Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d256c363-2394-35a3-93f5-1fc81543eba6.roa
File:                     d256c363-2394-35a3-93f5-1fc81543eba6.roa (raw, json)
Hash identifier:          nFxwHNLFgekCr7+sbEOVnZ39VtEGzKubtWznDDnVMuU=
Subject key identifier:   27:94:AA:BE:22:1A:24:FB:33:EC:91:E3:29:2D:BB:3D:C8:29:94:20
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EA6FA0A2A760F5A8F2A142400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d256c363-2394-35a3-93f5-1fc81543eba6.roa
Signing time:             Tue 28 Jul 2026 20:16:30 +0000
ROA not before:           Tue 28 Jul 2026 20:16:30 +0000
ROA not after:            Mon 26 Oct 2026 20:16:30 +0000
asID:                     14789
IP address blocks:        172.70.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a6:fa:0a:2a:76:0f:5a:8f:2a:14:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul 28 20:16:30 2026 GMT
            Not After : Oct 26 20:16:30 2026 GMT
        Subject: CN=91659f1b-5a0a-4e2a-857a-c6a58aaf025f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:be:d5:70:89:f2:e1:62:38:f5:42:9e:6f:a0:
                    f6:28:64:66:43:84:0d:5c:ae:cc:b5:70:c6:d5:78:
                    fd:d6:0a:28:e9:17:0f:b7:45:f9:33:d1:a2:60:3a:
                    b0:38:9a:53:7c:cc:0d:93:91:f8:3b:a5:aa:a6:12:
                    68:98:5d:c5:42:68:88:d8:93:d8:7c:84:9c:4b:23:
                    f7:84:7f:28:89:0b:b0:5d:20:05:3e:0f:ec:65:32:
                    86:34:98:19:72:2d:a3:29:a3:a0:2a:02:c5:9e:b8:
                    09:48:ea:8d:7d:a3:ef:af:a3:35:f2:f7:5d:20:12:
                    07:11:3b:5e:09:c1:c5:0e:db:43:af:a3:cb:c8:c4:
                    3a:1b:cc:1b:60:9f:2b:34:30:8e:cc:2b:dd:e8:02:
                    51:7f:2d:59:9f:07:9b:d7:b8:db:be:99:2e:04:3d:
                    df:14:62:dd:a6:c6:5d:13:78:a8:a0:03:91:40:e2:
                    54:b4:c2:bb:47:ac:7d:5c:0c:16:ee:06:f0:a4:d0:
                    98:57:58:db:94:44:72:f8:7c:c8:6d:f7:1a:06:91:
                    67:4f:ad:29:ee:a5:8d:93:16:28:38:ab:0c:4b:dc:
                    59:08:f3:ad:6b:f1:60:8f:50:fa:36:90:8d:97:00:
                    6d:b3:e9:c0:43:42:46:54:03:f0:ea:30:37:9c:84:
                    25:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:94:AA:BE:22:1A:24:FB:33:EC:91:E3:29:2D:BB:3D:C8:29:94:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d256c363-2394-35a3-93f5-1fc81543eba6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:ad:06:f1:75:53:fc:92:7b:cd:e0:85:92:03:20:fd:63:53:
         7e:29:7e:03:ad:27:76:7a:c8:49:cd:59:06:55:a4:eb:14:2e:
         4c:31:3f:25:b6:e6:66:4d:8d:1d:d4:cc:58:09:64:21:87:e2:
         78:a5:6a:12:15:be:67:0a:50:47:05:c6:4d:fa:04:25:3f:3f:
         5c:64:9b:28:0a:d6:5f:e8:a7:1b:a9:cd:2e:db:62:0b:c1:6e:
         de:28:7a:72:0c:dc:de:98:8e:9f:19:a7:8a:ec:70:30:1e:dd:
         64:05:81:0d:dd:02:df:c2:0c:b5:67:0c:7e:61:ce:89:c5:03:
         80:4e:5a:ed:27:11:ac:7b:c8:a8:44:e6:bc:b7:b8:37:e8:37:
         cb:bb:34:e3:a4:dd:bd:b6:67:0a:76:d9:44:5e:04:52:0a:ca:
         91:ae:a8:70:dd:b4:30:81:8d:a6:64:9a:24:58:69:85:c7:c7:
         23:98:a3:80:42:d1:db:8e:4c:99:09:ab:55:6c:2b:df:76:1f:
         8f:22:60:c3:42:7c:f6:a9:b2:14:f0:92:e0:aa:e2:12:94:bc:
         96:5f:a6:e7:a7:15:6c:1d:45:e9:bf:95:cf:00:b3:b0:b6:79:
         bf:5e:83:14:02:0b:0c:38:bf:5e:41:ac:dd:d3:e2:31:28:d1:
         a3:e9:17:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:37:09 2026 by rpki-client