Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/968a90ac-8b9c-34d4-9924-a9a02cc8f903.roa
File:                     968a90ac-8b9c-34d4-9924-a9a02cc8f903.roa (raw, json)
Hash identifier:          0XHqrW4U8D+acKc9d8IdmzY/rlacyqGGkKt8+OXi8fg=
Subject key identifier:   A3:75:D8:3B:B9:B4:C2:E5:07:65:A6:8B:01:41:F3:BE:4E:A0:02:A9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584DD24A41EC540582982176ED80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/968a90ac-8b9c-34d4-9924-a9a02cc8f903.roa
Signing time:             Wed 13 May 2026 15:50:57 +0000
ROA not before:           Wed 13 May 2026 15:50:57 +0000
ROA not after:            Tue 11 Aug 2026 15:50:57 +0000
asID:                     14789
IP address blocks:        172.69.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d2:4a:41:ec:54:05:82:98:21:76:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 13 15:50:57 2026 GMT
            Not After : Aug 11 15:50:57 2026 GMT
        Subject: CN=8fd1abc0-cb2d-4d2d-831f-59e4d11b8210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9c:ab:72:8c:8a:37:0a:c9:5e:12:63:b5:ad:
                    94:b6:7a:46:62:39:df:2d:4a:ce:c1:2a:f3:4b:11:
                    ae:45:b8:1a:61:d6:d7:20:33:c2:32:fe:0f:e1:69:
                    7c:5a:a5:71:af:36:3b:e1:45:6b:8c:ba:2f:d9:65:
                    b3:38:78:20:2b:a6:a3:4e:2e:f8:94:c8:e8:4a:11:
                    70:a2:23:18:f4:06:03:9f:19:d1:01:76:52:79:da:
                    d4:51:29:cd:62:b4:2e:fb:92:c5:fb:6f:be:78:4d:
                    3a:54:98:58:be:a2:0f:64:48:0f:a1:54:95:6c:95:
                    ec:f6:24:06:83:f3:6b:c1:55:11:cd:e2:9c:60:bd:
                    80:e9:ce:4b:56:d3:15:74:82:93:02:d3:c3:06:c0:
                    3e:30:17:bb:2a:71:4d:09:61:0d:69:b0:70:33:7d:
                    1a:c5:19:d9:c0:c2:0a:c8:20:26:15:1a:cb:dd:f3:
                    ae:f2:cb:5f:88:67:97:c3:ad:cc:6d:56:91:ed:99:
                    7f:eb:64:5a:69:38:a8:21:69:64:61:0e:d4:0d:1e:
                    a9:57:e9:5e:2a:99:1b:4d:01:61:e8:30:ba:04:5e:
                    cb:da:c1:0d:94:10:86:0f:01:b0:38:ea:6b:2b:a7:
                    50:4a:08:3d:19:86:72:27:eb:a4:3a:ac:ff:8a:7a:
                    6c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:75:D8:3B:B9:B4:C2:E5:07:65:A6:8B:01:41:F3:BE:4E:A0:02:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/968a90ac-8b9c-34d4-9924-a9a02cc8f903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:8e:de:9b:3e:d8:63:e5:be:3e:b1:ab:4e:46:72:aa:4d:7e:
         ca:3e:96:df:11:f4:e0:a4:76:d7:6b:90:4a:6a:ce:ee:77:05:
         46:b0:84:8e:cd:b1:1a:78:f7:10:bd:9d:93:33:c7:c6:ec:4b:
         c4:d6:ab:68:06:30:25:36:1b:bb:bd:9d:db:97:d7:cf:b2:40:
         9e:67:26:dd:93:c6:c6:32:fb:6d:39:ed:6c:d8:52:07:23:9a:
         ba:d1:db:78:02:21:af:75:16:c8:6c:99:d1:75:21:3a:12:cc:
         c6:71:b3:9d:ab:ff:da:d8:c2:44:d0:4b:74:90:16:5f:7b:87:
         9a:73:b1:7e:9b:8f:c2:ba:ce:87:80:dd:d4:9f:45:96:8e:d0:
         b8:1d:40:27:e0:f4:17:d5:e0:bf:64:16:73:13:d0:95:38:6e:
         77:db:ea:1e:e6:fc:00:40:b5:61:a5:41:47:ff:1c:21:52:a2:
         4c:af:eb:b9:00:94:ec:e5:3b:a9:8e:65:41:ff:f7:71:f8:8c:
         65:ca:a4:17:93:1b:a4:2b:be:9f:fe:7a:87:7f:8e:d3:a8:6f:
         b5:a0:a2:06:9c:5a:44:48:0f:98:67:92:0b:3c:1b:df:58:50:
         67:f0:b6:17:9e:e0:d1:24:aa:00:0f:ba:d5:77:cb:06:b6:13:
         8c:e7:cd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:41:06 2026 by rpki-client