Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6beb701b-4dcd-39ff-8b42-19af2b6aed4e.roa
File:                     6beb701b-4dcd-39ff-8b42-19af2b6aed4e.roa (raw, json)
Hash identifier:          CduGrQQ+dz/h3jpph7gnt56dM25kcv5mDqaPlkKep8E=
Subject key identifier:   32:F3:9F:FB:6F:8D:51:4F:63:B8:27:4E:93:6C:A6:3C:03:1A:0F:FF
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EE4235E5EB2B54D233B293380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6beb701b-4dcd-39ff-8b42-19af2b6aed4e.roa
Signing time:             Wed 19 Aug 2026 18:04:05 +0000
ROA not before:           Wed 19 Aug 2026 18:04:05 +0000
ROA not after:            Tue 28 Dec 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.68.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:5e:5e:b2:b5:4d:23:3b:29:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 19 18:04:05 2026 GMT
            Not After : Dec 28 05:00:00 2027 GMT
        Subject: CN=acfa12af-2e56-4ba4-99d3-b340bc11800f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1d:e3:93:9a:69:29:c6:ee:4b:1f:1c:85:96:
                    23:ec:e8:96:66:7f:46:c7:2b:47:df:a1:d6:af:12:
                    0e:8e:6c:1e:bf:6e:1d:80:24:f1:e9:e7:9a:45:e3:
                    80:69:90:b3:7d:2f:14:83:24:40:6f:31:47:53:b6:
                    a9:54:67:ed:65:74:ca:87:a3:f5:60:ff:af:ed:4b:
                    c5:a2:95:a0:b0:2e:d6:c5:b2:70:82:7c:e0:42:9a:
                    36:87:0a:e7:3b:52:fc:b2:bb:3a:bf:67:23:52:11:
                    c4:fc:02:ea:b9:a5:29:19:a6:68:22:f7:47:ad:a7:
                    c4:05:75:f7:c0:b8:c3:63:0d:01:f2:43:05:da:b8:
                    cd:4f:3c:02:66:44:08:3a:23:c9:82:4b:62:4f:37:
                    af:b0:4b:6f:d4:c3:27:87:33:6a:c6:8f:ab:c7:98:
                    93:a6:c2:e9:40:ab:89:31:15:af:a4:e0:92:02:f8:
                    47:9c:1f:d8:c8:ef:4b:b9:cb:26:ae:a4:3d:d3:a9:
                    b3:ad:f7:1b:bb:be:aa:05:f1:a8:0d:17:62:50:b7:
                    d7:c5:be:e7:31:d4:cc:aa:1a:65:85:92:d3:7a:f6:
                    85:4b:a2:c5:df:ac:ce:f1:ac:c6:d7:79:c9:07:39:
                    70:ff:df:ef:42:9c:f0:2d:d8:24:f4:c9:89:f4:16:
                    32:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F3:9F:FB:6F:8D:51:4F:63:B8:27:4E:93:6C:A6:3C:03:1A:0F:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6beb701b-4dcd-39ff-8b42-19af2b6aed4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:83:eb:ca:04:0a:c0:bb:54:52:f8:91:8d:2c:07:ec:74:50:
         02:c5:18:f4:1d:7c:52:14:1a:01:c4:f7:c1:17:ac:7c:f3:d9:
         2f:18:32:38:80:60:40:93:9a:1d:c9:21:73:0e:14:14:d8:11:
         05:38:0e:6f:87:49:97:bd:86:ed:a6:e6:33:6e:3c:be:92:47:
         f4:32:74:72:3a:f9:b4:9a:ae:c6:f6:75:a8:8f:01:f4:09:f1:
         7b:7a:d4:79:fa:f6:f5:72:1b:2b:ab:c7:4e:62:b1:11:8b:07:
         44:33:dd:bf:ac:a4:2e:5b:e1:44:ac:f5:20:07:33:f6:1f:31:
         40:ff:43:6e:62:be:ae:c9:67:d2:34:be:26:2b:20:fa:db:7e:
         85:80:14:e6:63:e1:a0:08:e8:fc:0d:71:6a:22:74:df:a9:c7:
         e4:bb:36:45:67:66:f1:82:ea:98:6a:d2:59:f0:7d:15:ee:a5:
         4e:44:87:fa:e4:a9:87:60:78:30:a2:c1:f9:df:56:fe:e2:48:
         f0:da:03:09:ee:5d:b6:58:71:50:a4:ba:fe:75:9e:0a:55:78:
         09:30:82:a6:25:9b:e1:79:15:e4:20:2c:22:3e:3e:6a:6b:c6:
         88:12:8c:30:17:25:f7:47:ee:8e:cc:c1:2e:07:a8:53:de:7f:
         df:62:b6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:46:06 2026 by rpki-client