Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ee418550-179f-3cf4-8332-0ce86c163da9.roa
File:                     ee418550-179f-3cf4-8332-0ce86c163da9.roa (raw, json)
Hash identifier:          NAH1AVLXaEhRRczVCw2Dy9G+KikzQV6uZ6CYh8YVlDo=
Subject key identifier:   98:0F:14:AB:35:5A:D4:FD:8A:9F:C7:49:E2:A2:F4:98:19:71:D0:47
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEEB776D1487B785D1483BB40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ee418550-179f-3cf4-8332-0ce86c163da9.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     13335
IP address blocks:        172.69.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:76:d1:48:7b:78:5d:14:83:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=867aa425-ad2a-4a08-9841-18a7b30240f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e7:c4:9e:8e:84:8d:01:f8:bf:ca:bb:7c:07:
                    56:1d:e2:41:39:c4:f3:84:99:51:49:14:6e:fa:db:
                    91:dc:fc:81:57:b0:11:7a:d0:15:61:96:4b:1a:12:
                    48:e4:02:0b:1f:be:cb:da:df:e7:92:07:13:97:33:
                    aa:37:51:5f:25:b7:ca:40:89:cf:3d:ac:37:70:dd:
                    0c:7b:39:66:48:6c:67:47:da:fe:b8:7a:2c:3e:d3:
                    47:00:84:98:c0:6b:19:c1:2a:d4:a1:35:cb:09:c8:
                    78:8a:6d:cf:4f:75:b3:35:06:3a:0e:f2:77:b2:78:
                    77:71:40:3e:86:5c:1b:99:dd:65:50:7a:4f:6c:e4:
                    0e:e6:60:5b:e0:77:49:61:14:0d:e6:9f:0c:1c:86:
                    a4:2a:9b:27:62:7f:8c:b9:c5:54:98:5f:02:2c:e3:
                    fe:d7:c4:c1:a3:02:b9:d7:4f:a5:42:4a:c6:dd:45:
                    6c:a5:e6:aa:57:73:e7:e0:dd:46:ed:4f:62:e0:19:
                    51:d8:32:d7:00:b7:47:f6:74:22:81:fd:b2:6b:f8:
                    23:89:33:e3:2e:d4:33:02:46:e6:07:82:cf:5b:f0:
                    71:89:e8:45:3e:af:a2:9e:89:92:91:b3:9b:d2:c4:
                    12:13:f7:da:5b:24:2a:7b:45:4a:18:5d:1c:7f:5a:
                    e7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0F:14:AB:35:5A:D4:FD:8A:9F:C7:49:E2:A2:F4:98:19:71:D0:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ee418550-179f-3cf4-8332-0ce86c163da9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:a7:3e:b4:2d:68:95:2d:c4:1c:26:ac:71:00:72:67:03:63:
         96:a7:ec:8c:76:4d:3d:48:54:48:7b:7d:25:06:c3:f6:16:6d:
         ba:e7:e0:78:f5:73:ba:5b:bb:ab:b4:37:2b:35:52:3c:ce:a2:
         a8:ff:d4:9e:94:df:ce:b7:d1:ab:ed:39:15:3b:dd:df:a4:96:
         68:74:93:3e:9c:fa:7b:84:f2:14:f7:e3:9c:5b:32:4c:2b:4c:
         a4:65:86:c9:bb:21:fd:0a:b2:ca:13:99:4e:e4:99:16:d2:6c:
         b6:64:b4:b5:82:9b:4e:2d:7f:53:6f:bd:e4:dc:93:49:ef:bc:
         32:c9:4d:5d:cb:4c:ad:f8:24:7a:63:6c:32:cd:3d:ad:30:8e:
         40:2e:8d:93:26:2e:a6:70:22:f9:bc:f9:04:a8:61:d2:0b:e1:
         f1:8e:44:65:fd:20:74:4b:e9:dc:d4:17:5b:47:3f:19:ee:ab:
         05:10:32:68:44:fd:a0:39:15:6d:0d:25:54:73:33:61:7c:24:
         c1:0c:be:9c:1e:e9:29:f4:0f:f8:ba:08:c4:42:42:ed:1d:45:
         e1:f5:71:dc:17:0e:8f:0d:83:66:07:2b:5d:6b:b8:e9:21:6c:
         5c:95:1c:71:30:6a:00:78:05:78:16:0c:98:64:d8:de:91:c0:
         3d:c1:fc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:22:13 2026 by rpki-client