Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f3f58065-2558-3d70-ae37-d83b3b4ed7ff.roa
File:                     f3f58065-2558-3d70-ae37-d83b3b4ed7ff.roa (raw, json)
Hash identifier:          E4YtKi7BB4yUZjSlDdCEndpkVoOxtH1yRj0GifgPU3k=
Subject key identifier:   2A:04:49:FC:5B:FD:98:37:35:BD:3B:E4:08:E4:87:85:88:0C:2E:FF
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEA8775FCB0C5B10EF8A59C90
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f3f58065-2558-3d70-ae37-d83b3b4ed7ff.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        172.70.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:75:fc:b0:c5:b1:0e:f8:a5:9c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=69806c5f-399b-426e-97ff-1ea583707980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0a:00:3a:4d:ed:31:37:f4:f3:6a:14:17:d0:
                    3b:36:93:94:14:77:9a:bf:2b:28:f7:9a:6f:8e:3d:
                    81:c7:b6:62:bb:ca:f9:c5:8f:55:81:ac:ff:fa:73:
                    38:fb:52:98:d7:19:70:ba:74:b8:95:d7:76:ec:e2:
                    09:fb:25:10:a3:cb:da:64:ed:40:cd:5c:ae:70:4e:
                    5c:e9:9a:86:ea:7d:bd:e4:26:04:c1:01:ff:f3:ea:
                    1e:c6:0a:58:0c:05:54:3e:12:3c:94:f2:b9:c3:06:
                    8c:5e:26:1a:0e:b1:78:c6:ab:2c:c3:54:8a:81:5f:
                    2c:2c:fd:2b:c6:6a:d9:29:08:eb:5f:0d:2c:0a:4f:
                    e1:07:6e:6c:87:4b:f8:b3:89:b5:ef:ae:5d:24:d6:
                    82:ba:6d:2d:63:2c:52:99:83:f9:d1:65:44:0b:04:
                    9d:4f:fe:62:c4:03:ef:d3:89:da:14:1c:54:81:16:
                    f4:ff:1c:8e:85:c0:df:67:d1:05:60:fa:21:38:41:
                    fe:94:45:86:a4:8e:bc:9e:2b:55:85:c5:05:a2:12:
                    0d:6d:77:0f:26:c3:76:be:37:de:95:e6:5e:38:79:
                    79:2e:5e:f1:2d:76:42:f2:41:7c:0f:2b:32:70:11:
                    67:63:5f:8e:03:53:28:af:0d:5b:54:d7:5e:72:2a:
                    21:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:04:49:FC:5B:FD:98:37:35:BD:3B:E4:08:E4:87:85:88:0C:2E:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f3f58065-2558-3d70-ae37-d83b3b4ed7ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:91:5f:01:2e:84:7f:68:50:e6:ab:fa:5b:a2:79:8b:61:3d:
         b0:59:9b:b6:2f:e8:e4:b3:60:62:f6:8d:d0:37:7f:5d:ba:91:
         90:96:73:5a:94:1c:7e:59:0d:a1:dd:54:56:9e:0f:0e:61:50:
         4a:a7:70:f3:76:7b:4c:5b:73:65:f0:79:26:1f:e9:9a:ed:b1:
         8b:35:77:ac:50:c1:39:ae:79:f9:01:a3:48:64:f0:50:f7:30:
         77:49:e0:0d:4b:bc:1a:71:72:b0:45:8d:94:81:38:fb:0c:be:
         aa:24:82:b1:29:88:b9:9a:6e:29:14:87:32:ca:cf:a4:f9:41:
         6e:b8:33:e2:c5:fb:1b:58:ef:ab:e1:6d:99:b5:7d:2e:f4:ca:
         89:48:d6:ff:3c:94:d7:fa:b0:9c:a0:34:c8:54:a0:68:0a:97:
         7a:22:37:35:a8:84:45:63:de:df:d3:a0:1c:69:62:f8:21:49:
         55:2a:23:01:6c:5f:b4:6f:88:87:e2:7c:96:ac:3d:82:7a:5d:
         a7:a4:1f:b8:c4:c0:73:f9:ee:2c:cb:23:51:1c:d5:fc:a5:26:
         35:d2:86:c7:9e:fe:96:ff:3c:1f:fa:2c:eb:07:e4:f7:02:93:
         83:3a:1b:40:b5:e9:fc:01:94:80:2b:76:dc:b2:05:17:6c:82:
         48:42:8f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:03:16 2026 by rpki-client