Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6cd43715-9705-3e6e-b8f7-121e94276a7e.roa
File:                     6cd43715-9705-3e6e-b8f7-121e94276a7e.roa (raw, json)
Hash identifier:          o353itXZnYY8O6ZaqkW1zqQ2lmqqnnLAQrK2VKhr3O8=
Subject key identifier:   9A:A2:E5:92:B4:C1:83:F8:92:1B:0E:AE:AC:C4:03:22:EC:D5:AB:56
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E5084AE804F278E86523AEC40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6cd43715-9705-3e6e-b8f7-121e94276a7e.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        172.70.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:ae:80:4f:27:8e:86:52:3a:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=ba8cb8ee-6145-47d9-9eb0-778ce8ff2a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:46:10:ea:16:a9:12:ea:b9:72:65:0d:89:2e:
                    a2:2c:b9:3c:be:97:d7:4a:1c:cd:00:ce:68:22:f9:
                    bb:87:d0:cd:3f:c7:43:ce:3d:77:45:2a:0a:de:fe:
                    f2:71:4e:42:95:a7:e8:fd:da:74:5f:cc:b2:c1:9f:
                    49:cb:8a:2f:3d:fb:fc:51:76:6d:15:fe:04:38:49:
                    02:ef:a2:9f:04:86:a0:6a:68:20:24:11:1f:dd:d6:
                    2f:66:91:85:c7:3e:6c:0d:f8:40:6e:a5:25:4b:49:
                    35:34:6f:89:ef:7d:2d:e0:48:c9:09:0b:f7:f6:f2:
                    7d:e0:3a:52:ba:80:01:8b:7d:8b:51:4c:22:bf:07:
                    e4:be:cc:c2:1b:a9:31:35:76:e3:ea:c3:4f:b8:05:
                    86:05:e6:4e:b6:c2:d4:63:57:ef:af:64:18:cb:dc:
                    96:bb:f3:ac:68:bf:d2:50:79:aa:14:4c:a8:08:09:
                    32:8f:f2:5e:f7:a9:6c:41:20:3e:07:2a:32:a0:ac:
                    5b:78:b8:6a:92:65:11:b7:16:92:2c:d6:9a:f6:66:
                    f7:a6:8e:43:58:5d:72:9e:75:15:31:11:eb:8b:10:
                    da:60:ec:88:0b:43:00:35:41:81:2e:ba:29:77:50:
                    69:ab:15:37:6b:c9:ab:a2:0f:1b:f9:0e:9f:28:e9:
                    57:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A2:E5:92:B4:C1:83:F8:92:1B:0E:AE:AC:C4:03:22:EC:D5:AB:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6cd43715-9705-3e6e-b8f7-121e94276a7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:7f:ec:f7:cc:23:d2:1a:fb:ca:45:cf:b7:75:da:f5:d2:2a:
         c5:f3:bd:fe:bc:48:f8:05:6d:ba:a4:a3:ea:df:cf:f6:07:3e:
         39:7a:64:7a:90:99:09:50:21:0a:a6:e3:fc:7e:e0:28:41:ea:
         5a:d0:77:63:76:38:76:36:e6:8e:44:88:e8:bf:9c:79:8c:22:
         d5:98:b1:31:86:0a:c1:8f:40:d6:12:f9:18:e5:cb:ae:a2:7c:
         36:74:e6:e4:2e:6a:2d:4c:0e:19:f4:ed:aa:30:38:af:a7:a7:
         8d:7c:fb:5b:d6:ba:35:a9:56:00:aa:92:92:92:71:8f:62:95:
         64:86:ca:30:a8:35:08:25:64:f4:42:e3:5a:2e:e6:11:b6:27:
         1d:67:b1:74:49:11:78:d2:b0:78:5e:be:ac:a1:49:a8:30:ec:
         28:93:93:3a:4f:75:f3:ea:01:cb:d3:4e:83:06:67:8a:51:45:
         c4:fe:d4:27:07:bf:78:70:16:ad:76:b6:20:b2:7c:81:70:a9:
         04:9a:86:fe:91:84:77:dc:59:41:b9:a6:dd:11:51:da:99:9e:
         58:9e:9d:bb:c2:f2:a2:d4:5b:c1:ba:04:01:03:27:e5:e2:08:
         4c:e1:10:78:b0:17:d4:24:19:15:29:1f:53:d8:a5:14:9c:06:
         ec:43:2a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:54:00 2026 by rpki-client