Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b4d8ae5-ba66-3f6c-bf77-49ed8dbac98c.roa
File:                     6b4d8ae5-ba66-3f6c-bf77-49ed8dbac98c.roa (raw, json)
Hash identifier:          b7OEsdzOOV+C34TU2MbT9P0CWtpxwCkIEtS3uthKXO4=
Subject key identifier:   C8:D5:C7:65:58:F1:DB:C0:CF:23:A9:B8:D8:79:7A:6B:B9:A1:D5:29
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D6AAA9728987908E6DC078580
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b4d8ae5-ba66-3f6c-bf77-49ed8dbac98c.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     13335
IP address blocks:        172.67.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:97:28:98:79:08:e6:dc:07:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=1b4fe7e3-cbfa-4191-a29c-5d1f742dc840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7d:21:0b:45:02:58:3e:d3:37:c0:73:87:5c:
                    2c:e3:be:ad:a5:b5:42:52:b6:e0:e1:ae:21:64:4e:
                    0b:d6:fb:b5:78:8d:27:b1:e2:76:5b:05:3b:e1:43:
                    db:4f:b0:7a:11:f4:59:96:c0:6d:60:25:44:cc:63:
                    55:d6:df:b6:f3:d1:3b:6f:57:d8:dd:f7:a2:82:bf:
                    de:7f:47:37:56:53:a4:51:3c:c8:43:41:38:15:87:
                    49:0d:e0:da:1c:da:26:b8:5b:d2:6a:77:e0:77:08:
                    b5:a0:dd:ae:8a:53:0a:65:22:77:82:3c:7a:66:1a:
                    62:36:15:0c:39:9d:d5:7b:d6:37:2c:f3:1b:ae:54:
                    b1:c6:6f:e3:e0:17:3d:32:8b:7c:8e:13:a3:26:29:
                    98:f4:44:12:7f:3f:2d:10:7b:21:af:dc:4d:00:82:
                    ee:a6:56:9b:b4:95:3c:98:bd:fc:b1:24:50:d9:df:
                    f2:d5:ef:3f:92:02:b4:20:dc:1f:37:6e:0c:bd:34:
                    b6:f2:a9:1b:aa:a0:75:1e:74:ef:1d:f2:a9:94:52:
                    f2:10:fa:6c:59:b1:ce:ff:e1:17:36:40:57:ec:09:
                    7e:ac:dd:98:62:b2:e3:c8:3f:b6:cd:4f:3e:c9:1a:
                    12:1b:29:f1:64:0c:d2:63:91:2f:61:6d:7c:91:e1:
                    d0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D5:C7:65:58:F1:DB:C0:CF:23:A9:B8:D8:79:7A:6B:B9:A1:D5:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b4d8ae5-ba66-3f6c-bf77-49ed8dbac98c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.67.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:13:bb:16:a9:be:cc:00:26:55:af:88:7d:5f:0f:68:bd:cf:
         4b:43:a8:7c:74:e3:d1:b2:e3:21:1b:a8:77:03:9e:cf:50:f3:
         96:c4:0c:04:4d:c5:6a:45:38:e7:3d:bf:64:bf:c5:99:a4:8f:
         eb:53:b9:a6:9c:94:38:08:67:a5:7d:47:22:55:54:e3:74:38:
         43:34:2b:76:72:5d:63:2c:47:f5:c5:63:22:85:22:ef:89:0d:
         89:0b:fb:96:7f:08:d4:29:ed:d2:3b:f7:2a:61:ef:e2:85:a3:
         20:bb:e0:29:49:42:ef:94:03:45:a3:72:69:05:83:37:ad:20:
         3b:aa:ff:17:7b:37:6e:7f:ad:34:1f:3d:90:b1:0c:f5:f7:dd:
         21:bd:55:01:1c:1e:cd:3f:d1:ec:de:ac:c3:6c:80:c4:f3:b5:
         cc:3d:78:b9:f0:3f:cd:57:e5:6d:0b:d0:8c:d6:45:ef:99:45:
         f1:a7:5d:93:1c:f8:bd:9c:6e:0f:79:e7:11:8c:b9:73:c9:3b:
         84:c5:4d:97:d6:c7:8f:7d:7b:31:b0:b8:41:f5:f8:20:3e:d8:
         87:79:a9:9b:a2:9d:19:c6:cb:e1:e0:4e:29:f0:d8:9a:af:54:
         63:fb:9f:09:c2:8f:e8:c0:20:f2:f2:8f:06:f0:42:94:a5:ad:
         e2:6e:07:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:50:28 2026 by rpki-client