Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6271fc68-ffa1-36e8-986f-5b3f458779fe.roa
File:                     6271fc68-ffa1-36e8-986f-5b3f458779fe.roa (raw, json)
Hash identifier:          VHY/adf433FMxdqYLJinDRsC3jRKQrlh3LchTpXHhLU=
Subject key identifier:   25:FB:B8:6D:A1:BF:4C:A4:2F:3B:3F:F6:49:DB:98:21:EE:FC:E2:3E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E51E9F4D53D78CB7FF9ED1B40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6271fc68-ffa1-36e8-986f-5b3f458779fe.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     13335
IP address blocks:        172.70.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:f4:d5:3d:78:cb:7f:f9:ed:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=4c8f9614-c5dd-4c95-b152-19bf3a60cf89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:44:36:71:6c:43:e2:be:c4:6e:fb:79:36:55:
                    35:63:16:3f:fd:9b:e0:b8:1e:45:7c:45:9d:68:b5:
                    a1:9f:ce:b0:13:b2:0d:64:fc:22:f2:fb:84:29:6a:
                    03:08:18:b0:d5:d5:e5:cf:5f:fd:10:20:f0:cd:1b:
                    db:b5:14:c9:2e:ed:29:ad:5b:c3:7d:14:98:8a:0e:
                    b4:91:3f:30:51:eb:45:84:cd:01:7e:54:df:3a:90:
                    33:f9:92:8d:5b:9d:b4:db:e8:70:e8:f0:fd:30:58:
                    d4:7d:db:82:91:de:fe:0c:69:3c:4b:f4:1a:df:1e:
                    98:75:45:83:4f:78:7d:4e:33:58:1c:38:3a:54:33:
                    f6:07:ad:20:ac:f1:29:8c:1f:84:b5:ac:bd:c7:10:
                    02:da:69:17:16:3e:5c:62:bf:b5:8e:71:4b:73:ed:
                    3f:be:ff:36:18:a0:fa:f0:63:5f:ea:9f:24:94:93:
                    2c:3c:f8:60:84:ce:f8:cb:d4:32:74:7a:14:49:7b:
                    0c:b6:bb:6c:4d:1f:c9:f4:c6:f8:4c:44:42:1c:66:
                    3e:ba:4a:32:57:53:8b:a4:3e:cb:74:b4:25:c4:c5:
                    6d:70:0d:8a:06:ff:ce:ad:be:6d:67:b0:d2:5d:79:
                    18:2e:a8:c8:e7:c0:d5:40:89:77:80:42:65:7c:bd:
                    0e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FB:B8:6D:A1:BF:4C:A4:2F:3B:3F:F6:49:DB:98:21:EE:FC:E2:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6271fc68-ffa1-36e8-986f-5b3f458779fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:1b:4f:d9:83:9e:46:91:16:8a:4a:ef:cc:60:42:e8:20:b4:
         d8:aa:cf:d1:9c:31:8a:db:c1:a1:a6:31:1a:fe:1f:1f:c2:ca:
         2a:da:d4:6b:90:e7:38:0a:f3:61:3f:29:82:f6:1f:a4:f5:19:
         6f:c9:26:c6:65:43:bf:69:93:3f:2f:45:a5:73:96:57:75:0c:
         3c:20:0a:69:da:00:6d:fe:66:f3:15:f9:7e:33:27:1f:b3:1b:
         c9:67:5f:e3:d2:7c:c8:56:bb:0a:78:e0:61:a4:20:a5:56:28:
         80:a8:d5:cf:6e:e6:d0:ae:6c:16:7f:ab:56:79:0c:e2:0b:a9:
         4c:ce:76:59:45:f8:bb:49:e3:7b:f1:a3:d0:c5:c0:21:e3:50:
         36:72:df:9e:ea:2e:73:b1:1c:da:36:db:2d:93:7d:20:86:b8:
         99:77:bc:0d:40:c2:b6:27:d4:a5:ce:9c:b5:7d:c7:4a:4d:20:
         54:3c:8f:c0:3d:61:82:46:8e:61:0e:2b:10:0e:a9:5e:bf:48:
         08:72:a2:4d:bf:47:7c:83:6c:f6:fe:4d:1d:93:ec:b5:72:36:
         99:bf:eb:96:5c:80:1c:5f:c2:4f:93:3d:0f:cf:e4:f2:f3:21:
         81:d0:e5:3f:61:11:81:d1:8e:d7:70:b5:b6:7a:ba:42:ad:75:
         0d:23:1a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:27:45 2026 by rpki-client