Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b6bff0c1-2c68-301a-9738-0d25090c6a37.roa
File:                     b6bff0c1-2c68-301a-9738-0d25090c6a37.roa (raw, json)
Hash identifier:          KqBPE5lF4GmwDP4VVCxNJr3Ht7HmmAmd5LX0b3PDe9I=
Subject key identifier:   C7:69:B5:95:BC:1B:AC:4A:EF:08:B7:3E:A1:89:F3:EE:EC:13:4C:90
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D6C0FD40549CA7E5A0F840C00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b6bff0c1-2c68-301a-9738-0d25090c6a37.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     13335
IP address blocks:        172.69.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:d4:05:49:ca:7e:5a:0f:84:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=e85ae175-993c-4ae1-b6b0-4297b7c1f78b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ed:98:df:35:8e:8e:0a:7a:bc:13:be:67:b9:
                    69:dc:32:cd:e6:bc:80:79:fc:67:dd:ab:8c:a1:ac:
                    86:24:25:34:74:52:c1:5e:37:a9:7a:9c:32:8e:ed:
                    58:71:54:2b:57:db:48:c4:f7:a9:09:3b:14:44:bb:
                    75:f6:1e:2f:0f:5a:88:af:30:d2:90:87:6f:01:50:
                    b6:4d:29:68:3f:c2:53:6f:bd:17:34:55:0c:17:9b:
                    3b:62:cc:c5:f6:11:15:11:8e:4b:95:14:b7:a5:7f:
                    aa:3a:71:37:4c:81:bf:4c:75:98:52:73:15:a0:4e:
                    59:55:99:8f:73:c1:1f:4e:0e:68:6d:e2:61:7e:9e:
                    30:d5:05:bf:55:57:49:79:ea:fa:75:9d:1e:2c:70:
                    c7:d9:34:58:0b:76:36:1a:7e:31:1c:9d:6b:7c:86:
                    e4:cc:88:e6:b7:62:3a:0a:f8:15:7e:73:26:9a:2f:
                    92:eb:3e:e9:f7:a4:5d:ad:58:b5:18:d0:02:53:16:
                    97:fc:8a:47:c1:7e:b3:70:d6:3c:21:01:53:2e:be:
                    22:b1:43:aa:5e:64:c5:cc:7b:73:0f:64:03:9c:ad:
                    c5:47:ca:c7:09:0c:b5:ba:dd:c0:b1:66:19:42:11:
                    69:3c:98:7d:05:76:66:00:a8:a8:f2:6e:81:d3:91:
                    e2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:69:B5:95:BC:1B:AC:4A:EF:08:B7:3E:A1:89:F3:EE:EC:13:4C:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b6bff0c1-2c68-301a-9738-0d25090c6a37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:8c:e3:76:e8:bb:46:0b:ae:31:89:de:23:39:c3:80:cd:44:
         8a:d2:c9:0b:be:53:56:52:8d:27:4e:26:1e:60:8f:a1:75:3c:
         d3:2e:d7:76:80:ac:99:6a:fc:5e:b8:04:74:ad:2f:02:2e:6d:
         38:fc:bb:91:dd:88:a4:b8:ee:1a:81:3a:ba:cc:cc:22:99:dd:
         62:69:fd:71:ac:12:fc:37:fa:b9:7b:17:3f:7d:46:85:4f:66:
         d3:69:b2:3a:65:a9:9e:f5:0e:40:bf:e4:9d:5b:40:a3:c4:a9:
         13:55:dd:b1:4f:b5:ce:73:03:e3:d3:a2:b6:b1:73:24:46:4e:
         9d:35:88:b4:54:2b:f3:d8:3c:f6:ef:09:e0:fe:b8:67:0e:1b:
         ae:b0:84:c0:8e:e6:a9:96:f7:1b:32:d0:77:82:e9:29:97:09:
         de:7b:8f:b7:77:c5:74:19:b4:8b:6a:58:41:cc:10:3c:6c:a5:
         09:02:21:e3:3f:3f:36:31:5f:ce:0c:08:69:02:73:e3:76:12:
         b6:5f:bf:04:ef:be:29:d3:35:f9:25:5c:cc:37:67:01:16:e3:
         1f:f2:9f:14:40:b5:14:1a:3d:b1:11:37:5c:43:c6:21:64:f8:
         5c:e3:a7:0c:ea:a6:da:ab:bf:82:92:d5:35:75:ac:bd:15:62:
         b5:54:8d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:44:52 2026 by rpki-client