Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/445f2ba2-d60b-37aa-b666-5193189bc562.roa
File:                     445f2ba2-d60b-37aa-b666-5193189bc562.roa (raw, json)
Hash identifier:          1TKxRKUTL6/Q8PZGfNJfKeqzlKUBB1c1RgDLl+dcARs=
Subject key identifier:   77:D3:E0:52:64:11:C9:8E:D5:F8:6C:2B:99:11:34:F8:26:CB:2F:17
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D703FF1DA786C4AE894467100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/445f2ba2-d60b-37aa-b666-5193189bc562.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     13335
IP address blocks:        172.69.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:f1:da:78:6c:4a:e8:94:46:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=618f8937-e836-4413-9578-c740094388f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ff:f2:a3:17:be:54:71:de:a8:2f:ca:24:8f:
                    c1:8b:b4:0d:76:68:ca:eb:73:64:40:6f:78:3a:40:
                    3d:a8:91:8d:6e:6e:a7:3e:8d:ab:e2:8d:78:9f:ec:
                    52:2a:9a:22:41:02:74:91:12:ee:0d:cb:5f:5a:35:
                    a7:32:bb:ec:c5:01:89:c5:7f:19:de:c2:97:9d:89:
                    1e:1f:52:82:84:d4:c3:2d:35:a2:ec:b0:50:52:2e:
                    72:db:eb:8c:c3:a0:45:05:85:b2:81:6b:a7:60:38:
                    a9:4a:ee:e1:1b:69:47:da:c1:a9:7d:26:a1:f9:48:
                    c4:2a:41:42:76:60:a1:38:4f:66:8f:be:db:e8:9f:
                    42:a4:21:10:a9:a8:a1:92:27:da:03:c9:55:c8:f6:
                    3c:99:28:80:1f:05:06:44:f7:2c:62:2e:af:92:44:
                    78:37:74:f7:0d:60:c4:f2:59:d5:5e:16:bb:d8:f8:
                    0e:f1:c4:25:fd:35:1b:b2:9b:bf:67:57:41:fc:3f:
                    bf:7d:7a:90:c0:4a:26:f6:f0:d7:37:5f:dd:d4:7a:
                    a1:b4:5c:17:ae:92:9b:a4:8e:1f:83:c9:4a:7e:1a:
                    db:84:8a:c3:02:81:90:c8:91:8c:a3:32:3d:77:8a:
                    34:9a:e0:86:a5:56:b7:ed:c9:c5:84:2c:bb:ab:8a:
                    45:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D3:E0:52:64:11:C9:8E:D5:F8:6C:2B:99:11:34:F8:26:CB:2F:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/445f2ba2-d60b-37aa-b666-5193189bc562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:57:4f:c5:e7:44:94:83:50:17:0e:19:fa:d7:ad:8c:44:4e:
         d0:fd:0d:8c:17:f4:f6:32:71:7a:eb:16:25:24:94:02:f4:66:
         e7:95:ea:70:87:78:a0:47:7b:d7:ff:b9:14:b6:63:04:89:bd:
         a1:5a:3f:be:f7:f4:af:69:41:4a:5b:26:e5:9b:ce:43:d4:fa:
         5c:c1:75:5e:17:4c:36:d9:7b:19:76:c9:b7:65:06:17:61:96:
         fd:d1:8d:9e:aa:e2:0c:76:55:cd:a0:7e:b2:61:17:ba:03:0e:
         33:0b:20:2d:2d:37:3d:8b:f2:6d:c8:cc:92:a4:0d:1c:9e:16:
         0e:da:e7:ae:2d:1b:06:08:0b:4f:15:ba:90:fc:53:0a:a7:e3:
         b6:81:6e:0c:aa:2d:38:55:62:b8:03:7c:cc:b3:d3:04:ed:f5:
         b9:24:ea:92:cf:27:e9:e1:bb:03:2f:c6:59:9c:a6:db:8a:31:
         b1:35:41:84:fb:db:79:ff:cf:5b:1e:d3:35:22:89:b3:ea:c0:
         78:38:41:e9:f0:35:82:7d:ee:5e:42:24:1d:be:92:84:b4:1e:
         15:ec:ce:c1:d9:70:0f:c3:4f:bf:34:e3:bf:84:3e:51:47:90:
         77:b7:53:62:7e:74:37:52:6d:bd:12:28:75:4c:ee:f8:9f:36:
         6f:c8:93:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:41:42 2026 by rpki-client