Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a58a2f3-011b-3130-9350-77277d282757.roa
File:                     4a58a2f3-011b-3130-9350-77277d282757.roa (raw, json)
Hash identifier:          GM6HKMgwCUOTCKgKg7ijyna6l0iCMtkTTvIJtBwJNa0=
Subject key identifier:   30:83:A2:B8:41:FA:F8:AB:33:5F:C7:9C:99:37:1F:46:46:92:6A:7F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D703FF221FEB7E1CAF0A39F40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a58a2f3-011b-3130-9350-77277d282757.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     13335
IP address blocks:        172.69.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:f2:21:fe:b7:e1:ca:f0:a3:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=a41af4fa-9de8-461f-bd6e-547792049e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:16:c4:85:28:c0:03:23:b9:d0:a0:6a:8b:79:
                    ef:78:18:59:48:ed:6c:34:38:69:c1:c2:43:e2:c7:
                    03:10:ad:c6:84:af:a3:9c:ab:8d:88:ed:79:64:cc:
                    87:d1:01:99:7c:02:27:6c:4c:af:11:e9:93:f1:ed:
                    a3:75:7d:61:62:e2:9f:27:5f:a8:75:63:46:5b:dc:
                    6c:4b:77:a8:0f:ed:0c:18:e6:63:d3:76:0d:c7:d5:
                    65:f4:c7:5a:33:80:23:90:4c:4a:01:b0:d6:08:05:
                    e7:00:10:b0:fa:97:f6:a1:3c:1c:79:08:c8:80:22:
                    80:63:98:34:26:2f:13:d7:6d:68:69:1b:bc:1e:e3:
                    63:8c:8a:b9:8e:eb:9c:32:51:3b:2f:8d:bc:ca:1f:
                    7f:d4:52:5c:a1:a5:0e:a3:c5:3d:a4:41:b3:45:b7:
                    77:40:9f:a5:b9:7d:2b:71:28:2e:fd:f0:72:22:20:
                    3a:09:b6:23:1a:91:a9:2a:e4:68:7b:8f:35:ea:ae:
                    e8:c7:48:66:91:a9:0e:f2:d4:1f:0d:db:67:f0:2f:
                    a2:93:62:74:ba:ce:5a:5f:54:b2:e1:56:7c:d5:e9:
                    03:c4:1c:a4:85:90:2c:7b:2a:25:b7:c5:a0:0a:87:
                    2c:a5:bb:ce:2d:c7:57:80:b5:d2:78:6a:b8:0c:25:
                    88:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:83:A2:B8:41:FA:F8:AB:33:5F:C7:9C:99:37:1F:46:46:92:6A:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a58a2f3-011b-3130-9350-77277d282757.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:75:96:8c:85:cf:75:08:22:71:80:ed:5e:98:ce:39:7b:37:
         28:f7:4d:e5:fd:b7:ee:bf:70:9d:33:ca:03:d2:4c:1d:08:e6:
         4e:8c:f6:fd:33:a1:5d:eb:51:33:ba:97:7c:fb:73:7e:e5:b9:
         b1:7e:98:2e:f0:2b:22:55:7b:b0:f9:4b:34:5d:6b:26:a9:19:
         42:3a:ba:e7:c8:9c:bc:a5:be:ee:c8:aa:80:12:e2:42:d2:3d:
         e0:96:52:ab:ee:5b:70:b7:a6:5d:92:8a:4c:6e:68:eb:c4:0e:
         2f:ea:e9:cc:af:51:f7:f8:4b:4e:b8:5a:ce:60:09:c2:ee:e4:
         c6:cd:b3:91:79:ed:2d:10:ae:89:ec:a3:ca:55:8f:6e:59:82:
         b0:b0:6c:83:b0:44:f4:6b:9f:08:f3:c2:a4:3a:09:24:88:29:
         65:34:3a:f5:99:53:0a:5f:a3:ea:40:97:80:e6:bf:99:f0:cb:
         50:46:92:e0:03:d9:3c:47:d6:64:9b:fd:83:84:97:b5:55:fe:
         03:a6:2e:7b:9b:08:e1:a1:5e:f3:29:7a:7b:d9:ae:31:54:2c:
         1d:8d:d7:7c:a4:95:8f:e1:97:ee:1c:db:c6:05:45:3c:50:45:
         ec:28:04:f0:6d:d7:e7:fc:7a:33:ef:62:fb:22:5d:46:ed:93:
         69:44:c2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:06:23 2026 by rpki-client