Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2f6bf98-fb87-3327-b0de-18d2fb350190.roa
File:                     c2f6bf98-fb87-3327-b0de-18d2fb350190.roa (raw, json)
Hash identifier:          vVhvyc83KpGOOATRhRM0gDwgju/VQf/1N2p1nXLUWmc=
Subject key identifier:   CC:5F:9F:79:CB:0A:E2:50:2D:17:13:04:9F:D4:2B:3A:21:8B:42:23
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEA876CD27983E6BEDF6D1689
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2f6bf98-fb87-3327-b0de-18d2fb350190.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        172.71.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:6c:d2:79:83:e6:be:df:6d:16:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=61c31d7e-f68d-4d21-9d9b-f3ba1154e3dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b1:e8:4e:be:2f:d0:e1:88:76:ad:24:95:e4:
                    ed:5d:ac:bb:11:bb:06:46:28:e8:12:de:9a:46:82:
                    64:c4:ce:11:ca:31:e2:70:9d:44:ea:b8:79:62:f6:
                    d3:d6:e6:d3:bb:eb:35:0d:b9:e8:22:ce:d0:11:25:
                    b3:b1:2b:08:10:87:35:24:6d:bf:3c:49:3f:b6:b5:
                    58:6c:fa:50:85:38:ee:02:6d:59:ce:b2:cf:5b:9e:
                    57:32:af:79:37:0c:ac:d7:a7:86:01:e6:d3:91:f0:
                    c5:c3:9f:7f:af:a0:36:30:ad:aa:95:1a:cc:38:7d:
                    b5:60:d8:4e:ff:ac:21:07:66:e6:ac:ed:8e:13:be:
                    ef:40:ed:d9:36:2a:16:33:03:c9:bd:08:e3:52:4f:
                    c8:0e:18:0b:93:09:4b:09:e9:c3:cb:c6:48:0c:9c:
                    c2:54:41:45:1c:4c:39:0d:46:51:9f:96:a6:d7:03:
                    bd:10:74:cd:f9:c7:20:df:c3:c5:2b:76:25:8d:af:
                    89:19:48:ce:a1:46:d9:e4:20:a5:ed:fd:b5:b0:1c:
                    2a:2b:2b:6c:d5:e2:df:b8:1b:93:54:46:35:a1:0c:
                    ff:b4:d6:7e:fd:44:bf:bb:6e:df:4d:2c:d8:75:d9:
                    61:ea:ff:c3:7c:92:e0:a2:a5:6f:16:52:8a:f0:aa:
                    0c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5F:9F:79:CB:0A:E2:50:2D:17:13:04:9F:D4:2B:3A:21:8B:42:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2f6bf98-fb87-3327-b0de-18d2fb350190.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:13:22:22:19:61:8c:1e:c1:59:e0:3a:cd:13:29:31:0e:6f:
         68:f9:50:46:13:54:f8:da:cd:34:16:c2:4c:36:64:0d:d9:60:
         b2:c0:0e:e1:f9:97:d0:2e:1a:77:ac:8d:f3:d8:9b:14:4a:96:
         18:e6:9b:b4:fe:f1:1b:f7:11:f3:62:e9:c1:9c:6a:3d:c0:b2:
         ff:40:d0:f2:db:da:ab:86:1a:f4:eb:4f:15:52:9d:c5:fc:86:
         7b:75:70:d6:ed:f1:3e:75:12:48:7c:53:00:b5:bb:9e:8a:2b:
         c7:48:e6:0b:4e:9c:90:ee:f7:b0:2a:91:bf:03:3b:66:01:64:
         6f:ec:c5:51:ee:e0:66:9f:08:2b:38:cf:5a:99:56:4d:51:2f:
         f8:e5:e7:f4:27:b4:27:ec:30:1a:13:62:f5:fe:22:ed:ef:8e:
         96:19:d3:da:cb:ce:ef:6d:68:76:a5:02:97:9d:b0:ab:44:f5:
         f4:35:bf:67:57:a6:e5:31:b9:ec:21:7f:cd:5a:09:13:7a:72:
         bf:8f:96:84:9b:3e:7f:c2:73:17:ab:01:56:4a:26:ea:6f:de:
         c0:2f:9e:e2:35:72:c4:0a:32:b3:fb:d6:ae:27:43:cc:be:b8:
         e2:65:18:cd:47:e3:cb:e4:6b:b7:d6:b2:8e:8f:78:1b:b5:28:
         c9:ad:4f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:53:08 2026 by rpki-client