Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c1423aaa-a5be-38ba-8339-e6959af2fe92.roa
File:                     c1423aaa-a5be-38ba-8339-e6959af2fe92.roa (raw, json)
Hash identifier:          B8/eLhR4dNUfogPqqb6J3D1yRBoNtdvgrNsD+IRWh1o=
Subject key identifier:   D6:BE:41:09:9D:C6:61:41:E5:62:69:8E:7F:75:E2:A0:23:CF:DD:91
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D71A516262C79E069B9082DD8
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c1423aaa-a5be-38ba-8339-e6959af2fe92.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     13335
IP address blocks:        172.71.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:16:26:2c:79:e0:69:b9:08:2d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=5c5f90a3-01a3-4e66-bfb2-8af637f9dc89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3f:f1:4e:9e:a4:ac:91:4b:3d:60:97:03:77:
                    0e:a9:4f:c4:24:af:e6:0e:cb:ee:83:3d:81:19:b8:
                    38:46:9c:b8:a1:0f:0e:cb:f2:d3:d0:40:12:62:4c:
                    68:ab:9b:70:3a:1d:95:45:0c:3d:b6:c8:a0:64:90:
                    20:30:b0:0b:36:fe:63:5f:6b:d9:67:df:d8:bf:1a:
                    50:3b:ae:aa:ca:d4:78:8b:fb:af:b7:d5:56:99:70:
                    51:32:5d:c4:ee:67:56:a6:85:c3:3b:7f:c0:c5:5e:
                    7e:83:8b:e0:65:9a:dc:37:84:93:68:b2:dd:e2:b7:
                    16:ca:3f:62:ac:70:28:e4:b8:fa:74:df:1b:18:80:
                    8a:98:37:06:13:ce:15:19:dd:65:89:0f:a4:fb:46:
                    ad:8e:ca:e2:f2:c5:fa:be:c1:ef:b4:9c:a8:e3:32:
                    1d:cc:69:19:ca:90:94:fa:c1:64:38:9c:12:df:64:
                    5a:2c:0f:ca:45:7d:dc:32:24:87:e0:4e:d4:83:51:
                    58:e9:98:bd:f6:ea:86:59:0c:b7:2a:44:04:bb:3b:
                    d8:52:ee:db:c7:9b:0c:76:ef:3b:39:86:ce:ff:2a:
                    87:84:a2:56:13:40:15:b4:d0:ad:9d:81:3e:2c:46:
                    e1:a8:0d:e9:aa:f4:1b:1b:0d:ee:cb:68:5c:8d:aa:
                    8c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BE:41:09:9D:C6:61:41:E5:62:69:8E:7F:75:E2:A0:23:CF:DD:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c1423aaa-a5be-38ba-8339-e6959af2fe92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:f2:14:03:8e:30:69:e2:35:2f:d2:3b:ca:e9:b1:be:51:93:
         71:43:7f:f4:11:0f:6f:f5:1c:53:70:c6:fb:03:a0:ef:6f:8a:
         9d:29:3e:3c:f8:e0:ba:83:a1:bf:76:f4:13:e3:86:d8:a8:b2:
         cd:6a:21:38:db:b0:1d:e8:e2:33:ae:d0:b6:6c:6d:d2:8c:d8:
         bf:73:19:50:bd:68:ed:42:12:9e:fb:eb:55:d8:a3:fa:ea:93:
         61:4a:13:b7:ec:d8:48:b1:19:66:16:68:59:ae:a3:e2:e4:52:
         96:fa:76:d9:54:cf:11:a1:04:4b:6a:18:e8:bc:51:76:1e:33:
         b5:8d:33:c6:78:27:b2:31:7e:c9:c4:af:1a:d6:a7:08:c8:3f:
         26:32:b8:f0:0b:30:65:94:37:cb:65:29:35:8e:70:73:ed:c4:
         71:82:3b:32:5e:f5:94:1f:90:d2:cd:85:2c:36:d6:ce:af:42:
         59:e9:6c:b1:96:fe:08:f7:8a:b2:6a:13:e1:40:13:5f:b2:53:
         42:3a:0d:86:c0:02:51:23:b0:07:79:ab:de:ed:d5:6c:0f:90:
         e9:58:e1:bf:26:48:5a:27:2a:7f:75:e7:cd:7c:66:06:06:d1:
         81:3b:ec:2d:f2:49:41:0b:49:4a:84:5d:bc:60:f2:91:b9:28:
         9a:0e:05:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:21:05 2026 by rpki-client