Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f1c2e7ac-c994-3831-b4ff-b35d9deda3fe.roa
File:                     f1c2e7ac-c994-3831-b4ff-b35d9deda3fe.roa (raw, json)
Hash identifier:          196W/QRAosKu/PPbyrh/uVP5OtZQM3XUBwTezPcsrHA=
Subject key identifier:   A6:C6:13:5B:47:CD:0F:02:21:B1:1A:9A:18:30:FB:58:AC:4D:8D:43
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D8EF5521200CB774C07F32E40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f1c2e7ac-c994-3831-b4ff-b35d9deda3fe.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     14789
IP address blocks:        172.69.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:52:12:00:cb:77:4c:07:f3:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=b83e5687-fff7-420e-9a02-69648225784e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a2:52:cc:9f:e9:89:96:48:89:00:64:09:b4:
                    22:ff:22:65:6e:37:ea:d6:6c:c4:b9:80:f9:63:ad:
                    fe:6b:fd:71:f7:0f:69:87:58:57:56:47:82:b4:08:
                    db:23:89:81:43:11:55:89:31:34:af:6d:be:ae:a1:
                    e6:93:53:d3:9f:90:84:af:7e:d7:c9:67:00:36:10:
                    ac:63:f3:38:f8:ff:8e:0c:f2:5d:cc:6f:7c:57:8d:
                    09:c6:09:71:4b:11:18:e6:ae:0d:42:6d:ef:2a:09:
                    27:42:71:f3:88:e0:17:8e:11:07:f4:a3:bd:31:3b:
                    2e:f0:49:b3:7c:6c:3c:de:44:89:ec:19:aa:f8:45:
                    aa:d2:a5:43:b1:e8:7b:e0:72:18:40:5b:74:f6:97:
                    e1:b0:55:11:cb:4a:58:fb:f6:0b:1a:38:02:40:db:
                    79:c7:1e:e5:98:ac:94:98:78:58:ff:07:14:d0:9d:
                    e2:d3:06:73:7f:c7:1d:61:eb:5a:a9:f1:15:49:f1:
                    b2:09:84:b0:7d:07:54:88:fa:1b:11:fd:1a:c1:1d:
                    10:0d:f8:8e:c5:1a:f9:3e:8d:c7:d7:81:09:a9:b7:
                    f4:37:96:dd:d1:57:e4:63:1d:a8:ae:ba:f2:b3:7e:
                    c2:bd:d0:71:85:c3:9a:99:40:01:97:60:99:3a:53:
                    a3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C6:13:5B:47:CD:0F:02:21:B1:1A:9A:18:30:FB:58:AC:4D:8D:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f1c2e7ac-c994-3831-b4ff-b35d9deda3fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:3f:46:62:9d:86:f2:f5:89:36:5f:97:a6:22:31:32:a4:9d:
         4d:b6:8f:1e:38:57:09:2a:d9:22:71:60:c9:40:43:03:01:0c:
         40:11:b3:1c:ab:42:0f:69:53:27:98:7d:b5:b6:c1:7a:8b:66:
         a9:06:83:da:d3:21:50:d4:04:6e:4e:41:09:05:ae:0b:59:a8:
         47:b2:1b:ec:93:a5:3b:58:33:76:ef:3c:c1:ce:fc:dc:3d:47:
         a8:02:2e:c9:32:da:10:1e:c4:b4:d0:6d:45:41:4c:8e:1f:2d:
         af:e9:46:69:73:c0:03:47:16:ea:b9:59:b6:bb:52:ff:78:16:
         41:90:91:4f:7a:ae:a3:41:27:e2:84:75:e2:56:79:5b:5c:4c:
         76:1d:40:3f:2c:63:3a:97:f6:4e:d1:34:25:cb:aa:e1:fe:87:
         c5:ec:b4:e7:b3:8d:b5:79:fd:42:9f:b9:7b:3c:59:f8:7d:86:
         ed:0f:b7:3d:df:a1:d0:dd:45:f1:ce:10:d5:49:39:51:04:a0:
         50:8b:4f:e1:7e:2f:5a:d1:45:59:3a:c1:ec:dc:27:56:be:76:
         ae:f7:98:87:94:02:5d:af:78:74:9f:02:b6:1d:38:26:e1:ae:
         0a:d0:a9:4e:df:e2:3b:ec:55:2d:e2:d0:5f:af:b8:7a:7d:01:
         7e:d2:19:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 06:10:43 2026 by rpki-client