Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/63785228-354f-33e6-91fa-c717fdb1b495.roa
File:                     63785228-354f-33e6-91fa-c717fdb1b495.roa (raw, json)
Hash identifier:          FyRz917CkRMLwYCS34ANQoOPEMsOL/f/+bai+02TI14=
Subject key identifier:   17:A9:FB:4D:B3:AC:FF:67:4C:49:B3:D1:8B:B2:2B:9A:C2:A6:88:DE
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584CB6B72E85E1DD55954008F0C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/63785228-354f-33e6-91fa-c717fdb1b495.roa
Signing time:             Sun 01 Feb 2026 02:00:32 +0000
ROA not before:           Sun 01 Feb 2026 02:00:32 +0000
ROA not after:            Sat 02 May 2026 01:00:32 +0000
asID:                     13335
IP address blocks:        172.68.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b6:b7:2e:85:e1:dd:55:95:40:08:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb  1 02:00:32 2026 GMT
            Not After : May  2 01:00:32 2026 GMT
        Subject: CN=9e7357b0-51d1-4b2f-a7bf-8d791417bab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8d:33:e7:2b:67:35:13:79:f8:36:b1:4e:9d:
                    d9:7e:2e:36:53:68:2e:56:c1:2c:b4:56:0e:49:95:
                    21:dc:9e:4b:88:97:46:96:6b:1a:fe:15:7f:93:96:
                    b9:86:3e:0d:80:35:2a:7a:a4:21:fe:a0:98:b9:7a:
                    ab:83:64:11:c0:c1:30:c0:43:ba:00:eb:41:6c:d5:
                    2c:01:91:15:d7:eb:fe:ca:1d:7e:df:e3:53:3e:4d:
                    6d:92:ea:98:d0:a2:3d:ba:92:36:2c:cf:2a:6a:e8:
                    f9:72:8e:75:ab:1b:97:3a:5b:ab:47:35:4d:4e:8d:
                    b1:7a:e9:3c:e0:c2:e2:57:88:07:ae:73:01:6a:31:
                    cc:cd:57:c9:b9:0c:b2:f1:c7:40:7b:5c:4d:b4:70:
                    86:1e:d0:c2:d4:b6:3c:21:88:ea:cb:53:bc:65:95:
                    da:8a:51:bc:99:81:02:de:25:b2:17:1c:a9:22:77:
                    2a:81:ad:b9:d4:37:42:51:6f:c5:a6:bb:d1:81:e0:
                    bd:5f:ea:92:b5:71:a2:97:6b:c4:c4:e5:2d:1a:49:
                    21:a2:b4:6a:44:ba:da:7e:4e:01:53:4e:4f:c2:22:
                    98:15:e9:e0:0f:66:57:fc:42:95:fa:54:34:d1:5b:
                    d2:a9:69:d7:f2:62:8d:e4:24:ec:85:e4:2e:a6:33:
                    8d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A9:FB:4D:B3:AC:FF:67:4C:49:B3:D1:8B:B2:2B:9A:C2:A6:88:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/63785228-354f-33e6-91fa-c717fdb1b495.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:b1:cc:7c:4b:bd:89:64:32:56:87:55:08:a2:7b:04:9f:b2:
         ad:28:f0:01:cd:42:ef:fb:10:54:bf:94:45:b8:52:a2:64:fd:
         9d:10:eb:15:38:1b:c8:f2:5a:58:2d:20:00:05:6f:a1:76:80:
         18:90:2e:23:00:cd:72:9c:90:85:48:a1:ce:b6:40:c4:db:fc:
         ad:44:5e:fa:6a:80:b9:b1:d7:42:bb:30:a0:52:19:49:d2:48:
         fc:9d:6d:b5:f9:76:97:ce:00:67:b7:db:45:a1:c6:3d:30:5e:
         52:11:6c:31:0c:45:f0:85:f4:42:e2:a0:e6:78:8f:81:18:e4:
         63:84:32:39:3c:28:79:52:40:57:c8:90:b6:4c:4e:5b:ed:d3:
         94:e3:a0:46:87:39:f5:52:f6:56:ec:55:e0:ce:37:ff:21:df:
         1c:37:00:db:2d:b5:70:b7:bc:39:8b:e4:86:6d:bb:c4:8e:24:
         e0:45:ad:d5:84:1f:ba:59:e8:b6:db:c4:a2:86:5d:d0:eb:3e:
         ec:69:4f:4f:f3:ff:0f:27:06:d2:fd:1d:bc:64:da:79:bd:62:
         f3:58:61:b6:29:60:10:91:58:38:8b:a2:f8:81:6d:7e:be:d8:
         99:e9:46:84:dc:7a:d0:c1:8d:23:24:0d:6c:76:50:1f:95:74:
         9e:27:b5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:18:34 2026 by rpki-client