Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4acc927-b30b-3268-9e6e-3ee2d3618bf9.roa
File:                     f4acc927-b30b-3268-9e6e-3ee2d3618bf9.roa (raw, json)
Hash identifier:          ixd520RysUTzl3F2k505T5+3f6b9NwH9Kg9zSimJFLw=
Subject key identifier:   E3:A6:89:23:E7:E0:CA:54:2E:68:E0:C6:FA:A2:AF:55:EE:8A:11:66
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D87373351E12AEF0EB16EA080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4acc927-b30b-3268-9e6e-3ee2d3618bf9.roa
Signing time:             Thu 16 Apr 2026 18:26:55 +0000
ROA not before:           Thu 16 Apr 2026 18:26:55 +0000
ROA not after:            Wed 15 Jul 2026 18:26:55 +0000
asID:                     14789
IP address blocks:        172.71.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:87:37:33:51:e1:2a:ef:0e:b1:6e:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr 16 18:26:55 2026 GMT
            Not After : Jul 15 18:26:55 2026 GMT
        Subject: CN=9696f34f-81a0-4862-b08f-05c75d8555b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:87:f5:94:43:6b:ce:6d:79:a6:a9:fc:f2:bd:
                    13:c8:e2:cf:c0:19:55:5c:93:18:61:4f:58:e7:60:
                    c6:6d:71:dc:be:a4:cb:41:fe:c7:ea:72:a1:8a:b3:
                    84:83:b3:aa:3a:1b:34:15:d8:10:37:e2:86:e8:fc:
                    46:32:79:e5:a9:96:d4:cb:6d:e4:91:32:40:86:e2:
                    3d:75:6b:68:6e:bf:bd:8f:bf:20:ef:cb:f0:52:f7:
                    97:71:d9:fe:4d:46:fc:13:72:2b:1a:92:97:08:aa:
                    15:88:de:77:79:0e:d0:69:09:a6:f4:70:8b:8b:90:
                    f5:7b:34:6a:3a:24:40:86:79:59:ff:ae:08:cf:f4:
                    2f:aa:db:78:f0:1a:bc:4e:b9:b1:83:8a:57:b7:44:
                    3f:32:0f:78:bb:b8:36:50:13:26:6e:92:3c:fb:f8:
                    5c:12:40:27:f4:5e:32:83:96:d6:1c:3c:59:00:82:
                    c6:8f:a4:ff:cc:49:6b:cf:9d:35:11:cc:23:a7:a8:
                    bf:e4:0d:68:b7:d4:98:f4:59:21:4e:76:5b:63:b7:
                    d5:91:39:23:0e:e1:52:ef:a2:d2:fb:97:ac:8e:d4:
                    22:35:03:40:c4:72:63:e9:d5:cd:51:68:b1:82:6a:
                    f5:ee:b8:d0:a0:fa:1b:44:31:4f:e4:9c:fc:0f:31:
                    34:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A6:89:23:E7:E0:CA:54:2E:68:E0:C6:FA:A2:AF:55:EE:8A:11:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4acc927-b30b-3268-9e6e-3ee2d3618bf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:b5:16:f3:fb:90:68:98:d7:b9:3d:84:e2:57:d4:d4:fa:16:
         93:6d:bd:0f:03:da:0d:55:57:7f:4f:a6:d4:eb:b9:90:57:59:
         55:b2:75:24:ec:f0:23:12:2e:0a:a7:1f:4b:af:e1:ca:35:28:
         e5:f5:d1:cf:ee:bf:94:79:8c:15:68:ab:f7:23:1b:a2:42:de:
         4f:8c:91:7c:d5:4e:6a:3e:a6:d4:58:6b:1b:e2:6c:7b:c1:2c:
         9c:23:da:e8:d6:06:68:fe:0e:31:a5:ff:18:95:0e:77:1c:37:
         78:19:8c:d3:32:bc:34:69:d2:0c:e5:e6:89:3b:62:c5:04:9a:
         d6:e1:f8:26:3c:97:5b:04:d3:b3:de:c6:33:ee:0d:89:59:76:
         be:74:87:d3:c8:20:d0:48:d8:ec:28:e6:36:73:8c:4a:39:3a:
         ee:73:f9:f8:59:e4:f7:5c:f3:0c:3f:70:9f:a3:63:06:ed:2d:
         8e:2f:74:d2:f2:65:16:f6:91:63:8a:7d:72:35:38:00:f9:6f:
         46:8e:dd:86:8d:8b:a8:ba:9c:18:14:c6:a0:9b:75:b4:11:bd:
         0b:83:b6:48:7f:00:06:d5:6a:01:e2:36:23:fc:ac:d0:3f:ab:
         42:56:e3:be:79:06:fb:b7:dc:c2:2d:c2:95:ea:0c:d8:50:16:
         f0:45:f1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:13:02 2026 by rpki-client