Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17b45d6a-4c9a-3d6d-8ecb-09dfb8816a01.roa
File:                     17b45d6a-4c9a-3d6d-8ecb-09dfb8816a01.roa (raw, json)
Hash identifier:          reATOfBdWuhMskbk5IIdCpccO2GgGBnIhkPy0e4qd7c=
Subject key identifier:   C5:57:AC:F4:F4:32:F0:C2:11:29:05:A3:A8:8D:67:DE:0E:D3:AB:D3
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4C54A00AC3AE79112D6B49C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17b45d6a-4c9a-3d6d-8ecb-09dfb8816a01.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     13335
IP address blocks:        172.69.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:a0:0a:c3:ae:79:11:2d:6b:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=565211f2-2185-42b2-9702-f71c47d35b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:85:86:7e:a9:f1:33:9e:4f:ed:92:66:8a:89:
                    1d:ca:56:73:11:33:5b:df:08:cb:13:eb:04:1a:16:
                    09:15:ef:a9:32:da:b9:2e:88:8c:38:75:fa:10:bd:
                    72:65:1d:c0:0b:5b:f0:5f:32:26:f7:d6:bd:e0:99:
                    b4:79:72:8a:9a:e4:af:09:17:e1:ed:86:17:de:f3:
                    63:09:43:21:9a:94:33:b5:bd:23:0b:60:d8:b6:67:
                    12:13:c0:49:df:89:59:7b:a2:04:f8:ab:75:22:a7:
                    e7:e7:c5:1d:8e:88:d1:2b:a8:dc:4b:96:46:26:f8:
                    10:00:43:69:66:7a:08:6d:64:96:39:46:6d:52:ba:
                    f7:ae:2d:06:b6:c0:06:ff:03:ad:e9:45:fc:48:1d:
                    1c:56:3e:94:42:9e:4c:cf:5d:b4:64:4d:6a:b2:07:
                    e6:2c:0b:8d:ae:a4:07:aa:4e:6f:be:a1:8a:0f:79:
                    a4:6a:74:44:d9:58:77:20:24:76:d1:74:79:88:7f:
                    3e:4f:78:1d:6a:ef:80:bb:e6:17:c2:24:c3:40:21:
                    26:45:7f:a9:39:ca:2a:13:32:48:0b:5c:62:f2:61:
                    66:22:92:dc:8d:92:45:7c:10:ad:89:ad:ce:c8:7f:
                    e4:cf:53:69:c7:a7:94:8c:a9:63:48:8d:61:6f:ab:
                    99:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:57:AC:F4:F4:32:F0:C2:11:29:05:A3:A8:8D:67:DE:0E:D3:AB:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17b45d6a-4c9a-3d6d-8ecb-09dfb8816a01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:0b:76:c7:98:9b:54:62:83:07:8d:d9:16:94:34:77:ee:7c:
         39:8a:69:d8:76:fe:64:84:75:bd:1f:fd:31:b4:b6:f1:2c:3d:
         a3:49:63:f7:d5:21:28:98:e0:c1:c4:b0:9e:ef:11:bd:b0:c2:
         c1:a3:19:d6:ea:6e:7b:24:0f:bd:9b:b5:84:ba:33:4c:f3:f6:
         61:3a:0d:54:2c:04:ac:10:21:c7:eb:2a:2a:31:e5:54:1d:5b:
         20:aa:48:bc:9a:0c:f8:fe:58:a0:3c:c5:0c:8d:f8:a7:f4:0d:
         87:8f:42:87:d1:30:72:f0:0f:b4:41:81:fc:a6:88:4a:0f:bc:
         e1:95:b0:09:7c:a7:db:94:cc:03:a5:aa:21:24:7c:e7:9c:2d:
         23:66:7f:bc:bc:b2:e1:58:4e:88:b5:92:9d:6c:f9:40:fd:15:
         b0:48:94:21:f6:3c:e6:4c:8c:22:44:15:11:5a:a4:bf:86:47:
         69:af:93:32:ab:88:c4:ed:61:8a:aa:20:e6:82:aa:4d:20:cd:
         3f:35:5e:aa:42:7f:5b:85:b0:9f:1e:fd:53:33:7b:d5:b0:37:
         d6:1d:a7:03:58:d0:c2:1b:37:c3:50:e9:e0:50:d2:be:20:09:
         0b:43:4a:37:1c:32:2b:c0:c9:d7:59:44:b7:3b:38:ee:15:ee:
         30:c2:e9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:53:15 2026 by rpki-client