Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6d09fb87-3861-3c35-bf6f-bbc3f0499bcc.roa
File:                     6d09fb87-3861-3c35-bf6f-bbc3f0499bcc.roa (raw, json)
Hash identifier:          T//Xv5Mci61Y0AkymgHbInAfluR4/vCdeay8xk5YE9M=
Subject key identifier:   98:6C:CA:F4:16:31:76:CA:0A:69:64:A3:9D:35:EC:B2:BC:56:D7:28
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F11A1493B25D9030F6EC82A18
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6d09fb87-3861-3c35-bf6f-bbc3f0499bcc.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        172.64.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:a1:49:3b:25:d9:03:0f:6e:c8:2a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=2d4447f7-1814-42bd-9e95-34fca51af55a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:46:88:d9:d6:60:bc:ca:13:a7:af:7a:fd:e7:
                    69:77:63:52:c4:bc:49:eb:c0:13:14:94:90:c7:e7:
                    8c:a2:45:f9:8d:2f:07:20:33:b1:bb:72:1d:ed:ec:
                    f0:ea:6d:e9:d7:fe:b8:4c:7a:80:38:f4:c2:31:38:
                    91:e1:5c:e9:a2:39:54:53:21:1d:33:ce:df:58:f0:
                    87:58:b2:d6:0e:69:26:b8:6f:ef:af:05:cb:81:21:
                    9c:79:bc:12:31:b3:90:f3:d1:82:cf:38:94:f3:8a:
                    ae:2e:f5:04:45:10:b1:84:bf:c8:0b:26:ee:98:61:
                    86:95:ab:d1:38:82:17:22:59:fb:74:6d:c2:44:6d:
                    0b:67:02:63:9d:7e:eb:36:f2:14:b6:2f:06:ea:44:
                    24:7e:f1:98:c2:e5:38:19:db:f3:c9:b8:cb:e1:b9:
                    e2:b5:3f:8a:15:2f:05:bb:76:bf:c6:85:23:05:a8:
                    ff:a4:37:ae:d3:49:87:25:50:e3:5c:50:0e:fe:2f:
                    90:a8:64:9f:09:b5:17:6e:6b:eb:1a:0d:81:70:60:
                    2c:6d:0d:e8:25:9f:2b:a4:f5:0c:fc:c8:df:50:f5:
                    e6:eb:68:a1:64:36:41:c8:4c:a6:b9:c4:82:4e:e8:
                    d3:13:99:9e:6b:29:d7:a5:92:3a:c2:23:2f:b8:0e:
                    eb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6C:CA:F4:16:31:76:CA:0A:69:64:A3:9D:35:EC:B2:BC:56:D7:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6d09fb87-3861-3c35-bf6f-bbc3f0499bcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:d0:7d:f2:d2:35:73:df:87:7b:d8:75:60:8f:02:16:d1:7f:
         47:a5:dd:72:aa:14:3c:1f:58:2e:d3:1b:d5:fc:ac:db:cd:89:
         59:ba:e1:33:be:80:d2:d2:5d:d4:06:15:71:3b:c1:e4:75:37:
         16:68:db:18:d7:de:7a:56:3e:f5:5d:ef:4f:2a:9c:98:61:96:
         af:02:81:29:21:85:ac:51:47:5c:a0:db:2a:d7:50:75:31:31:
         63:1c:19:91:13:03:4c:9f:00:82:ed:a6:8c:41:d2:37:a5:ec:
         d1:42:0f:dd:54:36:19:ca:b0:b2:c5:ca:fe:42:04:73:44:e2:
         d5:04:31:54:5f:03:cd:2c:a8:ec:d5:76:d0:e9:6e:85:fb:b6:
         5a:58:ab:fc:52:5b:a4:85:75:ab:98:6e:53:dd:25:0e:aa:60:
         72:fd:7d:72:50:73:fa:91:0e:c5:fc:c3:a7:e5:62:d2:52:f9:
         5b:ff:41:65:74:85:d7:18:42:8f:7b:90:9a:47:3a:22:62:2b:
         89:c1:15:45:bd:9c:e1:3a:b0:55:82:86:13:96:6d:80:a4:9c:
         d5:2e:d8:90:5a:97:5e:6a:f2:de:ce:52:35:c1:a5:db:f3:5f:
         2c:e1:99:d8:c4:41:53:27:0b:af:5b:05:30:a0:25:9a:e0:e0:
         bd:89:ee:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:34:51 2026 by rpki-client