Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f6eb537c-b06e-3843-bf7e-86804272f555.roa
File:                     f6eb537c-b06e-3843-bf7e-86804272f555.roa (raw, json)
Hash identifier:          T8gZmiCY7WKLKWhCbdwnjGEkU+xhEtby34HclDm2ei4=
Subject key identifier:   96:D0:6E:40:77:49:F0:F9:75:6E:FF:B1:E6:8E:B8:61:9A:12:CE:7A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEEB776E77FB5904EA2A0A250
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f6eb537c-b06e-3843-bf7e-86804272f555.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     13335
IP address blocks:        172.69.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:76:e7:7f:b5:90:4e:a2:a0:a2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=bae5746d-6b05-4015-a43d-fb3b603caaf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:14:5b:bc:20:b5:6f:68:d6:00:e9:59:86:8d:
                    23:05:54:dd:b2:fe:60:2e:aa:83:48:d3:ac:b4:7c:
                    6d:18:f5:01:06:4c:98:6b:b2:24:41:30:18:69:fa:
                    13:92:fd:d9:c9:b0:90:b6:5d:f0:e9:fd:51:ee:e1:
                    46:68:4d:bb:6b:84:20:92:ec:03:b9:36:6e:98:db:
                    71:4e:d2:9f:af:76:50:c4:21:f0:69:71:f4:e8:52:
                    c5:45:f5:e5:f2:f2:65:3c:44:9b:09:54:0a:64:94:
                    a9:95:b7:5f:d9:e8:06:a5:82:c8:3a:4b:69:01:1e:
                    d0:56:e2:56:32:9f:0d:ec:31:44:5c:34:f9:e5:07:
                    f7:8c:dc:40:79:45:1d:41:57:3d:90:68:8e:36:6c:
                    ab:6a:82:69:16:75:25:90:63:39:3d:d1:85:54:4b:
                    48:2f:bc:ff:d1:53:ff:b2:02:ed:3e:ca:7e:9e:f9:
                    f8:c9:8b:d9:9d:fc:ed:5d:e3:14:59:86:5c:19:b1:
                    c6:cc:4f:8f:d5:72:04:f6:d5:e1:0f:74:7b:41:e2:
                    ee:36:93:62:6d:eb:02:28:16:83:d4:47:21:ec:cb:
                    fd:a3:2f:96:1b:02:0c:be:ba:7d:bd:ce:b2:b3:72:
                    85:11:f2:04:53:39:d9:44:7a:10:e6:cc:9c:1b:83:
                    c4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D0:6E:40:77:49:F0:F9:75:6E:FF:B1:E6:8E:B8:61:9A:12:CE:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f6eb537c-b06e-3843-bf7e-86804272f555.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:3f:96:f5:2b:82:38:a8:5d:18:83:f7:0c:da:58:06:eb:15:
         53:27:1c:2a:73:5f:28:f3:3b:fd:11:9b:50:f7:06:1c:d3:5d:
         b8:1f:3f:94:97:34:d9:f6:55:b1:e4:8d:51:d0:35:dd:eb:e8:
         e2:dd:92:3b:b6:2b:58:e9:d7:41:ed:9e:93:d0:bc:94:f2:c0:
         b6:b8:5d:26:d8:e8:87:ae:97:77:40:a6:bb:54:b1:af:87:0b:
         ac:e0:2a:68:fe:0d:9e:57:76:ea:0d:b6:03:63:a3:2a:0b:88:
         64:b6:e1:86:ba:4a:e0:3b:e9:4a:a1:24:16:eb:47:12:77:dc:
         1a:22:fc:a0:21:e2:9a:51:cb:b4:99:48:3a:43:17:f5:8f:21:
         47:c0:38:74:5d:70:24:e9:fc:4c:b3:2a:c2:d5:f7:ee:d7:bc:
         e6:b3:4e:45:ff:fa:a3:10:76:ef:fb:29:a1:47:d0:9a:c1:85:
         e1:a5:5c:d7:12:28:e4:b8:7f:61:c5:12:d3:af:15:92:75:06:
         40:1b:c7:98:6b:a0:e3:a3:36:30:08:7a:d2:8e:b1:1f:c8:ff:
         25:f8:4f:e6:bf:69:7b:9b:90:54:2a:28:2e:39:6d:e3:8e:7f:
         29:d6:ee:9e:8a:bb:58:47:fc:1d:3d:5d:8f:c6:12:a1:3b:6d:
         49:db:8c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:38:53 2026 by rpki-client