Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c166eda4-c16d-36dd-a409-e770bbd739ed.roa
File:                     c166eda4-c16d-36dd-a409-e770bbd739ed.roa (raw, json)
Hash identifier:          fpmj1e0aPb9zksD5NVrvbK4JoxAX/PmjX//NG9Xx72o=
Subject key identifier:   F1:0A:21:F4:66:A1:96:2A:A5:47:0D:0C:00:E8:FE:1F:A2:3A:AF:EC
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D67DFE7A67234BA1F58B554A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c166eda4-c16d-36dd-a409-e770bbd739ed.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     13335
IP address blocks:        172.64.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:e7:a6:72:34:ba:1f:58:b5:54:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=6a3f29ff-b684-4bc8-bbdc-a26e6559c405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:67:71:2a:20:2a:bd:32:f0:09:c3:c2:c7:9d:
                    07:3d:bd:7b:50:cd:b5:ff:6d:ac:5e:7f:55:3e:f3:
                    14:cf:e5:5f:8e:58:82:1f:e5:c1:ea:9d:3f:2a:39:
                    48:44:b7:9b:73:2b:17:6b:06:68:a8:f6:f0:7f:6a:
                    a4:3a:8a:ad:ec:8e:99:de:d9:2a:68:82:dd:96:50:
                    f9:b5:e9:16:bd:d0:14:e7:35:6c:e1:46:86:e9:c5:
                    c2:80:e2:80:de:a0:fb:3e:a5:9e:9c:89:9d:81:4e:
                    fc:9b:10:ea:e8:6d:c6:33:67:46:29:f3:5e:1c:e9:
                    b6:1a:e9:ca:8c:a1:98:c0:a0:13:db:54:5c:7a:25:
                    50:e8:79:87:ea:e4:db:6e:43:69:c6:57:41:32:bd:
                    1d:28:55:3f:c1:6e:3f:e6:25:67:9f:d7:b6:88:91:
                    0f:c1:82:c5:88:1f:90:48:65:27:de:34:e9:44:95:
                    2f:04:db:10:b3:99:0c:22:06:f9:1e:09:cc:f8:42:
                    54:9d:3e:6f:8c:6c:fc:bd:35:88:76:62:e5:be:81:
                    fe:f4:32:96:cf:3d:cc:ac:cc:0a:05:39:0c:38:b7:
                    c2:4f:35:b6:62:a7:d2:1b:4f:50:9e:19:9a:5b:b2:
                    df:ba:59:4d:38:44:8c:9f:e4:c1:53:5a:1c:4c:21:
                    c5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0A:21:F4:66:A1:96:2A:A5:47:0D:0C:00:E8:FE:1F:A2:3A:AF:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c166eda4-c16d-36dd-a409-e770bbd739ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:3d:64:56:88:b7:a4:ea:0e:5c:d8:ed:7b:88:d7:82:ea:4d:
         93:93:39:0e:cf:9f:c7:49:24:4a:0f:8d:89:55:7e:4a:75:86:
         02:42:d0:26:b2:a0:5d:58:9f:e0:0f:84:41:3f:20:0b:77:e9:
         cf:43:ef:dd:b8:c4:c9:db:d2:6c:fa:20:63:7a:8b:e5:bc:42:
         24:b6:b8:b1:af:83:ec:82:4c:8b:6a:01:fc:0e:8c:bb:5c:4f:
         c0:ee:21:ac:ff:d9:49:6b:2f:2c:aa:9e:eb:37:e4:32:d4:22:
         b6:2a:2f:dd:a1:57:db:c9:38:c5:91:f8:aa:4c:5a:f7:39:e7:
         61:b4:59:8c:4d:8e:34:34:78:8b:31:4d:5b:85:84:c2:9d:f4:
         6b:0a:96:bc:42:01:38:5f:6e:cc:b2:fc:cc:87:73:74:71:5e:
         6b:fa:9e:61:7e:49:27:ea:49:a0:10:86:43:7b:06:94:c2:b0:
         43:4e:47:e4:73:6a:24:74:30:6a:03:4b:e2:d2:eb:02:76:bc:
         fe:12:9c:3b:be:08:54:cd:d3:96:67:3b:28:88:20:ae:59:96:
         14:39:e4:dc:b6:c8:73:49:ef:a6:86:04:2c:b2:98:a2:45:29:
         71:71:ae:34:1b:30:42:d6:f5:83:06:b6:98:b0:fc:7c:23:b9:
         1e:1b:b0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:01:27 2026 by rpki-client