Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24623cb4-a137-3d76-a45c-126f643d62f1.roa
File:                     24623cb4-a137-3d76-a45c-126f643d62f1.roa (raw, json)
Hash identifier:          W9qpyhPFugfiuyM0Qqha9wiLXf+w27WVcNl2GiBeG34=
Subject key identifier:   28:98:BC:6B:0D:E1:0B:08:73:F6:44:75:BA:98:30:9D:82:FF:BD:CC
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D6AAAA6BC5182D7DC81D0CA80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24623cb4-a137-3d76-a45c-126f643d62f1.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     13335
IP address blocks:        172.68.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:a6:bc:51:82:d7:dc:81:d0:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=6dcf7c6a-f010-449e-8491-29bcf4e2d624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cc:b0:97:c3:8b:05:4e:8a:51:ce:84:27:f7:
                    93:51:1b:52:37:6f:35:33:b9:f8:3b:b2:14:15:b9:
                    f1:98:9e:3b:18:00:56:78:04:14:f1:3f:3f:73:bd:
                    a1:25:24:05:97:f1:13:77:90:a5:61:07:95:3f:ed:
                    7d:db:2c:59:ff:88:28:13:72:92:07:53:9d:f8:7a:
                    e3:35:ea:bf:63:2c:7f:83:7c:72:af:b3:53:58:1a:
                    83:a1:64:f9:07:49:20:92:eb:a1:8f:ca:ee:e0:ab:
                    85:fa:8b:36:7d:22:13:27:b1:32:86:ca:01:84:8a:
                    0f:4e:60:e0:43:09:56:87:da:a1:01:ec:7f:1e:ef:
                    bd:39:39:32:59:c1:a9:dd:6a:29:8b:f2:a5:08:3b:
                    15:6a:16:91:95:2e:de:8f:82:5c:89:9d:5c:f7:43:
                    55:00:7f:bf:fa:03:f0:01:77:fb:28:37:cb:61:e0:
                    3a:3f:be:41:a2:1d:f4:f7:d5:dd:c9:44:ba:87:52:
                    7a:72:89:08:2d:16:bb:fa:76:a7:11:e6:96:42:63:
                    b6:75:a9:9e:50:56:3f:55:23:e7:ae:86:36:79:4f:
                    92:63:98:6f:97:d5:97:48:dc:86:c5:9b:8d:25:74:
                    0f:e6:a7:a9:65:95:2d:da:51:7b:54:81:a3:3b:a4:
                    94:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:98:BC:6B:0D:E1:0B:08:73:F6:44:75:BA:98:30:9D:82:FF:BD:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24623cb4-a137-3d76-a45c-126f643d62f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:77:df:8b:79:76:a6:3b:3e:64:3d:d4:3d:11:79:6a:19:4c:
         4f:b1:ae:e4:2e:94:51:5d:86:6d:02:18:61:36:7e:14:a7:1c:
         da:81:91:ca:9a:eb:ca:cf:9c:58:32:96:7d:81:0e:d1:f9:68:
         c0:e3:39:14:9a:03:3d:46:fe:5f:df:70:22:fe:8b:0c:35:2a:
         83:b6:fc:d4:92:88:f2:16:05:6a:0c:15:58:8d:45:54:60:07:
         55:46:bb:e3:49:c6:6f:e9:3e:2b:75:31:94:7b:01:81:76:2c:
         b4:c5:1a:04:e6:fc:03:b3:9a:9c:be:2c:b6:2b:d6:7b:64:ba:
         bf:1f:95:b3:11:b4:da:37:30:9d:ee:67:02:d3:2f:be:cd:77:
         1b:3d:83:0b:a9:f3:2f:54:42:98:c6:16:11:10:51:a1:cc:9f:
         df:5a:2b:b6:5b:60:ae:6a:fa:44:81:62:ab:10:20:f8:71:65:
         09:f8:ef:52:6e:28:91:94:77:85:39:10:e7:ba:42:1e:cf:67:
         50:11:cc:ef:0c:a3:8f:0b:c3:d7:09:8a:90:e3:2e:09:2f:17:
         09:ba:ce:e3:0d:89:5f:85:b8:18:49:59:f7:dc:5b:b3:9d:fb:
         59:38:46:a4:20:24:11:56:76:37:40:f3:ab:b8:fd:71:f4:e9:
         f4:61:09:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:10:05 2026 by rpki-client