Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e020ec9d-d13f-3a4c-938a-ff1d5d18c072.roa
File:                     e020ec9d-d13f-3a4c-938a-ff1d5d18c072.roa (raw, json)
Hash identifier:          cZ3ucnjiaBswraPyld80Ta9TYO9WPuqUuEWTNNOH8hs=
Subject key identifier:   8C:47:2A:62:8A:D1:C3:23:2E:51:7B:9D:39:1D:97:36:3A:C1:47:A4
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EED522CE58157890053BA9280
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e020ec9d-d13f-3a4c-938a-ff1d5d18c072.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        172.68.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:2c:e5:81:57:89:00:53:ba:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=852a81cc-0c55-4581-960f-1ed31f81fb7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b1:27:71:e5:d8:f2:c1:4f:77:13:a5:de:14:
                    96:01:f4:1f:5b:c0:41:53:a8:9c:67:32:0b:02:ed:
                    7c:6b:eb:89:5c:a2:f8:c5:af:32:5e:4c:53:36:5f:
                    44:7b:a0:62:ca:24:ee:72:21:2a:e5:68:8d:9f:f7:
                    3a:54:4c:fe:ff:dd:b3:f8:1a:e1:d7:97:15:3b:c1:
                    a7:92:95:08:f9:e1:38:12:6d:f0:80:dd:74:54:f3:
                    bc:58:dd:d7:05:3b:76:f1:ee:6c:e5:88:88:1f:35:
                    17:0d:ec:ae:72:8d:7f:c7:8a:7c:d2:f8:06:4b:fb:
                    ab:c7:b6:a4:83:5e:f4:fc:a8:e0:a6:c1:14:00:1a:
                    0e:36:cd:38:07:6c:97:49:29:8b:0f:c2:51:e5:d3:
                    28:82:16:44:13:d3:f2:bb:83:c8:ad:d7:68:86:97:
                    43:e2:a6:82:87:81:0b:88:13:90:93:fe:6d:bb:e1:
                    93:65:3e:d2:f6:f3:cc:55:af:6a:32:07:59:8a:d1:
                    11:64:c7:38:42:15:42:1d:cc:04:d6:f1:06:ce:2d:
                    de:40:da:26:21:a5:76:a6:38:9e:ff:e8:c0:97:ba:
                    8a:9d:a3:18:45:a3:f8:17:e1:53:2a:e5:7f:e5:b9:
                    51:06:7b:4e:0d:7f:de:33:51:80:25:ba:50:de:bf:
                    74:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:47:2A:62:8A:D1:C3:23:2E:51:7B:9D:39:1D:97:36:3A:C1:47:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e020ec9d-d13f-3a4c-938a-ff1d5d18c072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:07:86:2a:bd:e8:47:84:fd:96:20:bc:67:f4:65:a0:cc:0e:
         28:6c:85:f5:ab:83:85:18:25:62:77:fc:ee:29:80:5f:ee:de:
         06:8d:d1:fc:55:e4:36:bc:66:af:b3:06:10:7f:86:f8:30:e9:
         76:a2:46:52:00:49:2a:bd:e7:a2:3a:1a:bb:02:c8:3e:83:1d:
         ba:46:eb:ab:fe:17:b1:2c:ee:63:05:5d:a5:e6:5d:d7:a2:4e:
         17:71:e4:80:98:d6:ec:72:0a:95:91:07:d4:dc:95:d8:2e:46:
         e8:b4:d6:9c:81:6a:f1:1c:6f:83:c6:c1:89:15:f9:52:5a:2f:
         f5:84:e5:2a:35:9b:e1:ae:f7:c9:32:85:1a:27:4d:ff:d3:5c:
         e0:1b:2f:20:05:fc:82:69:8c:da:c9:ce:79:7b:c8:f9:54:0c:
         f2:1a:e7:ce:4e:29:5d:18:a9:ba:87:72:be:a3:d6:c8:a5:21:
         6d:58:4b:57:5f:c4:ef:2b:e2:6b:fc:38:d9:f1:3d:a4:fa:f3:
         a3:0c:b6:a9:32:17:f4:be:b6:f0:04:a6:eb:81:3b:82:4e:0b:
         53:bc:21:23:e4:25:5f:9b:dd:c4:b1:5c:1a:1a:03:11:35:24:
         5e:93:f8:f1:86:0c:32:bb:3f:e4:7e:79:97:78:7e:7a:93:c5:
         5e:a3:df:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:09:57 2026 by rpki-client