Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/94d34060-7e90-37ef-b43e-f385f7e8b0cc.roa
File:                     94d34060-7e90-37ef-b43e-f385f7e8b0cc.roa (raw, json)
Hash identifier:          yFqUcL1noB2ss5doGai/mIdUI/M93B1xT5cnmAVf/A4=
Subject key identifier:   22:A9:70:8F:67:86:AE:82:0A:3E:80:4B:38:40:B8:34:98:DE:A7:61
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D71A520FCA74D7C3866FF3D60
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/94d34060-7e90-37ef-b43e-f385f7e8b0cc.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     13335
IP address blocks:        172.71.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:20:fc:a7:4d:7c:38:66:ff:3d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=51f71886-ea57-4eaa-b5f2-3e61f21041c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5d:42:37:69:05:3e:dd:68:6b:8f:36:84:dd:
                    f9:25:2c:ea:7d:2c:fd:ce:dd:ca:f5:be:4c:af:64:
                    40:87:7d:a8:e9:f0:cf:42:95:b3:3b:d0:6c:7a:5e:
                    8a:b8:c6:ad:de:5b:eb:0c:42:e1:93:22:ba:07:34:
                    14:4b:72:9a:1f:ce:77:9b:10:be:d5:79:a6:18:e3:
                    06:a9:72:bb:3b:8b:fe:e6:04:f8:3c:c0:ee:6d:30:
                    b7:01:5c:d6:b9:15:ae:cf:aa:07:cc:41:8c:fc:a4:
                    d5:17:8d:03:e4:3a:b1:0e:68:f5:3a:49:49:98:eb:
                    03:a3:d3:3f:95:49:bf:12:e4:a6:20:b3:e1:c2:e7:
                    32:15:1c:4c:9b:03:b0:1d:82:79:63:4c:1b:27:7f:
                    34:94:2c:e8:c5:5d:d5:3e:83:b2:ff:cc:b2:b3:bb:
                    d3:47:6f:98:28:a9:c6:d5:53:f0:c3:01:85:87:24:
                    06:4b:cd:e2:84:54:c7:10:52:25:b0:89:30:1b:21:
                    25:46:c2:7c:95:55:5c:4a:cd:d5:ec:28:55:ae:0e:
                    28:81:89:4b:5c:35:0e:0e:7f:6f:1d:9c:64:71:e7:
                    83:5e:a0:49:1b:72:54:51:92:cc:71:ac:cd:e0:91:
                    1f:53:93:bd:58:af:c9:4a:61:28:65:b3:37:a9:ba:
                    24:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A9:70:8F:67:86:AE:82:0A:3E:80:4B:38:40:B8:34:98:DE:A7:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/94d34060-7e90-37ef-b43e-f385f7e8b0cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:43:1c:6a:cb:6a:c1:7f:45:96:75:aa:b8:25:39:ab:44:7c:
         3e:81:97:51:a1:b0:bd:58:36:87:78:99:dc:1c:30:f4:4e:d0:
         a5:9f:66:78:2e:55:90:96:6b:0a:6d:47:eb:11:ff:8e:3f:c2:
         c2:56:01:96:28:8f:b9:13:10:96:8b:1e:8a:65:ed:12:59:3c:
         66:63:f2:99:5e:dc:01:0e:75:3a:b7:6b:61:7b:20:78:88:d8:
         f5:9f:3a:11:8f:12:0e:fd:3b:e1:1c:24:16:f9:91:c4:60:78:
         6a:61:b8:94:41:6d:07:8b:0a:c2:9b:92:27:ed:fc:e2:e1:5a:
         61:4e:89:12:b5:1b:14:de:59:2f:87:21:75:05:3f:f9:4d:63:
         e3:6a:9e:17:20:e1:86:a2:fe:12:d6:3e:1b:fa:69:cd:4e:64:
         f1:85:87:61:81:1c:7d:ae:30:53:79:35:0c:2d:8c:f8:28:93:
         ed:86:97:a6:a5:98:f9:cb:84:35:5a:98:31:16:23:a6:df:bb:
         0d:80:42:49:53:ba:f7:01:10:ba:75:6f:f3:f6:9d:a0:24:cc:
         94:84:1e:b2:fb:ed:ca:c9:61:66:99:94:27:2f:5d:da:10:4b:
         c7:b5:de:29:c0:08:f0:84:65:a3:6e:94:38:61:f1:36:a5:5f:
         b5:10:b4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:41 2026 by rpki-client