Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1fe2b666-cc96-3a3b-b4e3-11cc28554a08.roa
File:                     1fe2b666-cc96-3a3b-b4e3-11cc28554a08.roa (raw, json)
Hash identifier:          GZqBjO5cCJLYlexrGXOVWqVaeHe0z7OF3kufK7zl+dM=
Subject key identifier:   18:4C:FC:1E:B9:5F:B4:77:B8:77:61:7A:70:CD:25:81:C9:9C:E3:AA
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D6C0FD34E8C780740A7D63080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1fe2b666-cc96-3a3b-b4e3-11cc28554a08.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     13335
IP address blocks:        172.69.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:d3:4e:8c:78:07:40:a7:d6:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=3f7a4116-1db4-43c4-b115-80e581613921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:83:38:97:6e:4e:f1:e8:a5:06:26:d9:8a:b6:
                    a0:2a:1e:f7:67:a6:07:85:15:7d:9a:d6:97:0b:cc:
                    27:4b:6d:84:a2:ac:7b:12:43:1e:71:fa:ef:3b:7e:
                    0f:b6:7f:fa:44:d0:f9:75:2c:78:1d:1b:08:1b:94:
                    7b:54:ad:1e:46:22:6d:50:7f:bc:33:20:07:6b:35:
                    40:c4:3e:dc:24:b2:88:0c:fa:de:6d:ba:c4:42:44:
                    7e:cb:7b:f6:4a:8b:24:3c:9d:c2:ba:21:e8:92:b8:
                    cd:9d:e6:d8:48:df:20:70:0b:35:6f:b7:b4:20:91:
                    5f:30:1c:81:43:62:87:5e:78:6a:47:12:ea:fa:35:
                    97:12:b8:78:38:6b:7c:32:97:58:23:49:58:c9:04:
                    dc:3b:3c:f3:6a:9f:72:51:44:86:51:b8:3e:eb:af:
                    83:55:2d:56:cf:1b:46:70:bc:c7:65:44:37:3a:40:
                    1b:ea:22:be:2a:12:f8:cf:8e:3e:57:11:99:bb:85:
                    f4:cf:53:0d:86:a3:de:ac:e1:f1:29:3c:cd:f1:79:
                    09:3f:a3:0f:93:47:72:c2:7e:02:d0:46:2c:28:70:
                    6a:96:33:81:77:ee:0c:2d:90:e1:6a:66:05:19:11:
                    90:cb:9f:8f:2d:e2:d3:51:aa:06:64:db:97:ec:ee:
                    69:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:4C:FC:1E:B9:5F:B4:77:B8:77:61:7A:70:CD:25:81:C9:9C:E3:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1fe2b666-cc96-3a3b-b4e3-11cc28554a08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:98:79:e9:ab:fb:b1:15:6b:1a:61:d5:3e:ee:41:f1:a4:e3:
         3a:30:af:60:2e:51:9e:30:98:5f:ba:84:5c:f2:30:77:ca:ee:
         7e:c0:9d:28:f8:6b:74:66:f5:82:8c:f1:1c:b7:71:ad:35:97:
         03:f8:db:13:5b:e7:89:17:03:ab:49:fd:f4:58:58:5f:55:95:
         5e:15:cf:8e:01:3f:6e:ca:3a:62:8e:a3:e3:9d:0a:de:91:74:
         47:f6:88:7b:5b:ee:70:8b:b5:1c:8a:76:49:38:fd:2d:c3:85:
         47:84:c5:db:ab:fb:21:fc:fd:ca:01:fa:a5:e3:9a:a4:e0:3c:
         a4:97:93:9d:5e:d4:9d:5d:64:2e:7e:2b:af:9c:81:35:27:a6:
         40:aa:8b:41:ed:fa:c0:f7:dc:10:c9:b0:1b:5e:59:77:b5:c7:
         5c:51:bd:15:52:33:48:af:1f:9b:bc:38:ef:0c:6f:58:0d:15:
         e3:cf:3a:1e:56:8b:2c:9c:8a:f7:d1:43:3f:8b:16:e3:d3:97:
         9e:88:6d:79:b8:e0:53:76:5d:2b:c4:24:67:2a:c3:a8:39:a1:
         0c:fc:5c:30:1d:f3:bf:51:a0:f6:15:9f:fd:41:f4:a9:34:59:
         f9:8d:f5:fd:71:df:ec:d9:2a:0d:ac:ee:f1:56:6a:63:f8:53:
         c4:3d:65:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:22:08 2026 by rpki-client