Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09b40ee3-ef3f-33a0-87a1-010a6b9d12a3.roa
File:                     09b40ee3-ef3f-33a0-87a1-010a6b9d12a3.roa (raw, json)
Hash identifier:          OcCft5RnDoptvebVgq/B/TLNU6ckL/23ay+oueSlUas=
Subject key identifier:   11:84:39:DD:49:C6:B2:6A:79:03:BE:07:4B:0B:B1:A4:3C:7C:1F:B5
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E51E9ECA9CD8A53917CDAC6C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09b40ee3-ef3f-33a0-87a1-010a6b9d12a3.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     13335
IP address blocks:        172.70.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:ec:a9:cd:8a:53:91:7c:da:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=c615b860-4a09-4c5c-9620-4a68fc66502b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2d:a2:b8:95:91:c8:8f:48:da:af:cc:a6:60:
                    69:33:ef:b6:64:a8:7f:cc:fc:1e:aa:98:c4:bb:81:
                    25:75:64:d6:df:68:28:52:cd:92:90:5b:48:13:48:
                    e3:10:e3:78:d5:d9:44:a7:50:e9:32:db:b7:8a:b9:
                    6a:87:ab:fa:3d:1d:31:4b:36:b9:3b:57:69:89:c8:
                    4a:43:fd:93:6a:60:4a:29:44:8f:2f:66:65:56:f8:
                    18:a1:1c:de:91:d5:6b:34:af:2f:d2:af:73:51:1f:
                    09:a8:dd:35:c9:cd:d3:2d:fa:34:9c:01:c4:53:61:
                    90:b4:06:21:cf:95:24:de:b8:a3:f9:6c:26:a1:6a:
                    9c:e1:5d:00:23:0e:17:6a:56:da:6d:f5:03:e7:77:
                    dc:36:33:c6:f5:ae:df:b1:13:e9:d6:a3:7b:98:a0:
                    e8:9f:f3:14:27:1f:59:0c:e9:98:68:66:a3:93:c2:
                    b0:e9:02:dc:fb:ab:7f:62:b9:c3:47:a0:a1:fd:36:
                    5e:e8:69:39:32:08:09:41:ee:6f:86:63:3f:f4:a4:
                    77:58:92:99:ae:86:54:f8:22:5b:05:27:ba:37:17:
                    c9:c9:72:f5:e1:40:bc:0b:11:b1:35:98:e1:f4:64:
                    db:55:3f:8b:cf:79:5c:cf:4b:55:32:6f:da:d7:fc:
                    2d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:84:39:DD:49:C6:B2:6A:79:03:BE:07:4B:0B:B1:A4:3C:7C:1F:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09b40ee3-ef3f-33a0-87a1-010a6b9d12a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:2b:d7:96:ad:e9:d6:1b:75:9f:6a:fd:41:bf:71:53:23:56:
         d5:98:11:fb:01:9b:3b:d7:23:bb:98:fa:70:4d:da:04:6e:c4:
         60:eb:bd:33:de:6c:2d:63:1f:6c:4c:f8:48:fe:b0:8d:35:b6:
         06:8f:9f:de:c8:54:07:d0:22:a5:8f:e4:d3:51:d9:73:c3:9e:
         f1:0e:88:38:9a:23:d7:a8:bb:2b:fe:90:bc:22:6d:4e:f2:03:
         ee:f8:03:99:9a:65:48:76:bc:70:98:1d:54:da:e6:bf:a5:e5:
         29:7c:87:5f:95:89:58:38:bb:c5:ec:7a:ef:53:48:72:13:8a:
         88:66:25:7f:ff:39:4a:12:aa:b1:21:a9:17:9d:5d:05:29:b1:
         4b:74:01:95:e6:59:16:2a:5a:6c:70:d3:87:bb:b2:70:a3:ee:
         5e:e7:8f:d4:66:34:b6:a9:2a:70:6f:1c:ab:ba:c5:96:e8:a1:
         0a:32:56:aa:47:9e:c3:d4:34:f4:fb:bb:38:ed:2c:58:11:a7:
         0f:dc:c3:14:56:1a:5b:18:d9:e4:31:88:aa:aa:60:b7:69:f1:
         56:ec:eb:af:9c:01:57:04:fd:33:c2:97:dc:08:11:9b:89:fe:
         31:a5:06:38:b5:3e:4c:a8:7d:58:45:8e:6d:7f:ff:92:ef:32:
         94:dc:4a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:05:32 2026 by rpki-client