Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5ddb6587-470f-3121-9e08-5c3c68a7c335.roa
File:                     5ddb6587-470f-3121-9e08-5c3c68a7c335.roa (raw, json)
Hash identifier:          MmvS838FrO64boyE6hqTaxagoaMiE58+8y3AGLW2YlQ=
Subject key identifier:   B0:17:48:11:62:10:A9:32:3B:8C:41:C4:9D:4E:55:E1:73:D8:39:9D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E147EE9F6BCB9358DDC5E0480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5ddb6587-470f-3121-9e08-5c3c68a7c335.roa
Signing time:             Sat 06 Jun 2026 09:00:12 +0000
ROA not before:           Sat 06 Jun 2026 09:00:12 +0000
ROA not after:            Fri 04 Sep 2026 09:00:12 +0000
asID:                     14789
IP address blocks:        172.69.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:14:7e:e9:f6:bc:b9:35:8d:dc:5e:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun  6 09:00:12 2026 GMT
            Not After : Sep  4 09:00:12 2026 GMT
        Subject: CN=95107b1a-db1b-436b-8338-87418c764e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:82:28:34:c5:d6:d0:57:f9:36:bf:3a:2b:77:
                    c4:3c:ba:f0:07:19:7f:11:ee:25:3f:3f:bf:fb:d6:
                    fb:a9:f3:44:f9:27:5e:38:3a:7c:d7:a6:6e:2a:d2:
                    8a:29:f4:fd:a7:35:ee:20:b4:d4:f8:0b:98:d7:90:
                    67:77:0f:6f:a0:da:49:eb:45:a8:f6:78:a0:be:d0:
                    b4:2c:8f:ff:b7:c1:0d:13:62:c9:5d:87:9b:08:6a:
                    f0:fc:0a:37:c1:6c:d2:d3:fc:5f:81:7f:49:91:9c:
                    81:68:59:10:c7:5c:5e:c9:b5:1e:1f:08:03:c2:cf:
                    20:ab:90:1b:33:92:89:f1:fd:a8:c1:ee:72:44:46:
                    34:b1:97:db:ea:dd:ac:65:1b:72:5d:cb:14:23:2e:
                    c4:a7:93:37:b0:be:3d:27:cb:da:68:3f:71:23:a3:
                    14:ec:ec:d2:ef:cf:ee:ca:df:c8:6a:8a:79:c9:7b:
                    32:8c:89:02:7a:1b:6a:7b:cd:28:dc:1c:c2:a5:80:
                    64:d0:c4:bc:7e:cf:22:08:23:24:dc:f6:85:ba:6d:
                    d2:df:4e:22:f8:1d:df:9a:74:97:a0:7e:71:9e:ee:
                    8c:b0:40:71:ba:a8:94:dc:ef:e3:c3:33:3c:e0:5d:
                    1a:6a:5a:96:a2:e5:84:3a:39:13:87:5f:c0:61:14:
                    b2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:17:48:11:62:10:A9:32:3B:8C:41:C4:9D:4E:55:E1:73:D8:39:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5ddb6587-470f-3121-9e08-5c3c68a7c335.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:7a:1a:45:66:18:65:4e:b0:32:83:b9:6b:98:99:2c:4e:27:
         12:ab:97:56:4d:f7:b1:bb:e1:04:89:8d:72:ab:70:83:36:a8:
         07:cf:ab:21:b4:c5:c1:e8:de:d0:4b:b8:ed:c8:d8:8d:a6:9e:
         d1:78:6a:3b:0f:f3:96:99:d8:e7:b5:c9:11:b1:34:ba:54:a6:
         7e:1f:b2:83:88:ea:5b:65:d6:4c:11:ad:02:e9:45:69:6b:22:
         4b:13:2d:16:4e:f7:4d:05:e2:83:ff:5f:d4:69:84:12:49:16:
         3c:36:96:7e:b6:f1:5e:cf:59:cc:58:a9:21:44:06:60:ed:d9:
         22:a6:28:31:0f:11:3a:03:72:1a:9d:a5:6c:01:58:08:39:1e:
         cb:ea:d1:1a:b8:32:16:4a:a8:a1:f4:18:bd:47:9a:3b:2b:2b:
         07:32:f7:3d:cf:4f:01:d0:ca:f8:63:14:20:c3:69:fa:93:ed:
         6b:08:90:41:5b:0e:23:77:6f:94:c2:ad:b9:f3:a9:3a:49:22:
         9d:f9:f4:74:cd:38:2e:7a:94:5f:ad:cc:c1:90:29:1b:bd:b1:
         58:3e:51:16:a1:4e:ea:7a:19:7b:90:4f:40:68:8a:b6:fe:c9:
         ae:53:d4:ca:24:8d:7e:4e:1e:8a:80:6e:6d:5c:f9:5e:e2:a0:
         95:2e:5a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:23:44 2026 by rpki-client