Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7f7cfc6b-9b38-399b-991f-6e7d6a2fcf55.roa
File:                     7f7cfc6b-9b38-399b-991f-6e7d6a2fcf55.roa (raw, json)
Hash identifier:          FY4UupYx9iC8xE7SghnPoNHIYkyG6ZlXkipdBPQO+Cs=
Subject key identifier:   74:EB:11:5D:3C:D7:C3:15:0B:68:F1:7C:7A:6A:D6:51:5A:BF:CF:03
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584C9106F25FE6AECB6E852D3FC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7f7cfc6b-9b38-399b-991f-6e7d6a2fcf55.roa
Signing time:             Sun 18 Jan 2026 14:00:39 +0000
ROA not before:           Sun 18 Jan 2026 14:00:39 +0000
ROA not after:            Sat 18 Apr 2026 13:00:39 +0000
asID:                     13335
IP address blocks:        172.71.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:91:06:f2:5f:e6:ae:cb:6e:85:2d:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jan 18 14:00:39 2026 GMT
            Not After : Apr 18 13:00:39 2026 GMT
        Subject: CN=80554d00-a0e1-44f3-a3db-0080fa423956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3e:2f:5a:b7:59:28:98:a9:47:21:94:46:62:
                    67:e0:2c:eb:04:88:ef:bd:16:d9:3e:4b:9d:45:88:
                    74:6b:46:f3:f1:a8:46:69:30:2e:c0:df:9d:59:b0:
                    de:88:cc:ea:f2:3b:0d:65:81:90:62:da:b8:95:04:
                    51:bf:fa:12:e5:92:76:e2:a7:47:bf:b2:30:c6:42:
                    54:72:ac:2c:2a:2e:33:11:b5:5f:bc:02:fb:1e:5b:
                    b2:22:34:bd:14:e8:2a:5b:03:d9:47:9d:0a:39:8d:
                    7d:42:7a:01:c1:cd:d6:53:fc:1a:0f:18:69:de:1d:
                    b8:da:54:af:1d:c3:48:08:21:e3:d9:74:8d:ea:92:
                    d8:43:a1:95:bd:37:52:e8:a7:4e:72:75:25:f4:83:
                    17:6c:31:71:d3:3f:75:7e:61:77:e5:e2:c6:ab:c2:
                    59:ef:7c:f4:c1:19:1b:c6:ec:c4:99:76:9e:8f:5a:
                    b0:03:39:17:a6:91:17:2b:ac:26:ea:87:ee:5c:87:
                    1c:63:11:68:53:a2:c5:46:90:46:db:18:16:a7:7e:
                    72:91:94:67:d3:51:5a:f6:71:73:e9:84:4d:bc:8e:
                    c1:1c:4f:e5:18:64:96:f4:d5:f0:e2:5f:20:98:0f:
                    72:20:90:df:16:4b:95:c6:5a:38:00:51:2c:c3:d1:
                    e2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:EB:11:5D:3C:D7:C3:15:0B:68:F1:7C:7A:6A:D6:51:5A:BF:CF:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7f7cfc6b-9b38-399b-991f-6e7d6a2fcf55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:b7:cd:b5:ca:01:1c:e2:a6:2e:e1:4d:39:a6:0c:34:17:b8:
         aa:92:2f:dd:4b:e1:14:83:0d:78:f4:63:b1:08:88:eb:99:5c:
         50:ac:f0:11:a5:d8:a4:01:ab:1e:14:ba:8e:2d:3b:62:13:1f:
         47:f7:41:8d:dd:ea:40:74:b7:c3:b8:49:a1:09:ca:52:56:2d:
         a6:0b:13:cb:98:af:0f:84:e7:cd:9f:e5:f8:71:8c:f8:c1:fa:
         85:8b:21:37:a5:99:da:ae:ae:07:9a:08:96:3f:b2:de:ff:8c:
         6e:04:fd:94:67:a4:aa:79:ca:c6:99:6f:99:95:92:70:da:c1:
         1a:ce:99:1e:83:e6:99:67:93:63:d3:f5:96:3f:3d:ec:43:c8:
         44:cb:9e:cc:8f:fa:e0:fd:06:18:27:de:75:fe:d9:a4:6e:55:
         fa:c0:7e:9e:66:e1:e3:57:00:54:ea:af:3f:f7:43:95:e4:3b:
         45:5b:43:4a:42:f9:0c:5a:89:88:e8:7a:2f:86:97:db:e2:b9:
         2c:b3:b4:ce:87:9a:9b:c3:21:f6:45:5a:63:51:39:0c:22:03:
         35:f1:05:9b:09:47:45:81:69:b1:65:c9:ea:5c:fa:06:95:d2:
         bd:1f:bf:d3:f4:38:16:ac:75:eb:2e:11:6c:c1:65:43:02:62:
         76:df:c2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:26:26 2026 by rpki-client