Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ec6f21cc-6bd5-33b0-8e13-1e5b9ebeb1d9.roa
File:                     ec6f21cc-6bd5-33b0-8e13-1e5b9ebeb1d9.roa (raw, json)
Hash identifier:          tlqeQnPExWrbU791c8pu0wcQVFn5/6Ac+SwAgmOoSus=
Subject key identifier:   13:D5:29:5A:A2:68:4B:53:49:90:D5:81:B5:31:78:68:39:2E:EF:83
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EF5B2109A12E45ACF52D00100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ec6f21cc-6bd5-33b0-8e13-1e5b9ebeb1d9.roa
Signing time:             Wed 26 Aug 2026 01:00:12 +0000
ROA not before:           Wed 26 Aug 2026 01:00:12 +0000
ROA not after:            Tue 24 Nov 2026 02:00:12 +0000
asID:                     14789
IP address blocks:        172.70.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f5:b2:10:9a:12:e4:5a:cf:52:d0:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 26 01:00:12 2026 GMT
            Not After : Nov 24 02:00:12 2026 GMT
        Subject: CN=9bc6f9ad-deb0-4344-bd75-594f4d63d34a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:64:b5:64:5f:b6:45:fe:7b:e6:20:78:c4:c1:
                    f1:c5:81:ee:d2:5e:53:d0:3b:01:e8:8e:ac:ac:df:
                    e3:b2:99:6a:a9:7a:b5:3f:9e:f7:0d:9d:98:f8:85:
                    d4:6f:7c:c0:b4:d5:24:34:a5:83:18:ac:72:36:97:
                    ad:9c:5f:c7:da:f4:2c:22:f4:9a:1f:f8:ca:7f:dc:
                    f4:34:ba:e2:1e:82:32:18:e1:55:6d:da:dc:43:ff:
                    17:ae:e6:99:7f:ab:bd:6d:57:47:24:79:76:a2:06:
                    93:59:29:11:a4:2c:a2:81:f7:ba:6c:93:78:5e:5e:
                    d5:66:8b:40:3d:09:19:75:5a:95:1e:30:ad:76:6f:
                    2a:b3:51:43:c1:1d:5a:aa:0d:80:67:a8:5a:32:7a:
                    26:a9:c6:43:5c:6e:8c:8a:ad:22:61:6d:49:5c:d4:
                    54:30:7f:21:0a:50:cd:c9:0d:b0:5e:25:82:ef:d8:
                    c1:1a:50:b4:7d:b7:48:a8:75:b1:52:a2:55:a4:b7:
                    40:42:18:7c:5c:46:39:ff:90:b5:b0:f1:55:ab:aa:
                    da:d8:f2:e5:d2:d9:b7:2b:45:07:f7:91:ce:aa:59:
                    88:6d:de:e5:c2:22:43:65:86:c4:47:ea:18:c1:87:
                    08:91:60:0b:66:e1:01:2e:24:29:5c:7b:f5:51:0b:
                    dc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D5:29:5A:A2:68:4B:53:49:90:D5:81:B5:31:78:68:39:2E:EF:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ec6f21cc-6bd5-33b0-8e13-1e5b9ebeb1d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:44:ed:3e:2e:69:30:37:bf:d9:9c:12:c5:19:ce:0e:08:1d:
         b4:a8:78:50:d4:40:25:7c:af:7b:cc:24:e3:fd:09:18:d7:85:
         27:39:39:96:7e:42:c7:6b:4c:b3:b3:d5:e2:2c:59:06:b7:1c:
         69:e7:e8:30:52:54:37:a1:c2:7e:41:8c:c5:27:83:70:91:70:
         e9:c0:2d:b1:c3:35:fa:1d:a8:70:4d:c0:ab:1f:7a:6e:c4:ed:
         60:82:ae:d7:23:81:f0:9f:63:77:0b:c6:51:13:9f:5b:16:bc:
         89:ea:b6:50:18:2c:5e:f1:af:21:15:d2:8b:19:fd:15:83:30:
         bd:6b:c0:f7:66:be:44:e7:98:91:e3:9b:de:fe:cf:97:3d:6a:
         07:ec:76:ed:c4:43:10:34:bb:23:ac:8f:6d:22:fe:c0:ce:2b:
         e1:bb:fc:c1:06:32:62:91:95:d0:86:42:1a:13:86:7a:35:b7:
         8a:67:e9:a1:9d:39:f3:b1:ba:ca:78:1f:80:95:b1:cb:4d:1c:
         5c:e8:35:fa:54:3e:f5:a3:a8:f3:cd:9b:c7:c5:79:f3:81:e3:
         ff:15:3f:3d:4d:bf:f5:7b:0d:eb:fe:42:4d:e2:53:76:63:ac:
         eb:dd:59:49:41:f0:1f:90:0f:e0:2e:f5:a4:96:f2:ca:ec:7a:
         32:59:f4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:09:55 2026 by rpki-client