Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8554fa8e-b4c4-3f90-9d48-569f74cda04b.roa
File:                     8554fa8e-b4c4-3f90-9d48-569f74cda04b.roa (raw, json)
Hash identifier:          dmCxM6FDCvDevMDIt7i2OD5/YTG/zG8anRGa60Reb6M=
Subject key identifier:   47:D8:6D:F5:2F:7A:2D:84:E3:55:86:EB:E3:35:69:CD:21:69:D3:A4
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D703FEDF016A83EEE1F6566B0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8554fa8e-b4c4-3f90-9d48-569f74cda04b.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     13335
IP address blocks:        172.70.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:ed:f0:16:a8:3e:ee:1f:65:66:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=0a70c6c0-68a9-4fdd-bbb0-9be91f7516f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1a:75:9d:34:79:1b:4e:ff:13:88:3c:34:25:
                    8a:b7:16:f9:98:e7:ff:71:d0:2e:64:26:dd:67:a5:
                    1e:b1:5c:7a:f8:96:2a:c8:3d:b2:20:16:da:77:c2:
                    82:9b:91:fd:61:00:87:86:64:f9:75:9a:f0:e4:76:
                    32:0d:39:cd:bc:2c:21:15:d5:3e:71:af:f0:ae:5c:
                    fb:1f:0b:05:40:76:6c:48:ec:9b:4f:dd:c6:5c:58:
                    35:9a:20:9a:84:5f:14:4f:f3:0f:01:e1:57:cc:80:
                    7a:63:c2:41:9f:1e:fb:a4:45:51:f7:af:14:cf:5c:
                    41:d7:ca:fe:14:68:76:a1:50:94:e8:77:67:15:10:
                    bf:83:91:fd:2a:c4:47:c7:cc:50:ae:f7:3c:20:98:
                    c1:af:df:86:15:a6:4d:4c:7a:93:6e:c2:90:79:0e:
                    55:0b:29:7e:6e:27:57:49:a1:dd:e7:4f:84:ab:cd:
                    c5:df:79:54:5d:e2:6c:4c:4d:fa:f1:7b:59:bc:05:
                    8e:2f:d3:ed:a2:35:51:9a:df:4f:fb:52:04:0b:cf:
                    ad:7d:c7:70:bf:03:63:99:a5:f8:d1:18:51:9c:b5:
                    51:70:34:b0:06:ca:75:57:c9:cf:2c:0b:a6:1e:6a:
                    51:5c:c4:b7:5c:74:cd:4d:b6:d3:b4:7c:a0:2b:ef:
                    c9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D8:6D:F5:2F:7A:2D:84:E3:55:86:EB:E3:35:69:CD:21:69:D3:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8554fa8e-b4c4-3f90-9d48-569f74cda04b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:f0:a9:8c:e4:cc:8f:60:7a:ee:b2:08:69:85:6f:b4:02:2c:
         8b:7e:3f:ab:7c:a8:02:e3:da:4c:1d:2a:8d:fb:68:8c:42:ad:
         37:84:6f:b9:97:5a:b8:49:97:f5:a3:7c:94:cb:a2:bc:ad:ff:
         25:10:c3:74:dc:7d:63:00:56:ff:1b:83:13:38:47:d6:5f:78:
         da:68:b3:d6:09:75:25:9f:97:cb:a3:cb:dc:64:39:52:f4:df:
         0e:11:0b:50:ce:d7:ed:9a:1d:f7:f5:48:20:55:2b:ae:ad:42:
         c2:dc:2d:04:3c:79:04:f6:43:d9:c2:6a:bd:fa:42:b2:51:5f:
         ce:3d:4c:9c:ef:0e:e5:4f:83:3d:bc:36:64:64:68:c8:d7:09:
         64:4b:49:10:49:ab:9a:88:78:f8:97:cb:9e:f1:89:8c:fa:44:
         74:12:8f:c6:a9:ed:2d:ba:9f:b0:79:50:7d:22:c8:13:77:2b:
         c3:90:8c:e8:05:88:92:f3:2e:c3:78:be:b7:c5:8e:a1:ce:d4:
         36:c9:2a:6d:9c:c5:fc:a9:b5:d3:73:c8:42:9a:dc:ed:22:4e:
         e0:98:5a:6b:83:0d:4c:96:8e:66:60:99:0a:7f:ca:57:e4:41:
         d3:e8:c9:1b:00:68:1f:9f:ce:f8:99:eb:c6:b0:71:7c:f5:09:
         3a:04:12:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:33:55 2026 by rpki-client