Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06aa9508-1f87-3be6-af1a-ca72ec736648.roa
File:                     06aa9508-1f87-3be6-af1a-ca72ec736648.roa (raw, json)
Hash identifier:          mzil+kViU7em/LCNZU/N/BNoSBFokSsscl3imUSWz64=
Subject key identifier:   8B:7F:BF:61:26:79:2F:4C:A2:E0:C3:5D:63:4C:BF:09:A3:35:17:91
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D6C0FD3DF50DB8C91D4DE3700
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06aa9508-1f87-3be6-af1a-ca72ec736648.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     13335
IP address blocks:        172.69.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:d3:df:50:db:8c:91:d4:de:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=ae35faac-81d3-4bea-bfdc-10cdcfd4b36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:af:06:f4:3a:a6:53:82:a8:aa:b2:1d:ff:d4:
                    71:16:87:ed:54:f1:dd:ef:e9:2d:11:59:e5:7f:4f:
                    3a:83:03:3a:4c:f6:2f:46:54:b3:a3:6a:b0:2e:d6:
                    ce:d5:90:01:f4:b0:aa:5b:bb:5b:e8:4f:ee:70:ba:
                    16:19:59:b2:07:1b:04:e2:59:74:2d:de:5c:44:66:
                    c5:2d:41:83:95:26:01:ae:a5:cf:82:63:6d:1f:85:
                    1b:9f:2f:98:ba:46:88:81:15:fe:19:29:d4:89:07:
                    f8:43:2b:e2:a0:8b:cd:0e:a0:cc:58:8c:16:cd:9e:
                    40:b5:e4:77:81:dc:9a:bb:3f:fe:45:0e:84:a4:5f:
                    8d:a4:63:a6:30:9e:26:67:65:8e:37:13:66:d3:c7:
                    e1:1a:a9:31:04:ea:54:97:1c:b5:f8:d1:3c:9b:b0:
                    50:0a:26:a5:f5:ae:52:4a:a2:59:04:5b:c7:5f:3f:
                    74:e9:34:d4:c1:61:62:c7:65:9d:7f:77:a1:d1:6c:
                    8e:ba:8a:1c:f1:a4:1e:b0:3b:c3:36:72:9f:90:32:
                    fb:6e:e2:b1:23:f3:f9:42:5d:13:92:13:90:e5:bc:
                    f2:a8:d5:96:da:ad:91:39:d6:e9:1d:96:16:40:39:
                    59:d9:01:05:d2:42:1d:b4:cf:d6:a7:6a:51:e0:9f:
                    1d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7F:BF:61:26:79:2F:4C:A2:E0:C3:5D:63:4C:BF:09:A3:35:17:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06aa9508-1f87-3be6-af1a-ca72ec736648.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:fe:96:de:f4:9c:ff:5c:63:81:f8:1b:cb:30:6d:5f:ee:76:
         6b:a4:98:fd:04:80:02:1d:bf:6d:fb:2e:a1:e6:dd:2e:38:f0:
         6d:bf:c5:76:af:be:9b:5a:7d:64:91:13:21:ac:53:cd:fd:f1:
         85:87:f5:13:74:07:e8:ab:72:59:73:b7:a3:c0:5b:68:f4:24:
         f4:c6:8a:23:cf:7c:e2:34:73:dc:80:b3:1e:20:0c:4a:3e:58:
         db:56:1b:cb:b0:89:d1:5f:58:6c:35:6f:37:26:66:2b:66:eb:
         f0:99:1e:6c:34:ba:61:18:3b:bd:53:bf:24:4b:b3:82:72:8a:
         3d:cf:2f:c9:9e:88:51:7f:ab:c4:45:f0:63:47:bc:a9:d9:e1:
         0f:dd:6e:e6:31:cd:3d:a5:1b:2c:82:69:08:68:6d:57:76:cf:
         38:09:0e:f5:09:91:2c:a7:15:97:63:be:36:4e:82:47:05:0b:
         ac:18:c4:76:01:32:c9:14:40:fb:94:66:b4:da:7a:41:c1:fd:
         14:ce:76:87:6d:cc:71:75:f7:f8:93:4b:26:11:a1:60:e9:2c:
         b0:d0:29:bd:47:03:63:f2:10:4b:48:c7:de:9f:39:d6:b3:d8:
         80:f0:1e:4b:33:95:3f:4e:02:fd:53:ef:45:e6:17:1d:82:6e:
         ea:27:9d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:56:29 2026 by rpki-client