Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e2e2ee0-20e2-3fe6-8067-7b570436fc64.roa
File:                     5e2e2ee0-20e2-3fe6-8067-7b570436fc64.roa (raw, json)
Hash identifier:          grG3sd1XK4Cv0geda2UKIY5h2BWUMmEA03vc3MynatA=
Subject key identifier:   B6:B8:A5:85:28:72:BE:D5:78:3D:A1:75:D6:7A:5E:14:7A:09:B8:FD
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D67DFE40B43648338A1E1BA40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e2e2ee0-20e2-3fe6-8067-7b570436fc64.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     13335
IP address blocks:        172.70.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:e4:0b:43:64:83:38:a1:e1:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=40cf6ffe-f7af-469e-a843-d70c28f59ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8e:46:88:24:61:23:65:3a:f1:a9:d2:6a:ad:
                    e7:b9:e1:5b:71:d3:22:d5:66:36:a6:bb:bd:ca:e7:
                    d8:de:1c:ae:f7:f2:56:d8:d6:0a:dc:83:07:11:bd:
                    6b:e2:72:60:2c:2d:48:63:4f:e3:8b:fd:6d:4b:5e:
                    47:33:f4:98:d8:c0:d2:18:52:7e:6d:a6:73:e7:a9:
                    fa:9c:fe:20:5e:24:76:da:74:dc:0a:97:19:a2:60:
                    5e:2d:2b:eb:a4:9f:de:f1:25:28:19:fc:63:2d:53:
                    2b:ab:14:8b:aa:f7:0a:94:86:27:c7:58:e4:e1:39:
                    41:d1:a4:23:36:01:61:5c:33:28:50:5e:64:44:4e:
                    89:38:05:e6:34:19:3c:9b:11:4e:c3:c7:6e:63:f5:
                    49:4c:83:df:f3:03:0e:f3:6f:f0:c0:41:7c:4a:35:
                    ce:28:f9:7c:63:b4:34:c9:3e:af:4f:31:93:19:13:
                    28:78:bf:cd:03:ac:04:22:f4:c6:8e:0c:3b:f2:cf:
                    db:d5:52:f7:19:fb:3f:e1:89:16:fb:b6:14:4a:bf:
                    3c:09:50:be:77:d7:50:ec:a8:9d:87:57:2e:e4:10:
                    d4:72:34:f9:c6:7e:12:51:d2:23:2e:66:64:6e:c2:
                    49:0b:f4:9b:81:75:6e:cb:24:79:78:2c:2b:eb:2b:
                    ce:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B8:A5:85:28:72:BE:D5:78:3D:A1:75:D6:7A:5E:14:7A:09:B8:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e2e2ee0-20e2-3fe6-8067-7b570436fc64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:e9:ea:52:66:49:b4:91:a5:4e:7b:87:1e:d5:4f:75:d9:dc:
         58:64:22:2b:99:36:ac:88:98:25:06:e7:0c:7d:08:27:88:ff:
         6c:e4:c6:48:81:b1:79:3b:3a:06:36:e1:b6:4e:18:f0:5a:d9:
         49:87:a0:7e:9d:c9:4b:4b:2a:39:d5:9d:5f:63:75:d5:9f:f1:
         ab:73:dd:92:92:49:6c:70:06:df:84:35:d4:ac:af:10:99:12:
         1e:bb:98:b1:40:40:20:96:b6:7d:d1:a9:3a:26:60:50:a7:13:
         fc:64:49:34:a8:4f:b0:6e:0c:75:e1:31:04:4c:4f:dc:9f:5f:
         c6:65:14:58:10:13:4c:70:72:c3:55:44:71:40:a6:c6:24:89:
         99:75:dc:21:93:62:6d:6c:f9:5c:df:97:8f:33:9d:a7:ad:39:
         10:32:70:20:c7:06:0e:06:c4:ed:0c:76:15:ce:3e:2c:72:ad:
         03:34:4c:0c:3d:96:c9:48:54:02:c1:f7:a3:5e:19:4f:9a:e2:
         70:e7:49:c5:70:03:d5:4a:c0:ae:6f:2d:86:6f:f4:df:dc:dd:
         fa:76:61:e7:85:7b:a9:20:1a:29:62:64:6f:90:cf:f4:56:0e:
         27:db:d7:63:88:2e:ad:2d:78:e5:c6:74:33:20:c9:df:b5:e7:
         b8:1f:4e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:19:00 2026 by rpki-client