Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24ee1655-b2e5-3e5e-bb95-5552f047a98c.roa
File:                     24ee1655-b2e5-3e5e-bb95-5552f047a98c.roa (raw, json)
Hash identifier:          zPaNED+QD8g+/dcE+mo/Zb9NEiRbTr+CGMzptbrl0zI=
Subject key identifier:   5F:C0:75:0F:77:5A:C1:8F:23:91:F5:68:ED:9B:0E:1B:98:E3:5D:98
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D71A51872614CDF3686FD5300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24ee1655-b2e5-3e5e-bb95-5552f047a98c.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     13335
IP address blocks:        172.71.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:18:72:61:4c:df:36:86:fd:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=9a6914a3-0d85-4671-b24f-39f605a2fdb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:78:d0:fc:90:15:2d:d6:1d:b7:75:c7:3b:34:
                    ba:0d:eb:84:92:da:54:97:5e:04:14:03:55:9f:18:
                    a6:d6:f7:eb:7b:13:5c:ca:ff:0e:80:db:50:85:0c:
                    df:04:6b:b0:3f:25:03:fe:11:51:73:f0:5e:34:81:
                    10:00:0e:43:92:47:6c:ac:c4:37:68:78:03:06:00:
                    40:5a:8f:e3:db:75:1b:e8:71:5d:2c:e7:bc:e7:d4:
                    42:f2:87:df:45:51:18:11:c1:42:17:85:72:71:4a:
                    ce:3f:6a:ff:2c:3c:08:63:0b:09:6c:e9:70:81:a7:
                    65:d9:3e:ce:54:15:fd:87:d9:90:c0:0b:ee:5f:c3:
                    88:26:0b:8d:3f:41:45:e3:cf:78:a5:f0:45:53:b8:
                    c6:da:08:6f:cd:37:dc:7d:50:ba:ff:37:b5:45:88:
                    aa:29:17:7a:ac:23:fe:59:3a:99:4c:76:47:28:81:
                    df:c0:fc:33:11:05:e1:cc:c5:bb:89:31:97:ac:b7:
                    09:21:ae:74:40:92:20:ad:58:27:c8:0a:8c:b4:ab:
                    46:8b:ac:00:a7:58:9b:b9:ec:30:02:29:ae:35:c6:
                    84:f4:21:a2:8d:36:62:4b:ce:33:16:9f:80:d5:87:
                    75:4d:cb:69:2f:ae:11:9e:0f:76:3b:e7:c4:81:95:
                    18:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C0:75:0F:77:5A:C1:8F:23:91:F5:68:ED:9B:0E:1B:98:E3:5D:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24ee1655-b2e5-3e5e-bb95-5552f047a98c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:4b:d4:9e:c6:9e:1d:f0:9d:c5:44:86:29:00:af:96:11:3e:
         02:3b:22:0c:a7:ee:4b:0b:fb:9c:b6:3a:10:33:30:5c:e6:07:
         31:f9:24:69:90:3e:4b:85:e7:7d:98:2c:bc:08:49:2b:ab:9f:
         37:ca:f9:13:17:82:a5:d5:d9:1d:50:27:d5:ac:a7:7f:17:2e:
         7a:1c:d0:03:85:2d:f8:d2:71:0a:c6:eb:78:b2:b7:72:2a:a1:
         85:7c:b9:d8:d6:5a:5c:a3:10:fa:28:bb:74:77:e7:a1:55:9f:
         43:2d:05:bf:16:7d:fc:f1:f1:14:50:f7:18:76:7b:b1:54:a5:
         39:7e:75:66:8a:f2:55:a2:8a:00:fe:81:8b:af:96:1d:da:eb:
         af:4c:c1:f7:16:39:04:ea:e6:c6:47:2c:d8:56:2e:11:a2:55:
         59:af:f3:5d:46:99:c5:8e:12:db:5f:66:e3:09:ad:32:1e:fa:
         aa:c8:f2:18:84:e4:46:e6:66:32:6f:5e:ae:8e:ac:30:75:38:
         3a:cf:46:77:d5:37:55:1f:2b:15:95:2e:8e:11:40:7b:86:91:
         15:67:e7:9c:c2:53:4f:5c:1b:64:48:57:74:42:4e:47:83:74:
         b3:cb:9e:c3:98:7b:cd:8a:89:7c:2d:d7:ad:57:f1:1f:45:97:
         28:54:ac:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:04:55 2026 by rpki-client