Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4f964ad4-b7ec-3dfd-bc81-d6187c846d36.roa
File:                     4f964ad4-b7ec-3dfd-bc81-d6187c846d36.roa (raw, json)
Hash identifier:          KoDEWTwcEyqkbE8RwN2W5xNa4a//rbXTyffghOa/VxM=
Subject key identifier:   6C:81:D7:D9:FA:71:58:D4:05:2A:9F:D9:AA:07:53:21:55:42:96:B5
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F31B7CE580D0393AD76FF2440
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4f964ad4-b7ec-3dfd-bc81-d6187c846d36.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     14789
IP address blocks:        172.69.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:ce:58:0d:03:93:ad:76:ff:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=f2755b34-3560-4251-861f-c0ba936c806e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3d:37:0d:11:7b:5a:b7:b1:53:ed:00:b7:3a:
                    48:d1:a5:24:78:1d:e2:07:fd:25:71:53:6f:43:a6:
                    15:46:4c:8d:86:01:70:22:aa:58:bb:e4:bf:28:13:
                    ad:b6:13:cc:75:fc:05:1f:ff:31:f4:d7:29:8d:1b:
                    94:43:08:0a:eb:74:65:c3:1c:e2:1e:c3:b1:2a:65:
                    20:0a:01:06:20:21:27:da:33:f7:30:31:38:44:dd:
                    52:d4:b8:7a:ac:1c:12:eb:41:f1:f0:00:d5:0a:f4:
                    ae:0d:fb:76:6e:1f:40:31:c1:71:d3:40:78:b0:79:
                    d9:43:fd:b5:cd:5c:58:a2:33:78:4d:2a:43:1c:e1:
                    b5:51:a1:5c:78:0f:1e:e8:5c:ca:92:77:90:de:63:
                    87:4c:22:19:1e:7d:63:18:93:80:43:44:c2:e1:6d:
                    ed:1b:91:18:bb:b2:f0:a4:9e:4c:da:27:e6:3b:b4:
                    e6:2e:90:db:8d:84:c6:7f:17:d9:67:70:cd:c2:40:
                    c8:31:c6:33:e5:0e:d0:74:4f:86:53:0f:48:83:ca:
                    37:70:bf:fb:e8:e8:28:c9:10:c2:b3:b5:47:d2:04:
                    11:6c:d0:b2:79:f7:79:8e:04:75:ce:70:c8:55:a6:
                    b9:36:57:78:41:28:cb:1d:66:2f:cd:72:e5:65:3d:
                    f9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:81:D7:D9:FA:71:58:D4:05:2A:9F:D9:AA:07:53:21:55:42:96:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4f964ad4-b7ec-3dfd-bc81-d6187c846d36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:4c:d2:64:8a:2d:cf:1d:71:0a:1c:6d:ae:d8:8f:f4:ca:ea:
         2a:6f:d8:0f:d6:f6:0d:46:6b:95:b3:02:12:57:5c:74:ca:b6:
         7f:95:83:8c:79:e2:62:7f:35:0c:38:f8:d9:5c:ef:13:d9:2f:
         21:64:39:a3:6b:fe:29:de:94:b7:c0:76:44:53:17:0e:f2:a8:
         83:9d:14:81:b0:46:f2:7c:cb:44:69:68:dc:d9:a5:1e:85:0c:
         5a:ed:ac:49:4b:39:36:7f:f4:a9:ea:1a:16:4f:97:a2:6f:7c:
         d2:4a:5a:4e:ec:00:15:8d:5b:48:80:1c:1d:93:91:f0:6b:5c:
         15:f4:74:36:13:af:d7:3a:77:98:46:0e:cd:96:60:62:ef:1a:
         e0:04:7e:4a:66:09:77:cb:4a:2e:bb:24:fa:60:af:37:81:07:
         02:ca:01:89:cd:bf:9c:cf:c7:b5:c2:cd:58:2c:90:d5:48:73:
         c2:ec:b9:4a:16:ba:25:50:74:38:7c:39:3d:65:54:09:5d:60:
         b8:3e:f3:11:d6:bf:92:53:5c:ba:6b:46:1d:01:7b:d3:f9:0a:
         eb:f8:76:96:5f:05:b5:56:a7:a9:2b:9a:6d:26:a6:9c:93:8a:
         94:46:9c:01:97:75:90:c9:72:3c:97:2d:45:26:df:94:cc:ad:
         9c:19:77:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:43:16 2026 by rpki-client