Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ee0737cb-18e9-3a1a-8d80-0dbe2a23895e.roa
File:                     ee0737cb-18e9-3a1a-8d80-0dbe2a23895e.roa (raw, json)
Hash identifier:          cgEG8+5T9DPHB3iCcKQP0ChRGZcbjYHnKADdTOcvmTM=
Subject key identifier:   93:D0:D7:D2:F8:4E:68:C0:30:17:A4:A9:32:31:02:4F:FA:BA:69:69
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4C549B3CB67402FEBB853E80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ee0737cb-18e9-3a1a-8d80-0dbe2a23895e.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     13335
IP address blocks:        172.68.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:9b:3c:b6:74:02:fe:bb:85:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=5a76e08f-2f9a-42e5-9058-333ea281830d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:de:42:67:88:88:21:72:b3:60:dc:e6:d1:4b:
                    53:16:fc:9e:5a:4b:7a:05:8d:0d:e2:8a:91:17:09:
                    4a:7d:48:34:f5:7a:2e:18:97:12:14:ed:4d:9d:56:
                    43:7f:ce:4a:4a:4e:51:57:1f:a5:cc:34:da:b6:29:
                    93:7a:66:5b:5b:85:dd:d7:19:c8:14:40:c0:7c:54:
                    be:d3:1d:1d:c5:00:3c:6c:b7:f8:68:bb:77:42:2c:
                    41:ff:05:68:69:04:6e:9e:a8:58:bc:a9:41:97:ed:
                    0e:52:1d:14:55:42:4b:df:2b:08:b1:bd:78:82:72:
                    47:98:67:dc:a6:8c:d9:17:57:82:02:26:f7:f1:2a:
                    57:69:5a:75:40:9b:a1:87:6c:e0:34:6a:f3:40:ad:
                    36:c6:35:14:c8:eb:8b:60:c2:cc:73:56:98:1e:66:
                    ac:e9:ac:fe:78:c5:b3:41:c6:8a:a4:78:e5:e7:c1:
                    97:ea:1d:e4:90:3d:0e:20:27:68:d5:59:5e:71:e6:
                    58:66:0e:47:0b:74:97:61:ab:ae:95:0b:f6:82:b1:
                    c9:c4:b0:37:e4:4e:f3:27:6f:73:98:2b:d3:31:99:
                    42:23:aa:20:7f:12:94:f2:9e:7a:09:60:8a:ad:5f:
                    e5:06:2f:e9:18:95:e3:2c:29:ae:b1:b8:79:93:5d:
                    0c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D0:D7:D2:F8:4E:68:C0:30:17:A4:A9:32:31:02:4F:FA:BA:69:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ee0737cb-18e9-3a1a-8d80-0dbe2a23895e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:ca:16:eb:bb:62:a1:a8:6d:f5:7b:db:73:d6:ea:cf:bf:8e:
         b4:35:ca:90:53:9f:2b:18:bb:38:ba:6c:95:37:9a:e3:43:f8:
         08:9f:e7:f2:c2:d8:30:89:14:0a:90:cd:fa:0a:6b:2e:0a:68:
         f0:f2:47:7c:c4:49:07:fe:5c:ee:32:ea:a6:bf:89:5d:f6:fb:
         a6:da:d8:1f:71:e8:7e:6b:02:66:e0:1b:7f:e6:88:22:e4:d5:
         05:6a:68:59:1b:9e:07:59:df:84:34:e6:93:1a:eb:2c:21:42:
         a5:16:7f:a3:63:3c:65:d8:e5:f9:8b:82:63:de:ca:93:ab:14:
         9c:42:7c:c2:74:80:53:27:b6:18:60:0c:32:2b:aa:2a:cf:ec:
         f6:b0:dc:3e:ac:5a:e1:f8:35:79:5c:b0:66:88:54:63:05:9a:
         c8:27:f9:4e:dd:ff:d9:b6:ae:1b:60:15:15:e0:c6:55:dc:ed:
         ea:ea:c6:11:36:a7:30:a2:8d:c1:84:42:6e:15:75:47:e0:5f:
         d7:fc:cb:39:80:1b:81:a8:ec:16:30:80:aa:fb:b6:4d:25:10:
         55:56:49:07:5c:73:d3:08:b9:ba:ea:16:1a:f3:38:b9:76:eb:
         3d:f4:1b:d1:7f:69:4a:6c:7b:f5:3c:c0:50:31:e8:dc:5a:4d:
         34:d9:c9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:47:26 2026 by rpki-client