Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d6ea2e5c-0e7b-358e-b84c-683609773ffb.roa
File:                     d6ea2e5c-0e7b-358e-b84c-683609773ffb.roa (raw, json)
Hash identifier:          ZUNyBsxVHWth8uGrVLyPjDQBCWpeBcgJrLGHO72SlVk=
Subject key identifier:   8A:8C:14:97:EB:46:02:86:30:F7:67:18:F9:71:F7:0E:2F:09:19:13
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EE42336AF36713A2544199C80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d6ea2e5c-0e7b-358e-b84c-683609773ffb.roa
Signing time:             Wed 19 Aug 2026 18:03:46 +0000
ROA not before:           Wed 19 Aug 2026 18:03:46 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:36:af:36:71:3a:25:44:19:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 19 18:03:46 2026 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=663c7e69-ae8f-49d0-ae6d-6cc200ee9b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9d:68:00:75:bd:f3:46:30:3b:ab:1a:83:95:
                    81:d6:14:4d:bc:76:bb:2c:00:e3:dd:ce:fc:6a:1b:
                    3d:97:cd:95:73:3f:f8:78:c0:34:8a:a1:24:43:33:
                    8f:fc:c7:a2:2f:8a:76:e7:bb:f7:b8:df:bc:18:00:
                    34:38:42:a4:32:58:12:ea:b9:9d:35:eb:ad:4c:6d:
                    86:30:2a:2b:15:ae:a3:cb:42:64:b0:a8:04:7b:f5:
                    96:99:d0:7d:2e:ee:ef:47:de:ae:e9:bf:1a:b9:dd:
                    65:d4:8c:2d:5b:a5:fe:64:e6:6d:44:4d:bd:30:fd:
                    35:b6:53:36:91:e6:aa:9b:31:c7:00:65:37:10:f0:
                    c6:fd:e6:65:63:f5:cd:86:f4:f6:f8:e5:56:0b:b3:
                    63:72:3b:55:f7:c4:f7:47:47:ae:f8:11:27:08:a1:
                    6b:2e:a7:d6:ed:6e:e5:93:03:1b:65:b4:d5:70:3b:
                    f4:30:64:fd:ce:0b:31:f9:28:21:4c:22:e5:fb:6b:
                    a0:d1:45:c1:99:5a:4b:a1:f7:ba:ff:f7:87:49:e9:
                    60:67:14:e5:e9:51:98:a1:bc:c9:87:66:da:04:56:
                    d9:e3:46:64:21:23:8f:ca:be:aa:40:f8:d0:a7:9d:
                    90:d4:7f:aa:0b:46:5a:9e:9a:a6:6e:1e:00:a4:ef:
                    d9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8C:14:97:EB:46:02:86:30:F7:67:18:F9:71:F7:0E:2F:09:19:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d6ea2e5c-0e7b-358e-b84c-683609773ffb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:2e:dc:86:e7:e5:8e:fb:3a:c3:7e:99:77:00:3f:bb:31:3b:
         50:01:fc:e6:cb:fd:9e:bc:e1:38:bd:7a:ce:97:61:56:64:d4:
         8e:b7:9d:4c:cc:44:48:37:af:da:72:0c:58:3e:68:f9:79:96:
         16:b5:dd:ec:59:d4:53:6d:08:14:d4:a7:4e:2f:5d:3a:ac:ce:
         6d:5a:f0:c1:65:73:65:d3:50:d4:6b:cf:2a:fb:a9:87:a4:cd:
         10:37:ae:35:25:b0:69:ff:28:94:ed:1e:17:b0:30:72:b8:43:
         6f:02:4b:7a:32:23:b6:d0:6c:b8:94:c9:3f:33:8e:ce:f5:9c:
         57:a1:80:f3:84:af:00:ca:ae:82:e5:59:1b:5f:c5:98:dd:f3:
         fc:df:a5:af:fa:a7:4a:de:bc:59:a6:fd:e7:24:e7:9b:8c:c7:
         7f:ca:fe:31:fd:de:72:1d:b1:b2:6f:80:c2:be:fd:6a:27:3f:
         12:0e:35:a0:1b:d2:7e:e3:cf:a2:77:fa:f8:76:17:7a:04:4d:
         d6:f4:4e:db:2f:e4:f4:e2:50:b3:26:3d:34:28:2e:e0:8b:b0:
         23:2b:84:c8:b8:ed:b3:e0:de:27:4f:dd:7c:56:9b:09:ed:50:
         1d:37:12:15:fc:ec:1f:84:ad:46:c0:13:95:47:8d:6e:83:3c:
         5e:57:8e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:44:59 2026 by rpki-client