Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3c7ab2e0-5230-39be-a5ee-005ed2de751f.roa
File:                     3c7ab2e0-5230-39be-a5ee-005ed2de751f.roa (raw, json)
Hash identifier:          Uo+fKZBNB+pf0uNX8gKpZCu3471YOscIq55E2P7NrDc=
Subject key identifier:   03:E8:CA:B5:73:EF:C8:6F:3A:0A:A2:AE:2F:10:DA:84:45:4F:52:F9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D71A51F89D9E6BC9F11F7F970
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3c7ab2e0-5230-39be-a5ee-005ed2de751f.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     13335
IP address blocks:        172.70.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:1f:89:d9:e6:bc:9f:11:f7:f9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=250ca76f-24f3-4ad7-bbcd-314da22cc3ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:45:fe:ac:3f:ef:c1:6b:f1:9c:90:9e:b1:31:
                    ad:88:db:02:63:04:56:34:0e:7e:db:5b:0c:80:61:
                    ff:5c:89:4a:1e:6e:c3:c5:8e:a4:9f:23:f1:4f:a2:
                    00:6a:07:ef:fb:6b:9b:9d:5f:c5:ba:d0:49:22:9d:
                    31:6c:a1:47:e3:d9:81:05:b3:91:5d:2e:1e:50:8f:
                    88:49:4d:02:07:90:f8:60:41:4a:5c:e9:c4:d1:c9:
                    f0:cc:94:15:87:03:5d:ef:f5:e1:83:c6:20:76:a1:
                    ed:fa:08:72:10:e2:6f:f1:71:0d:b4:cc:61:85:71:
                    06:51:3c:9d:52:1f:4a:01:a3:44:7b:ef:df:a2:82:
                    33:ec:90:d3:41:42:07:8d:2a:0e:0e:de:1c:ee:72:
                    4d:fb:cf:f3:fc:59:93:7e:a6:56:dd:d4:0f:37:44:
                    e0:2b:14:93:de:08:2e:da:f1:e3:47:cc:a7:bf:d4:
                    74:6b:8a:31:7a:e8:cc:5a:c5:a1:d2:7b:e3:cb:3d:
                    d7:83:e8:94:6f:c6:48:99:9e:28:b1:12:40:7b:cd:
                    0b:28:4b:44:79:83:4c:df:f2:ad:4b:22:4e:19:4f:
                    66:29:19:df:a0:3f:75:67:06:7c:84:3f:8f:5e:44:
                    db:ab:68:c9:41:7f:58:7a:4a:a3:d6:9c:02:f0:c5:
                    e2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E8:CA:B5:73:EF:C8:6F:3A:0A:A2:AE:2F:10:DA:84:45:4F:52:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3c7ab2e0-5230-39be-a5ee-005ed2de751f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:2a:8c:c2:e9:2b:f1:bc:32:6f:3d:39:43:59:c5:5b:48:86:
         90:22:15:5d:58:03:bc:53:71:04:36:a1:b7:25:bb:f8:58:d6:
         7e:c4:6c:35:e7:32:b1:1a:36:a6:63:26:d3:73:0a:44:9c:19:
         88:bc:10:9c:03:72:aa:de:7e:38:c3:f3:d5:82:5a:cc:06:3f:
         1f:34:46:9b:7a:7e:97:d8:21:6b:72:65:62:04:a3:21:fe:91:
         b6:59:bf:3f:34:42:66:fb:9f:5c:c1:d9:8f:fd:06:20:90:4f:
         0d:dd:e0:5c:f0:b0:03:4f:7c:98:3b:ec:1f:b4:62:3c:b2:7e:
         8b:4d:aa:68:42:bc:e6:2e:bc:75:aa:2d:7f:92:cd:7b:03:78:
         34:6c:4c:60:e7:1e:b7:94:fb:3b:11:3f:07:7a:97:17:c2:97:
         ae:bb:7b:8d:e5:1a:13:61:01:42:11:87:be:c9:e0:c5:96:ae:
         30:54:2c:ed:7f:5e:5a:bc:f8:a6:d5:fe:19:30:f3:e4:39:90:
         e7:27:1f:1c:4a:32:b0:9c:0f:dc:a0:94:bf:95:1c:c0:09:4c:
         a3:b3:97:0c:45:83:81:38:45:a8:2b:da:71:7a:e6:e8:88:55:
         c6:94:ab:80:77:87:6b:e4:65:71:03:0c:20:e6:a9:c4:14:0c:
         52:4e:6e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:22:13 2026 by rpki-client