Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b5c5effb-7664-3b9e-aad6-47d39f4943b4.roa
File:                     b5c5effb-7664-3b9e-aad6-47d39f4943b4.roa (raw, json)
Hash identifier:          G01YfAetTGTsToMp3aEt1ftbyHWeMQG+0aeT/hwOksA=
Subject key identifier:   95:5F:EA:0A:22:53:9B:5B:6F:5B:F0:E0:BB:84:20:20:97:1A:E2:8F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584C910700FF1A8B85483BB0D120
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b5c5effb-7664-3b9e-aad6-47d39f4943b4.roa
Signing time:             Sun 18 Jan 2026 14:00:39 +0000
ROA not before:           Sun 18 Jan 2026 14:00:39 +0000
ROA not after:            Sat 18 Apr 2026 13:00:39 +0000
asID:                     13335
IP address blocks:        172.71.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:91:07:00:ff:1a:8b:85:48:3b:b0:d1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jan 18 14:00:39 2026 GMT
            Not After : Apr 18 13:00:39 2026 GMT
        Subject: CN=100e6da3-5c12-4914-9744-9db0ed9cfd2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0d:e1:d2:dc:f7:2c:9d:fc:3d:59:88:8d:32:
                    8a:9c:8a:9b:fe:88:83:48:92:4e:0d:82:88:8f:ca:
                    a4:a1:60:f5:84:1a:88:dd:96:9b:47:8c:3b:65:6a:
                    f2:7f:01:f6:6c:48:96:03:93:d8:32:4d:6e:9e:a3:
                    85:58:af:1d:72:f2:24:f0:11:6c:a5:71:b4:a5:6e:
                    c7:b4:fb:74:0a:02:59:70:a9:e4:d8:d7:83:57:7b:
                    58:e1:f5:7b:ac:46:8f:24:b0:a9:4e:99:88:54:16:
                    51:40:09:17:9f:23:d5:b5:27:d0:10:5f:49:12:27:
                    42:b1:ea:10:42:92:fc:7e:d8:e1:35:2a:3a:1f:1f:
                    07:61:d8:a4:0b:d5:ed:da:0a:dd:32:76:f5:32:22:
                    72:08:fb:7e:70:36:38:8f:d4:07:2a:d0:f7:51:03:
                    49:6f:94:de:fa:62:5f:18:10:ae:10:07:ba:b8:12:
                    54:ce:42:83:f4:35:2e:a1:f9:d9:09:03:ad:4c:fc:
                    fe:ae:b8:29:2b:70:7f:83:13:32:70:8b:5d:de:a1:
                    b3:84:cd:ad:64:fd:1e:8b:f7:43:4e:68:64:90:c3:
                    1b:22:a7:17:f1:7e:7e:4d:e9:7d:da:b0:c1:e8:fb:
                    a6:db:7e:7b:be:ff:f7:74:5c:6a:2d:b9:5c:86:86:
                    20:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5F:EA:0A:22:53:9B:5B:6F:5B:F0:E0:BB:84:20:20:97:1A:E2:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b5c5effb-7664-3b9e-aad6-47d39f4943b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:57:af:71:b7:0d:ef:ae:3f:94:90:d7:85:f0:97:8a:95:94:
         9b:25:f7:79:13:77:64:5d:98:3e:41:20:67:9a:85:5a:62:a3:
         c7:2d:5f:60:7d:a1:b9:3e:4d:73:3f:7c:04:c7:7e:60:a8:2e:
         7c:92:46:5c:d4:7e:c7:13:f5:ca:10:70:db:94:2e:84:22:7c:
         4d:9b:89:b3:bc:e9:2d:19:52:b1:5e:c9:a9:ab:1e:71:e4:81:
         e9:7b:d6:aa:a6:8d:6c:12:d4:ba:fc:c6:f7:fc:ea:86:bb:81:
         25:3e:c5:0b:bd:09:d3:79:44:8f:48:f4:4b:73:be:c6:77:2a:
         be:b2:b6:6c:cf:d9:45:b4:44:42:6d:85:08:03:b5:37:bf:1e:
         54:0c:d2:ec:36:cf:f0:38:e5:14:31:9a:0e:e8:ea:a6:1d:f8:
         da:a6:19:3c:98:c9:3b:9e:26:22:28:e4:3e:08:33:85:58:41:
         57:b6:42:22:9a:9c:11:0b:0b:5e:a8:a9:a7:c5:c1:89:3f:f3:
         e0:09:f2:44:1e:3c:9f:4f:0d:a6:bf:e2:dc:47:4c:cf:61:1f:
         70:e9:3f:9e:59:ad:57:00:7b:ca:ed:7f:2f:7e:08:de:fa:a1:
         a1:42:b1:a6:2d:ca:51:0c:39:75:4e:90:a6:8b:98:cb:31:c1:
         5f:eb:57:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:11:43 2026 by rpki-client