Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b676f0d-1a18-3ce6-b1a4-22eb1783ab54.roa
File:                     9b676f0d-1a18-3ce6-b1a4-22eb1783ab54.roa (raw, json)
Hash identifier:          qrGcZJqc9O1X5o3XAc0id5qwo1bkPH2vHRqsFUd9Dk4=
Subject key identifier:   75:38:F8:5D:23:08:12:A5:1C:89:34:C6:86:EA:68:FD:C7:0C:5C:C0
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D6AAAA54A088DB470A6AF5400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b676f0d-1a18-3ce6-b1a4-22eb1783ab54.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     13335
IP address blocks:        172.68.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:a5:4a:08:8d:b4:70:a6:af:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=a28b5b89-077d-45ad-8cb9-e1b162445a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2c:0b:14:02:d7:24:81:d2:29:dc:d4:21:7b:
                    7b:4e:42:54:ac:f0:4f:72:07:4c:85:6b:35:58:aa:
                    cf:cc:1a:ac:75:6f:63:2b:2e:b7:84:16:0a:b5:71:
                    2b:e6:dc:a7:b3:bf:8d:48:30:ca:1e:bd:ab:1e:71:
                    df:43:fe:ea:e1:41:2f:11:43:df:6b:48:6a:90:a1:
                    e3:d8:b3:ff:1f:57:cb:43:97:21:3c:e3:77:24:67:
                    70:dc:ee:e3:97:ef:a3:37:ce:53:de:30:43:80:6c:
                    26:65:ae:2f:f7:f8:5d:ea:17:1e:37:36:80:ee:1b:
                    95:ad:4a:10:4e:55:b9:d5:26:a9:dd:16:ce:a9:70:
                    7f:8f:03:22:64:ed:66:15:7b:f7:14:4b:d4:9b:89:
                    e6:91:6d:a3:2f:de:34:4a:80:63:ba:7b:f5:af:71:
                    4b:6a:47:79:72:94:62:55:75:b8:ef:d5:90:b2:cc:
                    39:89:92:a3:7e:31:c6:f8:7e:83:2f:24:d0:6f:70:
                    61:9c:26:28:40:70:3f:f8:63:a6:20:04:cb:7f:76:
                    3e:ea:34:90:50:25:5d:f3:c5:29:13:67:72:ba:7c:
                    eb:31:05:a5:36:0c:d8:04:a1:e3:77:b4:8e:0b:9f:
                    1e:ba:eb:1a:52:34:c6:dd:ef:b1:a9:e8:98:fe:20:
                    81:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:38:F8:5D:23:08:12:A5:1C:89:34:C6:86:EA:68:FD:C7:0C:5C:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b676f0d-1a18-3ce6-b1a4-22eb1783ab54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:0f:e7:f6:5e:9b:cd:9c:6d:70:9c:21:4b:a4:d1:89:e4:80:
         7c:aa:de:98:fb:96:81:f5:ac:95:3a:d0:96:60:1a:b6:07:3b:
         20:57:0d:14:a9:48:df:ba:1c:67:58:8f:98:bc:37:e2:a3:1c:
         a8:8a:be:b4:87:e3:79:44:02:af:20:d4:bc:d9:b1:12:3f:af:
         d5:be:55:45:a0:3b:8a:f4:94:83:f2:b5:b0:39:6b:99:d4:f3:
         96:2c:db:09:bf:a6:77:e3:71:94:94:8e:5e:c9:5a:33:93:01:
         13:77:1f:f7:74:52:d4:0e:5f:06:16:95:d6:49:a8:e5:f9:b9:
         f4:89:05:e1:50:0b:b1:2d:aa:82:48:71:5a:1a:20:86:93:e7:
         b4:e9:43:89:59:1b:16:0b:71:0e:fc:53:13:68:7e:de:be:31:
         7b:7f:41:d6:4b:90:87:f7:a9:5d:c0:b5:45:85:8c:c8:cd:bf:
         00:2e:43:51:bc:7d:7c:cc:a7:22:52:c5:eb:7b:3a:54:43:e9:
         e6:ab:7b:91:5f:1d:32:79:1e:7f:07:35:82:64:40:e8:a5:6b:
         ec:55:3a:7f:f2:51:67:49:da:80:72:ba:50:62:8b:3f:c7:7b:
         f5:f3:d3:06:87:08:6e:a1:31:2e:4d:d3:b6:4b:a0:3e:da:e5:
         3d:5a:db:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:11:08 2026 by rpki-client