Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/265d5dbd-a80a-3361-af88-2f4dff963349.roa
File:                     265d5dbd-a80a-3361-af88-2f4dff963349.roa (raw, json)
Hash identifier:          oXE9Y4Q+N+R9flA5Ouvd7Uls4+Xjm3Z8f4b6JUYf94g=
Subject key identifier:   39:B5:3E:C9:1F:E8:6B:3F:02:8E:90:38:A8:72:B8:52:31:6E:EE:64
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EC907281DFEA52230042D7A00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/265d5dbd-a80a-3361-af88-2f4dff963349.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     14789
IP address blocks:        172.71.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:28:1d:fe:a5:22:30:04:2d:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=d7d9939e-b8d4-41d5-8e04-374b8d56fdcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f8:ae:a0:69:be:d0:8f:de:39:be:6a:85:a8:
                    01:dd:5b:0a:e6:8c:93:6e:74:25:5e:44:fc:f0:87:
                    73:8e:1c:61:14:46:16:5a:13:6e:8e:26:2d:d5:3e:
                    68:72:c8:f2:84:1b:74:ee:a4:61:8e:7b:cd:f5:13:
                    51:6e:d5:bd:c8:b3:d9:db:13:b8:29:73:16:56:3b:
                    c4:5d:4e:f8:2b:65:8d:c1:ef:d6:97:7c:84:49:09:
                    08:ae:46:92:e4:c6:ef:5a:78:04:92:5d:f4:d2:ea:
                    ab:16:7d:02:7b:97:00:71:40:8d:d8:c9:9f:f4:23:
                    92:89:17:19:8a:2e:2d:d3:cb:4a:6f:bc:d6:a0:43:
                    07:23:58:ea:7e:a6:fa:a8:ae:c6:6d:cd:47:db:23:
                    e9:ed:ac:cd:b9:5d:78:bc:02:98:b2:d0:7e:4c:fb:
                    e9:d5:86:0f:18:5f:fe:13:e2:b9:ed:f9:95:15:e6:
                    1b:a0:2c:83:c1:1b:d0:5d:7b:5b:c2:ae:0d:19:da:
                    18:4a:5a:f5:5a:a2:f9:cf:78:42:e9:35:29:0b:3c:
                    52:0f:ca:24:c7:49:35:98:52:9b:6b:e0:20:23:5d:
                    a7:8a:99:73:a7:d6:f7:c7:a8:df:48:5d:ab:e3:d3:
                    da:31:55:57:f2:0d:81:26:0c:14:f2:21:0f:8b:d6:
                    d9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B5:3E:C9:1F:E8:6B:3F:02:8E:90:38:A8:72:B8:52:31:6E:EE:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/265d5dbd-a80a-3361-af88-2f4dff963349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:27:c0:09:dd:dd:8a:15:6f:c3:c4:1f:e4:60:18:5a:fe:b8:
         85:73:c4:58:9b:c9:56:9f:ab:dc:9a:c7:79:b8:6a:97:78:18:
         c4:c4:6e:be:f6:7b:93:0a:e9:7d:ed:2a:8c:54:d1:c4:5d:ee:
         1d:b9:11:0d:fa:ab:fb:f7:7d:2d:e2:b6:c2:fb:7c:4c:54:07:
         ec:e1:f0:ac:ca:83:c9:43:55:15:75:e8:ef:e8:e2:67:3a:80:
         52:65:a4:d5:ee:c6:1e:e1:d7:e2:f3:48:b2:c4:c5:02:cd:76:
         93:34:0b:56:f7:2a:eb:16:38:76:32:96:64:f8:3c:50:a9:df:
         90:61:6a:85:c4:94:e8:b3:1f:c0:62:e3:11:e2:45:39:37:1a:
         f6:e7:57:48:69:b6:0b:7a:5f:97:0c:d3:aa:8b:7e:b2:81:20:
         84:62:bb:3b:d1:87:7b:e8:4b:5a:9e:46:47:bc:49:0d:31:08:
         7c:ea:c8:1c:a4:96:5a:38:6a:78:de:d0:aa:e7:bd:05:99:e2:
         91:8b:20:4a:07:75:32:d5:bc:99:0e:04:1a:cd:a8:21:98:ac:
         38:8b:e5:0a:ef:7c:93:d0:49:47:da:ea:aa:dc:1b:7e:1e:e9:
         75:68:ce:41:78:80:2c:a9:42:8a:69:ec:b0:5f:e9:c9:46:2f:
         4b:38:fc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:03:45 2026 by rpki-client