Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dceb209b-46e0-3072-8d69-8542b42ef807.roa
File:                     dceb209b-46e0-3072-8d69-8542b42ef807.roa (raw, json)
Hash identifier:          /5lZT8sG8evytPXmqsqqOXZmyBUZeQv4ZA6pIlIYpIY=
Subject key identifier:   BA:81:69:B7:D9:EA:5E:BF:BD:7E:CB:EA:FA:AE:C8:19:3D:CD:06:EC
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4824A8DC88613C55975B0280
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dceb209b-46e0-3072-8d69-8542b42ef807.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        172.64.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:a8:dc:88:61:3c:55:97:5b:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=0b53b99d-4735-4e98-ad34-a3c52881fe0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:37:23:92:67:dc:fb:9c:9d:16:ed:81:70:69:
                    3a:a2:4c:d9:03:cc:de:0a:f0:30:c4:18:ef:84:d8:
                    fc:f2:d3:a8:43:0a:95:a7:09:76:61:41:ad:a5:73:
                    c6:ea:d2:9a:af:5c:97:ba:80:7f:12:8c:45:3b:1a:
                    7d:a1:77:5c:9b:9d:8f:9c:4d:e2:e7:7d:d8:2a:2b:
                    b3:5c:4a:6a:72:00:e1:80:e3:84:37:7e:cb:f9:9c:
                    3c:5f:d1:8f:fb:a6:62:70:63:95:38:67:28:d3:ec:
                    0f:67:f6:c6:dc:7d:72:e8:2f:3b:fc:20:d9:1c:b1:
                    7f:78:06:72:b7:1b:f7:87:0a:fa:84:02:68:89:8f:
                    24:44:26:58:d8:32:6d:c4:2d:76:6d:a3:6e:de:a1:
                    34:ef:19:41:c4:cf:c5:5d:34:52:3d:48:4a:a8:d6:
                    4a:8e:3c:2e:62:d0:57:e2:21:59:5a:8a:b5:c4:b8:
                    f7:42:cf:dc:35:f1:94:3a:a2:ca:16:0f:f3:24:40:
                    c3:c8:ce:1f:cf:15:80:40:66:c9:ba:95:0c:88:f2:
                    f4:4f:41:1f:c8:17:b0:24:96:8e:f3:e1:ee:21:91:
                    7f:99:c4:61:2e:c6:1d:f2:2c:ba:94:10:d2:be:66:
                    42:78:27:97:2f:b5:c3:2e:2b:83:4d:7f:3b:a2:f9:
                    3b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:81:69:B7:D9:EA:5E:BF:BD:7E:CB:EA:FA:AE:C8:19:3D:CD:06:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dceb209b-46e0-3072-8d69-8542b42ef807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:9b:8d:14:9e:c6:e5:08:ad:67:33:42:4a:d6:eb:0a:a2:28:
         0a:1b:09:26:0b:f2:35:0d:3a:e4:2b:91:40:7e:36:c6:d5:d4:
         21:2a:31:4c:41:de:bd:b0:f2:75:ab:9e:fe:4c:4f:b9:7a:ae:
         a7:90:5f:92:88:72:83:49:7e:78:75:23:53:7f:07:06:11:3c:
         14:88:8a:78:a9:2d:c4:90:d1:c4:aa:fc:6c:c0:69:34:14:bd:
         94:72:9f:83:c3:0f:68:c0:e1:aa:00:16:d9:ed:05:90:c8:b2:
         3d:96:56:64:9e:79:d1:21:52:bd:a3:23:4f:4b:ff:93:8a:f5:
         0c:a3:e1:99:be:d3:e1:8b:86:53:98:72:83:95:89:13:7a:e5:
         85:3b:20:9a:d9:80:98:38:d0:0a:0d:c1:d0:87:8c:af:68:75:
         2f:bf:41:df:94:f6:ea:af:4b:55:83:b0:5d:f5:cf:08:03:93:
         2a:35:22:08:cd:0f:9f:86:f8:49:ff:81:c6:99:a6:e4:f0:1f:
         b1:eb:70:8d:10:44:92:00:c5:e3:81:9c:ec:93:c9:72:cf:6d:
         d1:84:3c:77:00:e9:ea:3a:1b:41:24:50:78:b9:7a:8a:9a:9b:
         c6:97:56:a9:89:cf:0d:af:53:8c:2e:87:c7:93:ba:5c:52:9b:
         70:b8:91:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:48:20 2026 by rpki-client