Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/63e2f9da-54ac-3255-a01a-eafffcd4f452.roa
File:                     63e2f9da-54ac-3255-a01a-eafffcd4f452.roa (raw, json)
Hash identifier:          AyDoXgle0V1m41/MYTNz8760r67W3QL3vwZkop1clsQ=
Subject key identifier:   B2:E0:7F:C1:D2:15:7F:F3:37:F4:C5:A8:28:8A:53:7A:3A:A0:9F:4D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D67DFEF060DD8595D52C3FDC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/63e2f9da-54ac-3255-a01a-eafffcd4f452.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     13335
IP address blocks:        172.71.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:ef:06:0d:d8:59:5d:52:c3:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=460dff4c-a30c-4c85-bfc8-07c35ea5f24a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:37:05:ed:55:c2:24:d7:aa:7a:02:8a:56:d2:
                    05:ff:ab:33:d8:70:83:28:63:4f:93:e9:8d:65:33:
                    82:91:b6:54:95:ac:fc:74:0a:43:40:36:bd:0f:26:
                    11:e4:15:bf:db:34:53:56:ae:fe:1d:4c:bc:67:a6:
                    64:f1:46:2e:c7:f9:22:20:e5:c9:ee:6c:b5:0f:b9:
                    f4:7c:14:95:72:8b:90:c5:92:b9:9b:83:a3:5b:82:
                    a7:46:de:78:b7:14:0a:f6:d9:0c:3b:53:4d:61:46:
                    08:21:5a:e3:a0:14:43:7e:3b:3c:86:9c:8a:ba:2d:
                    f7:c9:78:45:42:49:53:3b:0a:2e:99:da:ec:3f:1a:
                    3a:7e:d9:a4:35:77:94:04:37:c0:47:d7:31:92:17:
                    c2:1d:7f:6c:fd:2f:85:95:90:5a:fb:81:26:9a:a6:
                    3e:49:67:fe:b5:f0:02:b1:3a:bf:64:91:cd:fb:28:
                    4a:59:43:18:e4:8e:3c:7b:cb:8b:b1:fe:4e:0d:4c:
                    02:7e:63:97:e0:a6:d5:d8:1b:d3:3d:42:b5:9e:76:
                    1a:91:62:fe:7b:91:a6:f6:1d:d8:ec:71:c2:66:95:
                    1c:55:36:02:3d:71:f2:4b:7f:1e:62:93:d8:0b:47:
                    36:65:1f:7d:60:0e:b4:1c:d7:b2:1d:c0:03:be:85:
                    b2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E0:7F:C1:D2:15:7F:F3:37:F4:C5:A8:28:8A:53:7A:3A:A0:9F:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/63e2f9da-54ac-3255-a01a-eafffcd4f452.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:27:12:6c:bf:46:6d:a8:0e:35:f8:f0:4b:56:a0:df:b6:36:
         11:3e:95:e1:44:6a:c1:f2:9f:d2:40:eb:b6:8e:7f:30:df:10:
         81:83:93:bf:0b:b8:80:13:bb:50:7b:60:58:73:94:af:3c:01:
         24:02:66:38:75:c1:3c:c8:e1:2c:73:48:a6:a8:4e:6a:48:e0:
         ca:ce:24:5b:0b:26:c1:95:04:40:b7:6a:82:40:d7:dc:92:aa:
         84:fa:b1:82:26:07:8a:19:11:1d:b5:af:cb:77:bf:25:f6:0c:
         0b:89:81:1f:62:56:41:21:8c:9f:f4:9c:40:d6:3f:a6:fc:86:
         f1:a5:81:21:c4:12:e2:eb:b9:7f:a3:ca:af:4e:92:d1:5f:7f:
         ef:d6:b0:1f:c5:bb:fb:d7:a7:6f:d4:0a:63:1f:93:1d:ea:80:
         6f:cd:47:d0:9f:0f:c4:d2:24:2f:38:10:7c:20:df:76:9a:8b:
         6c:b8:67:c6:5a:f8:e6:59:7a:b0:be:d0:6a:6f:83:7c:2a:12:
         30:7b:79:2b:f3:de:88:bf:bd:2e:eb:9b:58:f3:c5:3f:bb:a2:
         6d:d2:df:6f:c5:fd:4d:c1:1a:a7:63:2d:74:78:9a:69:c2:6d:
         e5:cd:bd:f7:40:4b:5d:3e:e3:80:0c:34:b3:1d:e2:80:c3:2c:
         0f:45:89:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:08:18 2026 by rpki-client