Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/db3a0f3b-6e5d-36d5-a182-680c2591b176.roa
File:                     db3a0f3b-6e5d-36d5-a182-680c2591b176.roa (raw, json)
Hash identifier:          kmia55eD4nO7BZUEsxiSFk/b/LdKo/DiVTk1jSiNEEE=
Subject key identifier:   BE:F4:D1:90:E5:0A:43:06:7B:7D:28:10:E8:15:BF:A8:35:9B:4A:AD
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EED522A006ECFC38B1ED7BAA0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/db3a0f3b-6e5d-36d5-a182-680c2591b176.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        172.64.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:2a:00:6e:cf:c3:8b:1e:d7:ba:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=b6136ec4-2e05-4aae-8bb9-32621309e4b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:22:57:a1:0c:67:d7:18:ae:c4:b3:57:84:b7:
                    11:37:f4:bb:c5:a3:7e:09:6d:cc:95:24:4c:3a:49:
                    d0:e1:e4:e8:6b:b5:03:30:cb:5f:4a:92:e7:ae:1c:
                    e3:c0:cb:f0:fb:e7:fc:c3:ec:00:81:eb:f4:01:dc:
                    a7:88:01:f9:ad:56:bc:ca:da:e9:c0:10:38:df:cb:
                    2f:f3:6e:ec:48:84:03:f8:56:de:dc:fb:01:53:d4:
                    94:3d:cd:0c:98:65:55:e5:a4:98:5c:02:ca:14:1c:
                    dd:06:f8:92:5a:b3:ed:13:bd:c5:e8:a7:03:4e:93:
                    9e:89:fb:0e:94:9e:6b:64:1a:ae:93:70:ed:93:b3:
                    3a:10:1b:4e:41:23:ea:62:01:7c:27:42:ea:b5:95:
                    1e:6d:3f:32:ae:7c:a0:c7:ed:63:2b:5b:54:60:fb:
                    cb:ec:8c:ff:b1:84:a6:e5:37:99:42:8e:93:0c:28:
                    3a:d0:55:c0:b8:b9:66:90:e3:01:f1:65:1a:b2:dd:
                    eb:4c:aa:31:3a:aa:40:65:d7:e6:68:ba:1c:61:af:
                    f9:2f:b3:b0:40:c7:b9:b7:a1:7a:9d:1e:fb:f9:ba:
                    54:03:0e:8c:39:ae:01:f7:14:f0:99:c2:b6:9d:7e:
                    23:14:30:12:a9:65:e2:f5:5f:2a:37:69:9d:fa:10:
                    6f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F4:D1:90:E5:0A:43:06:7B:7D:28:10:E8:15:BF:A8:35:9B:4A:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/db3a0f3b-6e5d-36d5-a182-680c2591b176.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:cd:ab:b4:63:96:e3:7e:c5:ba:48:1c:5f:8b:4b:23:06:c5:
         2d:69:8f:7a:ea:4a:47:3f:b0:d8:ac:0d:05:f5:21:05:fe:f5:
         29:75:2a:f5:37:3a:f5:30:d0:e8:43:3c:95:90:c8:61:6a:e9:
         e1:09:4d:62:18:a8:86:3f:22:fc:e9:09:31:51:d8:10:b7:7e:
         eb:1d:79:0d:13:83:6d:33:b0:cd:44:a5:ee:75:38:66:69:93:
         38:cf:df:b5:42:23:11:06:a0:c7:3c:a3:46:8e:36:f1:18:cd:
         ad:0e:46:58:bd:7e:22:e5:c0:46:7f:30:14:ea:55:7c:0f:ac:
         8d:2b:89:bf:d3:9d:7d:df:70:cf:0d:4e:f8:ab:e0:cc:39:e1:
         45:0d:a8:58:ae:6b:02:34:92:df:11:a9:c8:b2:db:3b:32:b1:
         93:01:76:40:7c:4f:74:bb:9f:0c:71:c6:55:9b:ff:c4:04:bf:
         e0:6f:b0:1f:50:2e:b0:7a:f5:90:c7:c6:22:5f:67:cb:e7:40:
         82:fa:bb:9b:f2:dc:3a:2c:f6:07:35:c0:20:ed:e6:d9:81:a8:
         57:35:e1:18:c0:09:de:1f:b8:01:91:33:e3:f2:bf:4d:4b:9d:
         24:92:9e:20:e5:39:5d:40:4b:2f:e1:bb:ee:5b:d8:2b:bb:1d:
         43:5e:0e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:18:15 2026 by rpki-client