Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e63c008f-27b5-330d-9d8e-f07fe70e2e46.roa
File:                     e63c008f-27b5-330d-9d8e-f07fe70e2e46.roa (raw, json)
Hash identifier:          +44vl9WSB2Bf2tvVSXeOw117qps3uObfP0IEJLf/F/Q=
Subject key identifier:   C2:08:F1:B9:63:5D:5D:E1:77:E9:46:29:EB:DA:4F:2D:81:98:90:87
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584DD625B35B62DABE5CB444F240
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e63c008f-27b5-330d-9d8e-f07fe70e2e46.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     13335
IP address blocks:        172.68.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:b3:5b:62:da:be:5c:b4:44:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=4323b75f-5428-47fd-9e5a-65f0210178eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8b:f3:7d:58:8a:15:b9:d6:ec:6d:3a:32:2a:
                    c5:c7:60:47:59:7f:e6:5f:b9:05:c0:e6:fa:7c:b8:
                    bf:7a:2b:ac:73:e8:f6:ad:ed:89:5c:cd:82:d9:e5:
                    ef:e5:3d:ca:25:33:3b:e7:b7:8f:ed:d2:df:db:3a:
                    98:81:79:18:e1:4d:62:ca:83:ad:c7:6a:b4:22:7c:
                    6f:92:91:73:74:87:f5:70:c9:85:33:ee:6b:c5:e0:
                    dc:37:f5:5f:e0:e5:77:24:49:12:8f:4c:fe:7d:a3:
                    69:d4:4d:13:19:dc:27:9a:e8:0e:1f:d4:dc:f9:08:
                    0b:b1:f6:20:af:41:d0:aa:66:ee:35:50:2e:f6:31:
                    d2:68:cd:41:ef:ea:30:6a:79:96:e9:7b:ad:ed:a3:
                    98:47:92:7a:d8:40:71:6e:6a:01:eb:82:2a:fc:38:
                    00:ab:92:68:6c:a0:f4:d0:27:b6:63:c6:7f:97:f1:
                    ce:25:79:64:ae:3b:8f:af:26:22:b5:6c:d0:74:89:
                    55:85:a7:c1:9b:77:1c:a0:8f:19:0a:37:84:be:10:
                    09:f7:49:a6:4a:85:73:0d:c7:bb:c3:bf:ea:d5:3c:
                    87:19:62:ab:c3:7e:47:92:53:fa:e9:0b:e4:42:82:
                    ff:d4:16:83:d4:68:0d:4e:cf:ed:97:86:bd:96:f0:
                    3c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:08:F1:B9:63:5D:5D:E1:77:E9:46:29:EB:DA:4F:2D:81:98:90:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e63c008f-27b5-330d-9d8e-f07fe70e2e46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:8b:57:46:2f:c7:88:d3:b8:74:dd:5b:85:0d:ab:e7:62:b1:
         c0:49:4b:0f:2f:09:bc:94:a5:bb:5f:8a:88:f4:a6:80:cc:77:
         3f:0c:83:68:a2:8b:2d:d0:ee:fc:dd:9c:66:5c:db:95:e1:4a:
         6a:2a:fa:e4:c4:f1:37:8e:52:c1:40:03:65:22:6c:44:b1:d9:
         db:87:6a:54:91:11:29:ae:05:20:e7:7f:ec:42:3c:ac:c1:a0:
         dc:68:88:13:14:dd:74:83:ca:2b:2f:81:9b:a8:6f:2a:50:17:
         b4:6b:81:89:87:cd:2a:7e:db:ea:9a:2c:29:a3:3a:bf:b5:5b:
         fe:d3:e7:11:2a:42:20:c0:18:db:cc:a7:36:7e:c0:c1:99:a9:
         aa:ac:01:60:87:32:39:ce:e5:08:79:8d:f4:fb:fd:18:93:1d:
         7a:8d:20:71:fe:2c:aa:71:b8:03:ae:87:f8:3f:b4:b2:fb:31:
         ad:70:83:b1:34:62:fa:b2:35:99:cf:05:14:d4:b0:59:84:71:
         69:2f:29:e0:11:a2:1d:3f:9b:22:8c:b1:c8:c4:98:a9:7e:0d:
         da:95:98:e4:9f:4d:2c:f7:3a:6e:fa:ce:ae:15:03:f8:8a:f1:
         2b:bb:bc:bd:86:9b:d3:fe:6f:01:24:86:56:ff:be:8c:52:20:
         2e:80:f3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:25:43 2026 by rpki-client