Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbe6af08-dc09-3608-a84d-d83ffa9e2f1d.roa
File:                     dbe6af08-dc09-3608-a84d-d83ffa9e2f1d.roa (raw, json)
Hash identifier:          Sz0xmKsMER6q1OYF7fuOtkQe1yDBbKTQhYfsVw924uk=
Subject key identifier:   00:0B:2E:9F:18:C6:21:AA:FE:4F:A5:1F:9E:18:8F:3F:B7:72:3F:F8
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D6C0FD6447506F0ED6C935600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbe6af08-dc09-3608-a84d-d83ffa9e2f1d.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     13335
IP address blocks:        172.69.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:d6:44:75:06:f0:ed:6c:93:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=d629a998-36d7-4f25-a87c-63ae98b9381b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c1:dc:05:02:df:21:c9:11:b4:02:ef:0e:7a:
                    d4:51:14:1a:4f:a7:47:f6:6c:69:5c:12:b0:17:6b:
                    84:8b:f5:cd:70:a0:f0:5d:58:f8:5e:bd:d2:33:6e:
                    99:0f:7f:0c:5d:e3:eb:34:83:02:7c:01:c8:e7:0a:
                    f5:cb:73:f6:34:55:97:1f:ef:08:03:cd:68:33:96:
                    66:5b:45:7f:88:9e:4b:f4:32:45:4d:59:ee:f1:b8:
                    dc:5f:ae:a4:04:7d:93:2d:43:d5:60:46:08:44:1b:
                    70:af:13:75:a8:52:06:dc:96:8e:8b:75:49:a5:2e:
                    43:46:b2:42:27:da:e4:24:ba:35:83:49:10:28:74:
                    74:15:25:63:6d:95:08:9c:e1:fe:3e:9a:20:b4:4b:
                    14:51:6c:74:13:f0:68:d6:c6:0c:4f:47:6d:93:cf:
                    70:45:95:14:e2:ce:69:3f:7f:87:a0:57:b1:58:ea:
                    7e:1c:89:a6:3d:1e:20:f7:07:67:2c:08:5b:15:64:
                    3c:04:cd:c8:a2:0e:ab:95:52:bc:aa:b0:8d:7b:45:
                    ef:5c:a2:e5:05:09:8e:28:0b:ed:7b:2b:a8:08:7e:
                    31:c0:81:38:42:4c:ea:26:15:04:ae:98:57:a4:a4:
                    2d:1b:f2:e0:74:e5:b0:6e:4f:19:a6:51:f3:9a:f1:
                    a6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0B:2E:9F:18:C6:21:AA:FE:4F:A5:1F:9E:18:8F:3F:B7:72:3F:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbe6af08-dc09-3608-a84d-d83ffa9e2f1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:1e:b7:55:0c:60:04:fb:3d:9b:e2:30:98:8e:d5:b9:d2:f4:
         fc:3a:14:f3:01:22:58:4d:9b:b8:c0:a2:ce:f4:14:d0:db:47:
         ae:f1:5f:0c:7d:a4:eb:c3:a0:91:89:fd:b5:f9:ea:86:e5:e5:
         18:af:70:a3:b6:e7:50:23:88:61:bc:49:fc:dc:cc:87:47:b5:
         b4:00:89:b4:b6:ed:e6:94:ce:49:99:99:c4:82:8a:e5:ef:56:
         17:50:8e:b1:26:6c:b3:fe:0c:52:a6:7f:9c:a8:10:ab:d8:03:
         07:fd:07:1b:f4:c1:56:41:58:bf:5a:09:72:d7:28:63:3a:42:
         a7:58:29:3c:ce:33:8b:1c:c8:37:f7:cf:5b:06:7c:e9:97:45:
         d2:49:22:40:d6:d1:81:a1:d9:38:c3:ec:d2:0a:27:47:fa:5b:
         1b:e8:0a:84:bd:f2:c7:3c:da:27:0b:50:f1:3d:eb:0d:53:63:
         7c:1c:d8:a3:d3:05:bc:a7:ac:e2:df:43:0e:34:52:dd:0d:0d:
         4c:a3:87:64:da:1b:47:75:d7:e9:4c:e6:f9:37:ec:e6:86:87:
         f5:fe:df:b4:cd:ec:c7:4a:92:40:f7:f7:f9:87:6d:90:3d:b3:
         f4:ab:2e:c5:97:42:45:b4:78:6a:84:55:cf:7d:c1:07:6a:20:
         cd:5b:d0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:36:32 2026 by rpki-client