Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6f5aed1c-4763-3e9c-a235-328f25e4477d.roa
File:                     6f5aed1c-4763-3e9c-a235-328f25e4477d.roa (raw, json)
Hash identifier:          u1dJk/vfx24qWNCFx1+XfidXGJwCCdaDVpapTcH1UJU=
Subject key identifier:   7E:AD:DE:63:67:6B:8C:8D:28:C2:9A:1B:2B:74:07:9E:08:35:DE:5D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D6AAA9DCD2CC82E4A844AB940
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6f5aed1c-4763-3e9c-a235-328f25e4477d.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     13335
IP address blocks:        172.71.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:9d:cd:2c:c8:2e:4a:84:4a:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=885bc4b9-c6f0-4096-89cf-4135ffe80a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6f:95:ba:33:34:b0:6a:1c:c2:35:7d:c5:48:
                    3b:b2:33:5b:6f:24:4a:dd:bb:c4:70:7e:12:ae:8a:
                    78:a2:bb:6d:78:e0:df:63:47:a0:67:d2:f7:b0:80:
                    59:ee:67:3e:38:50:f1:87:73:a2:37:af:25:66:5b:
                    98:19:77:99:63:17:19:30:fa:18:d0:96:b0:78:94:
                    46:f5:df:59:ce:26:21:e4:c9:8d:a7:30:c2:70:9a:
                    db:76:e5:8f:3c:02:5f:f4:b1:98:f1:80:7f:05:16:
                    b3:7d:15:fc:e3:30:f4:e9:22:61:f0:d4:05:16:ee:
                    3c:03:1e:2a:59:82:16:ae:62:dd:74:ed:3c:ac:e7:
                    8f:b4:36:f9:99:9b:1f:ee:8a:f6:de:5f:52:29:b7:
                    09:83:85:b9:1f:33:86:c4:ac:46:9e:39:b9:0d:46:
                    34:75:d7:f9:62:19:31:4e:32:eb:ff:64:17:40:c9:
                    40:74:d8:94:dd:2f:29:62:a8:f7:b8:45:7d:86:af:
                    a9:ec:e7:4f:d3:7c:cd:cc:e7:0b:11:48:fe:81:11:
                    8c:97:77:b0:16:c3:d3:17:38:88:a6:8a:80:07:2a:
                    5b:05:71:58:f3:91:d2:9e:28:95:47:7a:d5:62:ac:
                    5b:6f:3f:45:2c:78:fa:db:f6:44:5c:50:12:aa:0e:
                    32:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AD:DE:63:67:6B:8C:8D:28:C2:9A:1B:2B:74:07:9E:08:35:DE:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6f5aed1c-4763-3e9c-a235-328f25e4477d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:30:dc:7e:68:39:ed:d2:a4:4e:8d:4c:73:dc:aa:39:a4:99:
         64:b0:06:e4:2f:88:20:54:a8:0f:3b:f7:7a:3f:01:40:1f:a5:
         0a:9a:b4:13:05:a3:33:1d:07:27:00:ef:0d:14:ef:e4:44:60:
         b1:a6:05:44:69:79:9c:cc:e5:06:09:66:d5:fe:56:e9:5a:42:
         f9:a6:78:92:51:95:82:89:c6:4e:b7:d8:40:42:7b:93:56:c3:
         3a:14:bd:39:4d:cb:5b:d5:7b:a0:c1:43:b8:7d:7d:f1:dd:5a:
         cb:a5:50:6c:97:d8:c7:f7:c9:1a:86:71:d1:2a:6e:1d:c3:3e:
         60:b1:ee:ab:c0:d8:1f:43:d4:7d:10:56:9c:39:79:ef:61:31:
         c5:c2:cc:86:6a:92:26:f2:ad:81:19:14:79:6a:15:70:db:21:
         40:ca:c4:7c:ff:e7:ab:f6:6f:3e:d4:cb:16:99:9c:2b:05:8c:
         34:cd:1b:69:3a:96:51:69:f3:6b:3b:3f:6a:11:3f:ae:7a:31:
         d6:ee:3a:57:87:f1:1c:13:e5:03:a5:fb:48:c7:46:93:a6:2a:
         d6:40:c4:50:56:5b:24:a1:f1:af:21:2d:b1:61:27:f2:27:38:
         53:46:22:8c:d7:70:7d:2a:28:3d:64:2d:49:c5:ee:2a:9c:03:
         85:89:2e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:21 2026 by rpki-client