Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/93dda1db-7582-367f-ad23-f3d4942085de.roa
File:                     93dda1db-7582-367f-ad23-f3d4942085de.roa (raw, json)
Hash identifier:          X0gDAIXs0ax+U6eL6x0/DLb/ZWOMPUb8ljrVxtLsJdk=
Subject key identifier:   73:A9:5C:57:CF:0B:F6:70:EE:4E:66:21:27:5F:8B:C0:40:92:72:64
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D71A51FC69408BA43DD6D0B00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/93dda1db-7582-367f-ad23-f3d4942085de.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     13335
IP address blocks:        172.70.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:1f:c6:94:08:ba:43:dd:6d:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=0ac47648-4b10-4f70-b05f-423ebdaf7d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:81:30:5a:b6:f4:41:c8:e9:27:8f:90:da:43:
                    79:2c:6d:d8:dd:f2:99:1b:6f:fe:cd:a0:67:3a:74:
                    2c:01:25:53:ca:2a:cb:b7:10:53:b7:1d:45:b4:1b:
                    7d:b9:ad:d9:ad:5a:9e:40:79:6e:80:3b:e4:7e:50:
                    13:0c:03:6f:48:cd:55:a0:2c:fb:68:0e:2e:3c:6f:
                    3e:96:df:f4:17:fa:2d:23:c0:74:27:93:fa:fe:15:
                    53:e0:db:d9:64:65:5e:c0:10:92:4a:da:57:07:4d:
                    c6:d2:1c:01:cc:cb:94:28:b2:89:03:76:cc:c3:1c:
                    c2:86:26:e4:5a:29:73:85:0a:79:f4:ef:cb:89:51:
                    7c:83:7d:e8:8f:40:c5:e8:85:61:ff:68:8f:a0:6f:
                    7c:e7:0e:2b:2e:d2:bb:d4:5f:01:58:e8:33:e6:8b:
                    f9:d8:e0:a7:c4:90:95:56:96:04:a8:13:49:6a:d8:
                    37:04:1e:0f:bb:e5:43:7c:87:00:dd:75:44:18:76:
                    b8:31:e1:12:c3:ae:fa:26:87:96:6c:12:ac:1d:1c:
                    8d:03:f1:dc:62:de:65:83:70:96:ac:e5:b1:a0:35:
                    7b:d9:5f:85:c7:62:b1:3c:be:b8:b1:da:e2:4c:54:
                    31:0f:28:24:45:8c:48:eb:c9:7e:9e:f7:cb:f5:40:
                    03:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A9:5C:57:CF:0B:F6:70:EE:4E:66:21:27:5F:8B:C0:40:92:72:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/93dda1db-7582-367f-ad23-f3d4942085de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:f0:68:17:f3:39:9c:c3:90:f5:4b:0d:53:bc:8f:67:3a:61:
         c8:30:67:ab:1c:c3:19:c3:39:b8:dc:5a:ba:59:5b:8a:60:94:
         1e:c6:8b:7e:45:a3:3c:83:58:b6:73:82:cc:10:6a:a4:dd:fc:
         7f:3c:c4:8d:22:96:ca:7f:68:b0:08:35:b2:b4:62:c4:cd:20:
         34:d3:0a:fb:c8:5f:9e:bf:53:46:ec:92:06:2d:a6:12:e6:0b:
         f0:7c:46:91:2c:f6:33:53:b5:c8:43:3e:3b:85:34:0c:5f:e4:
         31:c5:8c:ff:f0:6c:db:e3:f0:05:0f:44:88:5b:c9:c6:5d:ac:
         bc:4c:33:58:46:6d:0b:0e:a1:f2:4d:2d:56:96:00:69:8f:77:
         48:0f:6c:88:9a:9b:d2:dc:0f:77:dc:35:69:41:86:f0:ce:6e:
         85:0f:48:fa:5e:24:f4:41:8e:01:7b:7b:fa:f3:69:b3:6e:f3:
         e9:dc:df:47:12:d9:dd:29:51:84:7b:cc:f2:d3:29:47:85:64:
         7d:2d:67:10:c5:29:d1:96:51:74:a1:1b:04:0b:51:f5:33:51:
         31:26:c4:59:9a:8f:fc:b1:98:d9:e0:13:ba:78:27:77:fb:90:
         f9:69:52:4f:92:f5:03:24:3d:11:ea:e1:7d:58:5a:85:17:e8:
         ef:97:de:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:48:39 2026 by rpki-client