Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5875e4f1-d754-34d5-9585-b8a12eb0eef5.roa
File:                     5875e4f1-d754-34d5-9585-b8a12eb0eef5.roa (raw, json)
Hash identifier:          w/H46zFZg5vAJLg8uHJ60ZC2BLyYqaD/k6Ny9wwoDRU=
Subject key identifier:   F1:A0:B2:C9:19:D6:F4:9A:70:8F:FC:05:9D:0F:AE:ED:E4:33:AF:1D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D703FF191D59BBC84E3D79280
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5875e4f1-d754-34d5-9585-b8a12eb0eef5.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     13335
IP address blocks:        172.69.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:f1:91:d5:9b:bc:84:e3:d7:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=72c8db5b-127f-4710-9aef-9ae34405c278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:79:41:4d:42:42:be:da:4a:9b:52:09:02:f1:
                    eb:f7:d7:57:e2:ee:db:f1:1c:96:cd:3e:9b:ab:b0:
                    f0:b0:c8:bb:54:95:6f:c5:af:ad:bb:41:a1:25:b6:
                    f8:60:16:e2:d8:0a:54:2e:44:52:88:92:3e:11:f1:
                    56:c4:80:0c:93:b6:1e:7f:74:fe:fb:95:93:3c:61:
                    7e:35:d0:99:ae:05:42:4b:1c:ae:34:7c:53:b7:8d:
                    0f:c1:58:fd:42:8f:5d:80:08:ce:51:c4:a5:8e:96:
                    96:b3:f1:13:37:8e:98:dc:d0:ec:23:dd:d4:a1:89:
                    a1:ff:cd:f6:d3:6e:44:ca:f6:85:91:0c:ae:a9:a7:
                    57:1c:43:93:b7:18:9a:6e:0d:64:a3:59:fa:18:a3:
                    74:28:e9:2c:80:e2:c9:09:e2:d8:b0:26:b8:8f:d0:
                    4f:42:b4:ff:f2:e3:54:18:32:0c:5f:21:1f:e9:f1:
                    e9:01:22:bb:1f:69:23:23:6b:ae:57:06:65:6b:47:
                    68:e6:97:c9:8f:47:e0:30:c4:f9:14:d5:4b:b7:7b:
                    68:95:f0:61:0f:8f:f6:44:97:0c:d4:5a:54:84:49:
                    c3:4c:2b:2c:43:dd:9c:1b:e7:a4:2e:70:09:38:f3:
                    21:b5:d1:5c:d4:da:af:10:eb:d0:a5:54:ff:71:e8:
                    66:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A0:B2:C9:19:D6:F4:9A:70:8F:FC:05:9D:0F:AE:ED:E4:33:AF:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5875e4f1-d754-34d5-9585-b8a12eb0eef5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:5c:9c:5e:fe:5d:0f:1a:50:a5:90:1b:dd:b4:ba:77:99:1d:
         86:be:35:42:64:f6:f8:6c:2e:49:42:6a:8c:17:c4:97:db:08:
         ca:c4:79:fa:d2:72:3e:6c:08:1d:e1:07:69:d7:86:05:69:02:
         0b:ec:b1:eb:8b:00:2b:6f:1a:ad:ac:3f:84:34:f4:d2:83:d8:
         7c:85:f8:1b:28:ed:5c:81:ec:0e:99:ce:47:dc:0f:18:b1:0c:
         2e:eb:9f:8e:52:f0:be:c4:a8:24:bd:b2:36:86:79:b4:97:9b:
         d6:0a:d9:73:91:b6:c5:84:68:69:31:3b:41:41:29:88:f1:f6:
         bc:a0:b6:35:ea:f2:90:c1:3d:c7:54:0d:4f:b1:77:eb:6f:aa:
         ac:cd:ba:00:fd:e1:6c:02:bb:6d:1f:47:7c:e2:66:ff:2c:0c:
         73:7b:c7:ce:b3:a2:61:2b:6e:27:6e:0a:c0:82:9e:78:ae:83:
         c7:af:46:81:07:22:47:97:58:79:08:39:20:85:7e:6d:52:3a:
         a9:6e:0f:cb:19:5a:ec:f0:44:70:ec:1b:03:5b:df:84:2c:6a:
         b2:e7:10:7c:d8:c1:94:bf:7d:94:16:b8:03:80:cf:e2:e8:3f:
         f8:52:19:1a:37:53:2d:b8:e5:5b:e0:37:1b:d1:a7:96:92:e2:
         0a:d3:7f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:40:37 2026 by rpki-client