Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9853000f-d426-3c79-899d-48096c97a485.roa
File:                     9853000f-d426-3c79-899d-48096c97a485.roa (raw, json)
Hash identifier:          TKqb97+AlEVRmjKno6vOulQYVm6nLHiMSA6gKBGQVW8=
Subject key identifier:   99:6C:F2:CF:F7:AE:D5:FE:A5:96:16:0A:5D:C6:05:8C:25:2B:C6:AF
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584DF210874909B948291DE7CE00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9853000f-d426-3c79-899d-48096c97a485.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     13335
IP address blocks:        172.68.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:87:49:09:b9:48:29:1d:e7:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=b9d1cd52-4a13-4a89-81e5-ffb20ff8fdfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:39:75:56:87:d6:96:b4:b5:19:81:13:31:f5:
                    84:c8:76:a6:62:7c:a8:9c:8a:3a:a2:83:f1:dd:0a:
                    f9:fb:73:0a:e3:64:c9:f8:53:93:43:ef:69:90:7b:
                    3a:a9:2c:f4:9f:a2:95:c2:6e:47:78:7b:59:7b:7c:
                    fd:b4:8b:22:98:8f:da:4f:26:5f:84:b6:7f:36:f2:
                    f5:41:12:19:c0:39:fa:47:87:92:6e:ea:48:e2:e0:
                    ce:b4:84:6d:40:5b:2b:d1:54:c9:2e:94:a1:2e:18:
                    84:35:53:de:0e:ba:c9:96:96:27:42:99:d2:db:9d:
                    7f:6a:57:c9:40:a0:5a:18:c4:24:14:be:88:7a:46:
                    03:18:0b:f9:64:c3:4a:80:d4:fb:8e:7b:51:4c:a0:
                    24:6c:c8:cc:6f:b6:79:a2:36:06:7c:b8:8d:f3:ea:
                    21:97:75:f9:b1:4f:1b:c5:14:8f:63:7d:f8:1d:a9:
                    00:6d:55:e1:eb:51:24:49:6e:0b:b7:ab:19:d6:62:
                    ab:e8:dd:65:24:af:90:ad:b6:9f:e7:6f:5d:b7:12:
                    2f:3c:22:e7:01:2a:2b:c3:18:79:7a:98:ce:a8:0e:
                    9f:de:9d:e5:1f:a1:61:b1:47:f8:88:9b:7b:7f:df:
                    bc:5b:3b:bb:5f:2a:47:10:3f:21:0b:17:6a:8e:f0:
                    97:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6C:F2:CF:F7:AE:D5:FE:A5:96:16:0A:5D:C6:05:8C:25:2B:C6:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9853000f-d426-3c79-899d-48096c97a485.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:a6:1a:cf:f6:e2:04:3f:b0:4a:ff:01:d1:20:3d:8d:ee:77:
         34:5f:53:0e:ef:1c:56:b7:98:54:a8:36:67:b5:3e:20:85:64:
         c0:ee:ca:d1:ad:e8:86:ee:2f:ec:23:91:7c:42:52:29:a5:27:
         7f:d0:54:90:2c:07:ef:ab:d1:07:13:f2:3b:af:fa:e2:d1:75:
         e4:50:09:8b:18:67:20:82:d8:b4:b0:30:a8:a0:0f:43:0e:ac:
         4f:95:11:c7:ac:00:51:91:31:a0:5b:1e:d9:28:0a:5e:15:e7:
         ee:6c:29:5e:56:fd:fc:e6:63:12:28:6d:b3:29:a5:f6:97:1e:
         4e:e4:c5:67:c6:94:9b:2c:a1:76:5c:39:8e:e9:8f:1d:48:ca:
         de:36:b8:48:47:bc:b9:8c:04:93:67:e0:8f:58:2c:6c:ad:26:
         66:86:00:be:c1:de:d1:04:cb:ac:ea:fd:f1:13:06:d5:56:87:
         9f:97:fe:7f:37:df:ae:c6:c9:15:23:2b:77:7d:fa:f2:e7:b8:
         79:28:fc:5d:62:91:a0:2d:26:92:ba:ac:4f:8a:1e:13:fb:d9:
         07:5c:39:2c:4e:5c:3d:59:5e:7e:fe:2e:a2:12:8f:e6:91:81:
         1f:f6:f6:ad:7c:23:19:5b:d4:b8:cd:0c:30:b6:21:62:34:d2:
         c4:7a:c3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:53:40 2026 by rpki-client