Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b97fa9f1-4926-3f82-950b-d8cb064bad60.roa
File:                     b97fa9f1-4926-3f82-950b-d8cb064bad60.roa (raw, json)
Hash identifier:          Ma9TyDnU/TIBrCDFP8ty0tprisPEZWZp9w4xBfXmRSY=
Subject key identifier:   E4:0F:CA:FA:BF:3F:36:28:99:2F:94:37:C1:FC:7C:84:C3:C1:46:81
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D71A51E449D4BD70B75A880C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b97fa9f1-4926-3f82-950b-d8cb064bad60.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     13335
IP address blocks:        172.70.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:1e:44:9d:4b:d7:0b:75:a8:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=98f99023-cf7c-40b4-820a-053e14d5e6f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:51:e9:f7:af:ca:f2:3c:4e:1a:d6:ff:cb:08:
                    e8:9a:c4:f0:78:df:18:3d:61:ab:3e:90:68:47:1a:
                    c4:d5:97:f6:d2:d0:1c:92:71:06:62:82:9e:89:3b:
                    be:35:4e:98:c0:b4:78:d2:6f:33:91:70:23:de:f0:
                    27:0c:37:a1:83:07:e1:c8:e4:af:40:f0:a4:d9:bf:
                    81:dc:4c:4c:0e:46:7f:5a:22:9a:53:01:57:01:1c:
                    98:75:98:aa:5c:5f:77:96:66:31:59:e0:83:21:b2:
                    0e:11:6d:1c:a5:6d:33:80:e2:88:6f:b2:9d:32:a9:
                    72:ab:7e:39:93:ea:e1:b1:21:c7:eb:8c:34:d0:8b:
                    85:a6:9d:94:a9:69:1e:4e:4f:89:e2:31:ff:7f:9f:
                    e5:2e:21:1e:d1:03:6f:73:02:f7:51:1e:6c:b4:29:
                    40:06:f8:6b:a4:30:db:ff:73:a3:5e:67:c0:94:59:
                    2e:b0:f7:70:bd:1d:c6:6a:c1:ee:90:ef:76:a5:d7:
                    34:1d:61:15:b4:6f:de:c7:41:f9:23:97:d0:68:db:
                    58:51:72:ee:06:e3:9d:29:82:b9:7b:4f:d3:6b:9d:
                    71:ec:33:63:a1:99:c0:29:e1:2a:ed:02:6a:f4:0f:
                    91:0b:32:e2:63:c6:e8:0d:eb:38:0b:3b:d2:85:5e:
                    ea:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0F:CA:FA:BF:3F:36:28:99:2F:94:37:C1:FC:7C:84:C3:C1:46:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b97fa9f1-4926-3f82-950b-d8cb064bad60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:8e:e5:66:0e:80:71:db:f2:62:33:31:64:72:f7:7a:4a:91:
         73:b8:46:49:ed:78:cb:e4:40:72:22:ad:c9:2e:df:f3:43:4c:
         e5:0a:24:3c:09:79:53:31:12:5e:01:e6:b2:0b:b0:8c:c6:2c:
         a5:d5:f2:67:11:9f:c4:30:1f:bc:0e:48:3a:0f:f2:12:cc:5c:
         cc:28:53:47:33:29:d3:cf:9f:22:91:b2:84:0c:04:66:2f:b7:
         6a:fc:66:21:ca:88:cb:15:79:82:8b:1b:fc:87:33:87:d4:9b:
         dc:83:e4:0c:0d:43:6c:4e:c8:6b:62:a2:33:19:7d:20:8d:96:
         d1:9a:44:db:d8:a0:a2:0c:4c:e2:55:92:38:c5:76:d5:89:75:
         c2:7b:12:b3:09:df:f3:65:bd:42:61:1d:57:1f:0d:f6:7f:fc:
         e2:2a:3b:17:d3:e2:2e:00:c9:7f:88:9f:60:b3:ad:90:ab:12:
         9e:a7:18:47:45:22:f0:da:42:cd:58:b1:ff:f7:1a:d2:29:58:
         e6:68:19:08:51:9c:f8:aa:6b:b3:02:e5:7c:16:6f:4f:e6:87:
         ba:ef:ab:49:f9:a5:05:8f:85:1d:7f:1f:60:e5:92:0e:48:27:
         6e:c3:3b:d6:b2:5f:99:2f:e2:62:f1:a5:30:3b:83:96:09:dd:
         81:3b:c6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:23:37 2026 by rpki-client