Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b03d6cb0-599d-378e-990f-34751b70d79f.roa
File:                     b03d6cb0-599d-378e-990f-34751b70d79f.roa (raw, json)
Hash identifier:          7nx+LehCEOWkBGHRE7xcNY8heYe4cVQOWkNKEPzJAwU=
Subject key identifier:   74:45:12:FD:52:CB:54:14:91:89:2E:B1:59:9D:77:91:C9:D9:DF:4B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D71A5177EF9398A2BAFBABF80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b03d6cb0-599d-378e-990f-34751b70d79f.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     13335
IP address blocks:        172.71.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:17:7e:f9:39:8a:2b:af:ba:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=3f91b666-6c6b-4910-9576-3ea261620e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:91:5b:58:c5:96:47:74:83:ef:d2:53:f7:42:
                    12:82:08:70:ac:68:b8:85:54:36:74:c5:a7:ab:2a:
                    81:46:62:ff:59:ab:10:8a:8c:ed:6c:9b:b0:3b:ea:
                    74:8d:8c:47:05:bc:75:59:4c:d1:4d:4c:27:c1:b5:
                    a2:60:42:33:bc:93:b7:ec:f6:e1:a6:f3:9b:76:26:
                    09:c9:ea:d8:fc:b6:5e:da:82:93:2f:65:ca:e4:3a:
                    5e:ba:9a:89:78:f6:07:6e:40:53:a4:25:e5:ec:3a:
                    17:0a:02:cf:8e:f4:d9:03:87:1c:8b:00:dd:e5:81:
                    c6:45:8b:84:71:02:b6:99:25:42:ae:d0:78:9c:6a:
                    5b:30:dd:61:b2:f6:b5:93:45:bb:e0:8d:80:a9:23:
                    51:6c:30:89:e1:7c:a5:fc:ec:b1:ed:3c:b5:79:d7:
                    b5:f4:25:48:43:3c:72:8d:4a:67:ee:fb:53:c0:e5:
                    43:46:87:5f:47:d2:8a:17:aa:cf:a9:0e:21:7e:51:
                    49:f8:55:bf:f4:8e:6a:33:23:93:d5:b7:d5:7b:a6:
                    55:3c:01:ec:00:2e:aa:bb:42:c1:40:b5:ec:50:d8:
                    7f:4c:a5:dc:9f:6c:3c:7f:6a:99:31:52:68:69:15:
                    bb:79:a9:cb:89:34:d2:f2:ba:f2:98:a5:1c:35:a9:
                    b2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:45:12:FD:52:CB:54:14:91:89:2E:B1:59:9D:77:91:C9:D9:DF:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b03d6cb0-599d-378e-990f-34751b70d79f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ba:3c:d0:d2:05:0f:06:a4:b2:56:24:c1:f9:a3:b8:35:dc:
         f8:19:13:ab:21:c9:c1:10:36:2f:c1:10:92:7f:29:39:3f:98:
         c7:f2:88:8f:ed:55:27:2d:74:58:f0:7b:63:f0:1b:fe:3a:9b:
         4f:a1:a0:18:9e:b3:cc:16:a0:88:5b:62:9c:e7:f5:66:26:2a:
         00:f9:2d:26:f5:8b:3d:6d:8c:ab:8b:3c:13:fa:42:e5:0d:43:
         a9:a8:7d:5d:24:46:cb:84:5f:14:ec:ad:c8:74:b0:d7:76:be:
         bf:ee:5a:e2:3f:13:9e:c9:5b:1a:5d:a7:0e:d8:25:bd:e8:f7:
         24:08:af:7a:68:3a:26:00:04:96:84:f2:10:27:92:b3:63:f7:
         81:db:f7:c4:8a:df:af:30:4b:1b:c6:83:24:87:bc:75:4a:01:
         c4:1f:11:98:b3:c4:f4:14:ef:cd:34:4b:1e:6e:3c:5a:89:d6:
         93:0e:98:16:17:30:94:94:f0:4a:8e:f2:c1:9f:77:7b:93:b0:
         bd:16:35:95:46:a0:9f:0b:dd:17:f9:26:bb:ca:5c:4d:0b:31:
         30:b4:1d:55:d0:b4:01:ad:26:1f:30:45:e0:1b:2b:58:01:09:
         ca:21:79:e0:86:e2:bf:44:40:ae:c9:c5:1b:d0:e1:38:a6:7c:
         d9:26:74:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:07:41 2026 by rpki-client