Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e077b92-4970-3931-948c-73006961edad.roa
File:                     2e077b92-4970-3931-948c-73006961edad.roa (raw, json)
Hash identifier:          qF4LlVxxehQOrcFj0QBvzG9kWjnihFQOrH59KWqH4ps=
Subject key identifier:   F6:BA:64:5A:12:2A:11:01:86:31:79:83:45:4D:4D:96:E0:B1:EB:E4
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4AEF686C541CC6E7FFBDB1B0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e077b92-4970-3931-948c-73006961edad.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        172.68.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:68:6c:54:1c:c6:e7:ff:bd:b1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=c415a1eb-abb5-4102-bbf8-1f05e9acb7b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:95:e5:5e:6a:42:33:bd:4d:07:8f:e1:68:59:
                    91:95:e8:c1:bf:89:f2:fe:0b:4b:8b:e0:c5:e1:b4:
                    23:e2:97:b9:df:de:fb:59:39:70:7e:bb:65:64:fc:
                    ec:da:6b:17:98:a1:96:60:9a:bf:60:80:a9:86:1b:
                    d3:80:cf:29:9c:b5:e3:10:a0:d1:59:41:18:e9:f2:
                    72:0b:f5:54:42:66:1f:ab:8a:6b:54:60:ca:fb:67:
                    24:54:88:6b:d4:85:fb:02:0c:a2:f1:89:c7:84:93:
                    0d:68:4a:9e:f4:8c:2f:c3:ff:d3:f8:33:d0:64:99:
                    dd:a7:9c:5a:51:84:86:05:41:0b:f4:80:ae:01:a2:
                    cf:6a:c2:81:3d:a3:f6:9e:49:ed:df:59:c2:4b:8f:
                    d7:b5:5d:d7:ad:b0:f6:c6:4a:00:75:e9:9b:24:73:
                    de:46:12:1c:84:4d:dd:44:67:de:c7:1f:2f:12:f0:
                    9d:99:bd:97:bd:86:85:0b:69:c3:58:a8:f6:1e:da:
                    06:33:15:db:35:73:3e:29:d1:39:3c:16:4a:da:4b:
                    c7:7c:fe:07:5c:9e:68:7b:04:59:b7:72:c4:17:1a:
                    3f:b4:f4:1e:c5:ce:6a:07:4b:5f:5e:a1:a2:eb:99:
                    cf:a0:00:14:01:82:b7:75:48:6a:66:6c:99:91:35:
                    f0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BA:64:5A:12:2A:11:01:86:31:79:83:45:4D:4D:96:E0:B1:EB:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e077b92-4970-3931-948c-73006961edad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:e4:8d:8f:d0:71:48:dc:68:f5:5b:8a:bd:82:43:44:6a:b5:
         ce:80:0d:f2:e9:7d:b0:87:15:1a:7a:ac:a3:98:c5:ca:c7:b4:
         0f:da:36:eb:de:3d:3f:05:7b:d9:cf:c5:fa:f1:62:aa:8c:6b:
         7d:bd:b2:13:a8:f1:3b:cd:81:b8:e7:73:86:17:c9:49:1a:1c:
         49:a1:19:46:bc:61:b6:7b:9d:d2:36:6c:35:66:ea:83:e2:11:
         be:47:05:9a:07:26:2b:01:6d:82:f6:cb:64:0f:e3:1e:1f:70:
         8e:9f:a9:27:54:3e:88:84:52:9a:ec:c2:fa:b7:6e:2c:ee:39:
         23:00:b6:46:0c:a6:e4:ec:6b:d0:47:d8:ee:06:27:f0:15:83:
         49:c8:f1:9b:d1:b2:a3:8e:e4:d4:62:dd:44:ab:95:c9:c4:2f:
         66:50:d8:5b:36:79:9a:5c:9d:6b:f8:78:fe:e0:b0:30:85:53:
         31:38:14:dd:e6:51:b4:a7:d0:fe:49:af:dd:d3:8b:43:c7:0e:
         85:86:79:7b:21:c6:dc:d7:f0:55:23:06:b9:9e:25:7d:4f:1c:
         86:bb:51:b5:82:fa:7e:cf:e2:7b:59:32:5d:d0:cd:a4:96:ca:
         42:f6:0a:7b:2e:d6:83:e6:6f:c0:c7:d2:b2:72:b6:ec:23:31:
         3b:f8:55:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:29:14 2026 by rpki-client