Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e962e39-33d9-3e02-bab7-24bed439b9b4.roa
File:                     9e962e39-33d9-3e02-bab7-24bed439b9b4.roa (raw, json)
Hash identifier:          gMnbx3hcBEDHR6370lQ2N66rxa21KEvvU9T36xX9/Ec=
Subject key identifier:   1C:36:BC:A2:D8:68:21:2E:56:DD:7D:CA:BF:B7:80:D1:8D:70:86:29
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D67DFEFD521D5B70D51355340
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e962e39-33d9-3e02-bab7-24bed439b9b4.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     13335
IP address blocks:        172.71.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:ef:d5:21:d5:b7:0d:51:35:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=e7e80105-5cd7-4695-979f-fdcb431a948b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1b:14:1a:56:0d:73:48:5f:31:eb:83:05:16:
                    8e:ed:d7:ca:ff:b2:b2:4e:24:28:03:af:5e:af:c8:
                    d8:25:8f:62:e0:47:e7:c6:01:35:0c:50:9a:7b:d3:
                    af:5b:1a:4a:05:95:d5:49:7e:09:9a:1a:df:5b:67:
                    dc:bb:4f:8d:06:6b:68:67:82:ac:ba:e5:fd:cc:c5:
                    cb:73:af:67:22:f6:c1:d6:69:00:d1:3b:55:8b:4d:
                    84:cc:ef:03:58:8b:5d:61:7b:d9:71:bf:df:3a:cb:
                    5c:59:1f:f7:54:70:44:bb:e0:d5:5c:f2:f3:4f:ed:
                    c5:2a:3d:1d:1d:ea:e9:62:52:f4:4d:ff:8c:49:bf:
                    8c:7b:9d:a7:2b:fd:2b:c7:3a:58:b3:0f:00:06:f2:
                    ec:80:25:5d:0b:b8:4f:04:a3:5e:58:a0:d5:64:f3:
                    17:57:70:d7:ce:92:92:04:a2:b9:70:46:cd:f8:94:
                    bd:9b:ed:49:17:1a:df:0f:e9:03:7e:a2:ac:df:59:
                    ff:6a:26:ec:09:29:f8:3a:bb:44:5b:5a:6f:b4:de:
                    f0:2c:83:8b:35:a8:14:85:51:d5:99:f6:e2:72:27:
                    7a:8a:84:24:a4:b3:b8:76:1c:32:e9:fa:1c:eb:fb:
                    8d:bf:54:54:d8:fa:3b:7d:89:0d:35:31:88:21:50:
                    e8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:36:BC:A2:D8:68:21:2E:56:DD:7D:CA:BF:B7:80:D1:8D:70:86:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e962e39-33d9-3e02-bab7-24bed439b9b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:bc:7b:bf:34:50:2d:9a:d2:d9:3e:0e:e6:80:5d:d2:1c:0f:
         53:bf:95:17:a6:26:f8:65:68:ba:47:8a:a2:24:7d:83:42:ba:
         88:4f:ba:0c:31:f6:05:9f:8d:bd:8a:1f:a2:52:aa:7f:af:1d:
         77:31:7c:b6:97:d3:ff:17:49:c1:88:8a:a6:ce:02:70:5e:18:
         c0:41:23:46:02:03:d8:d2:1e:64:96:4c:7b:08:59:03:5a:b7:
         d8:56:4f:5f:a9:76:c4:70:7e:e5:c2:ab:3b:0a:aa:ab:7a:ea:
         08:94:b5:e0:cd:e2:de:e1:23:47:d3:02:7c:74:cc:24:ac:2b:
         a9:d5:70:a6:a6:36:96:80:fd:2a:59:09:50:49:db:9e:eb:32:
         f9:c8:5a:a1:7c:52:5a:23:ef:fc:9c:10:6b:87:28:19:cc:11:
         28:30:27:2b:7a:47:83:6e:41:8f:8e:05:58:34:b2:af:7e:49:
         36:39:8b:9d:43:19:8f:b2:c9:e9:4b:59:ee:fb:37:82:ba:01:
         0c:ae:e9:0e:5f:31:84:08:91:86:45:e0:4e:57:1c:f1:66:fa:
         3c:11:fc:b8:c4:bf:12:7c:e6:3f:1b:38:0e:30:72:43:80:a9:
         90:88:d0:71:e6:ea:8e:63:04:40:94:0e:8d:27:24:df:6e:85:
         79:8a:2f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:04:27 2026 by rpki-client