:d8:e8:7f:91:8a:50:e9:7d:78:6d:ab:b0:
                    d0:99:a9:a2:af:6a:23:49:22:fc:e3:6f:a3:71:d3:
                    5a:9c:2b:4d:fa:68:d2:f2:a1:db:4a:b4:06:f2:17:
                    a4:5d:ff:c9:3f:ee:79:f4:1a:c0:75:b0:a8:7b:a4:
                    a1:e5:b5:31:85:24:85:43:63:5d:3f:cc:d8:c9:f1:
                    86:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FB:11:31:A2:30:6F:1A:A4:31:13:01:2E:E7:1B:29:12:22:FE:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da59fd2d-323a-3905-9f5f-8b77b9fd1e82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:88:5d:0a:c1:41:90:9c:b7:90:72:cc:a0:e0:bf:40:2b:58:
         af:25:e4:01:62:04:69:94:cd:65:54:ef:0c:45:c8:40:6d:de:
         57:31:43:8a:5b:91:bb:4c:6a:11:eb:a1:0a:5d:97:51:c4:f3:
         5b:65:8f:6c:0b:77:8a:7b:6b:8b:04:bc:7a:3b:f8:55:00:94:
         58:6e:9f:ec:14:c4:20:2c:91:8c:fd:8f:a5:d2:9c:c5:c9:63:
         91:8f:bf:3f:bd:d7:b2:4d:5e:af:b7:b6:4e:10:c5:16:3b:49:
         47:2f:77:3e:f0:5a:58:a4:6c:76:52:59:94:6c:08:fa:26:91:
         d4:dd:28:a3:fe:55:d1:f2:db:8a:cd:ca:88:6d:14:a3:24:f0:
         01:44:3b:9d:96:92:81:72:6a:fc:ea:c2:bb:d4:69:97:b0:01:
         05:6e:d4:bb:7f:1d:c6:1a:26:9d:c5:60:94:78:7c:92:c8:63:
         99:e1:ba:d7:5a:6a:84:68:db:ea:3c:a8:2f:82:1c:e4:50:a9:
         80:de:55:37:9a:9f:b4:d3:05:18:5e:9e:29:1f:f8:a5:75:7a:
         7a:48:73:9b:da:bf:59:4a:7c:8f:66:ae:94:da:b0:bb:26:1f:
         49:66:bf:af:dd:64:13:84:c2:4e:6c:a6:25:17:3d:7e:42:21:
         ce:86:d3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:47:18 2026 by rpki-client