Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29cec1a2-0edc-3096-b75b-d2994420bb09.roa
File:                     29cec1a2-0edc-3096-b75b-d2994420bb09.roa (raw, json)
Hash identifier:          Hw8sMqo94ydglmfWv9rj5GbNJoBVcrn3ieVB0PA0jmU=
Subject key identifier:   C5:AE:B2:F6:0E:5D:FF:0D:11:FA:E4:9C:D4:4C:1D:AD:7B:15:E3:90
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D71A520D85576FAE4E33B1480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29cec1a2-0edc-3096-b75b-d2994420bb09.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     13335
IP address blocks:        172.71.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:20:d8:55:76:fa:e4:e3:3b:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=cc713877-df07-448a-ade5-15f56f09dacd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b3:ef:37:bf:3b:bd:03:51:3e:8b:15:00:66:
                    a3:27:9b:45:d5:d1:1a:2a:67:1d:2e:cb:1e:13:69:
                    c1:fa:47:00:ba:46:97:19:fb:5e:03:2d:5f:16:a0:
                    0b:d7:45:02:e6:63:bc:2f:4b:45:45:a7:bc:3c:45:
                    fb:95:95:43:d6:0e:a2:26:1d:56:00:5b:c4:98:d3:
                    d6:b0:68:98:e7:f7:3d:30:65:d4:cc:26:74:7a:64:
                    1b:3a:1f:fc:43:a5:46:00:8b:a3:8d:fa:ff:a5:a2:
                    99:56:c8:30:5b:15:dd:92:4a:61:9d:79:86:d6:42:
                    51:61:d1:99:00:be:c2:45:c3:09:f7:8d:a3:74:cc:
                    71:20:f1:c5:af:e6:c4:76:c6:31:73:1a:fe:ac:f3:
                    30:9c:9e:20:46:5d:24:52:cb:3b:99:41:c8:6c:d2:
                    71:44:ac:a0:86:c0:d5:48:28:22:ab:49:90:f2:af:
                    8f:40:54:1f:61:73:8a:00:33:12:0a:5b:aa:4a:48:
                    c1:40:5a:9c:69:d9:3b:01:66:16:ed:2b:55:6a:9d:
                    48:1e:75:b4:15:93:2b:18:1b:65:f9:50:8a:5e:c1:
                    7d:35:9c:db:44:a0:36:e4:d5:70:97:6e:fd:3e:86:
                    fc:33:0f:16:54:3f:b8:b2:35:f6:4f:6e:1a:e9:15:
                    01:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AE:B2:F6:0E:5D:FF:0D:11:FA:E4:9C:D4:4C:1D:AD:7B:15:E3:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29cec1a2-0edc-3096-b75b-d2994420bb09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:c9:a8:7f:d4:f0:6c:a3:e8:18:79:29:da:b8:cb:20:09:d5:
         fe:67:18:b5:1c:d3:72:93:80:31:69:08:ef:fb:61:3e:fe:de:
         e9:76:92:b5:c7:7a:c9:4c:21:0d:97:e8:b4:12:34:5e:14:7a:
         7c:19:a9:10:b3:f4:e5:ae:dd:cd:ef:b1:7b:df:2e:d8:1a:2c:
         a3:57:09:1c:c9:94:ef:f0:65:db:d8:6d:b6:47:36:91:d0:e3:
         46:18:62:df:cc:df:ad:68:4f:8b:d2:18:05:5a:5d:23:e4:5e:
         bd:5e:fc:60:4c:d3:28:f6:f5:9b:5c:f0:31:c9:d9:db:f9:8a:
         d9:da:1a:fc:9e:7f:b3:d9:fa:41:50:03:45:22:92:72:0d:21:
         4d:98:33:1c:ec:c0:6c:11:61:a0:e7:f6:4f:59:ca:1e:23:ea:
         b0:57:1d:9a:54:cc:a2:aa:9c:bb:9d:3c:83:c1:02:d2:3b:ea:
         7b:db:23:81:4b:fe:d0:d5:31:7b:8a:7d:72:6f:c8:a1:f2:a5:
         b5:71:ed:85:4f:0d:9b:a3:9d:b4:cb:d7:66:c4:d6:b7:d9:79:
         5f:0d:0f:4d:ac:c9:35:5c:dc:77:5d:fd:fe:5b:58:89:c0:cd:
         fe:61:ad:4f:5c:6d:f4:1f:38:70:e2:54:d2:df:da:be:45:cd:
         54:8a:73:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:47:05 2026 by rpki-client