Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fbe50946-2663-37b3-a7a4-dd8c923176ee.roa
File:                     fbe50946-2663-37b3-a7a4-dd8c923176ee.roa (raw, json)
Hash identifier:          4uv73q+I39RD0EWuoDpmBsVl3ImGSEjX1trudtjImFY=
Subject key identifier:   42:6C:3D:2A:3E:50:B1:FD:CC:6F:15:05:58:EE:C4:BA:ED:F4:40:9F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4AEF5752E2115C51BD504600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fbe50946-2663-37b3-a7a4-dd8c923176ee.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        172.68.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:57:52:e2:11:5c:51:bd:50:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=24bcea24-e2fc-4938-b156-cd83a349f1ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:00:77:49:8d:6c:9b:05:a8:1a:78:df:80:6c:
                    65:a7:5f:5b:df:66:fe:4b:32:17:c4:c3:b7:f7:1b:
                    07:f2:8b:72:2d:ea:66:4c:5c:9f:b2:97:52:b1:51:
                    d3:e5:3c:b8:e1:47:3d:8c:bd:3f:b5:35:9c:85:fb:
                    33:e9:e5:c1:05:a1:f8:cc:96:3b:89:f3:5f:cb:93:
                    f1:8a:1e:21:c2:2d:35:df:e2:f6:d2:c9:ce:0c:67:
                    d7:f2:7c:c2:2a:88:40:96:a2:83:50:52:7c:85:2b:
                    e4:20:2a:20:cc:91:5e:86:39:76:15:42:63:f8:a7:
                    1a:73:3d:80:7a:99:1e:f0:33:c9:ea:4f:cd:2f:47:
                    5f:d5:dc:ec:9b:1a:0f:18:d4:39:d4:d1:53:1b:63:
                    98:50:ac:f1:ac:79:b4:06:a5:25:af:9d:f2:41:e2:
                    45:ab:35:71:e1:2b:c3:88:13:87:f6:57:a2:5f:b8:
                    f2:cc:c0:41:6f:7d:a7:09:f8:51:90:9c:c2:fd:10:
                    b7:1a:35:3e:b5:56:60:4a:1d:46:9b:c6:d0:7e:3b:
                    f2:b8:8b:10:49:6d:a5:1d:ce:9f:48:ae:ce:fd:af:
                    7a:23:54:12:50:ef:2b:0f:3d:de:80:59:67:78:a8:
                    cc:0b:cb:03:77:3a:f7:7d:0c:f9:a1:63:3f:d1:57:
                    15:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6C:3D:2A:3E:50:B1:FD:CC:6F:15:05:58:EE:C4:BA:ED:F4:40:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fbe50946-2663-37b3-a7a4-dd8c923176ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:29:24:0b:8b:5d:80:8a:5b:4f:67:38:09:63:e8:4b:bc:ea:
         e2:ed:a2:e9:d8:c1:3e:b2:d3:0d:6d:57:93:6c:fd:5e:dd:d3:
         ee:c3:18:8c:21:94:b3:41:5b:47:7a:87:bc:14:bf:8a:91:f1:
         0c:1d:ea:97:ab:03:03:32:cc:15:ee:f4:f8:54:8c:75:79:2f:
         6e:46:15:08:a2:72:a2:14:2f:d9:d1:9d:ba:9d:9c:44:3f:db:
         10:35:2e:95:df:20:86:d6:a7:50:e7:45:63:4f:57:5b:3b:21:
         3b:fa:b7:4e:32:78:95:d0:91:eb:1a:92:d7:bd:31:18:a1:39:
         fe:08:17:81:ee:57:bd:27:d1:49:42:5f:02:7a:a3:c2:63:30:
         8f:bb:ef:e8:8b:63:ed:17:e0:07:19:d9:8c:b3:eb:37:68:43:
         c2:d4:d8:bc:3b:6c:bc:a7:9a:48:c1:60:fa:fc:18:a9:ac:5c:
         7a:6f:d8:a9:55:bc:11:bb:19:c1:de:c5:2c:b5:8c:9b:19:01:
         09:e7:9c:b0:7a:10:58:15:84:42:ab:dc:e9:35:e7:86:73:12:
         5c:f3:a1:6e:f2:06:ef:0f:c8:ac:57:c8:8e:e6:ca:4d:82:3d:
         b2:91:ec:e5:3f:21:8f:c0:51:7d:ff:6d:45:1a:6d:85:76:3a:
         86:9c:22:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:53:56 2026 by rpki-client