Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/875831e1-d985-317f-8db0-4afde61cf6dd.roa
File:                     875831e1-d985-317f-8db0-4afde61cf6dd.roa (raw, json)
Hash identifier:          IpIvTHh9lzfzfvms5d0KFUhGcegXcS6aKM4WLWOFEuQ=
Subject key identifier:   E9:AB:40:97:10:C7:87:22:22:0B:67:0C:05:E3:1D:2D:5C:90:B8:C7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D6C0FC47E02D540CE3612B380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/875831e1-d985-317f-8db0-4afde61cf6dd.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     13335
IP address blocks:        172.69.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:c4:7e:02:d5:40:ce:36:12:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=123994e9-4d1b-48a9-b356-6bcd4addda46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ae:e2:a6:42:a4:02:44:b2:74:ad:94:8f:af:
                    7c:53:05:31:02:78:15:aa:f2:47:e7:09:6a:58:52:
                    ce:17:ce:54:c1:f1:68:ce:88:20:46:df:f4:ba:b5:
                    9f:4c:c5:62:24:27:f4:0c:fd:33:68:09:8e:d1:15:
                    99:40:ca:00:68:83:11:4c:40:e5:13:41:86:b6:6a:
                    cc:d0:c8:4a:74:ad:15:aa:71:73:37:0a:23:44:bc:
                    12:46:f1:bc:e6:1a:d1:ad:ba:75:36:2f:ce:9a:d9:
                    8b:f8:63:9a:6f:b6:c0:69:87:5b:6e:90:8b:82:d4:
                    e7:da:6f:c5:a2:6a:7b:ae:72:b8:fd:80:84:b1:33:
                    ec:99:ff:a7:b7:68:32:a8:75:9e:1a:a1:a8:0b:df:
                    de:ee:96:76:08:a0:15:7e:e8:39:1d:e1:29:c5:8e:
                    d8:ce:99:20:b2:8f:93:0e:78:c9:1b:9b:ad:fb:85:
                    77:f7:26:c8:d3:ac:6e:0f:30:69:45:8a:95:4e:ae:
                    61:2c:fe:b7:f2:72:f4:6a:cf:6a:0a:52:47:5d:09:
                    3b:83:b4:56:56:6c:bd:b3:f3:50:05:27:a7:ed:ca:
                    2f:54:73:c6:83:e0:cd:67:9c:c1:88:e8:6d:c0:ed:
                    bc:7e:83:97:08:f8:c5:ed:b4:25:49:7f:53:3f:fe:
                    f3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AB:40:97:10:C7:87:22:22:0B:67:0C:05:E3:1D:2D:5C:90:B8:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/875831e1-d985-317f-8db0-4afde61cf6dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:61:b4:dd:10:a7:53:7b:4d:da:76:ed:74:33:0d:9e:22:67:
         85:9e:c6:9e:0a:67:65:75:1c:99:8d:89:2f:08:72:fd:40:b1:
         e9:06:fe:19:26:07:d9:fd:1c:85:68:ec:75:0a:26:37:2a:16:
         05:d4:18:b6:d8:30:35:eb:72:14:21:e2:97:87:e7:3a:ea:05:
         98:fc:85:33:7c:0b:22:15:3e:3d:71:25:af:d5:32:92:44:e1:
         ec:86:33:90:07:19:76:3a:22:36:92:9f:d8:c6:be:7b:b5:59:
         46:ba:c8:6e:1a:ef:c2:36:e3:9a:bb:2b:9a:61:62:ad:01:04:
         5d:28:22:ec:a1:91:c9:14:10:20:1b:ab:d3:45:0b:bb:19:93:
         08:27:04:3d:f1:9e:68:eb:35:22:b7:9d:68:09:7a:e2:69:d0:
         82:ea:4c:18:8d:91:ef:2c:ab:00:b0:ed:de:47:b7:0f:56:c6:
         fc:1e:0c:ab:7d:0c:73:9f:fe:e9:5c:cd:cc:28:0b:24:c2:97:
         32:85:7a:33:d7:4c:0f:8b:2a:24:01:d5:ca:6a:d2:4c:03:3b:
         c7:3d:bd:e2:c6:42:31:86:51:ac:75:ef:16:fb:7a:d5:c1:28:
         af:5f:3b:b7:17:6f:c2:f8:a1:45:db:c3:9b:a0:00:e9:cc:e1:
         97:64:b7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:54:50 2026 by rpki-client