Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6f06641c-04aa-3165-b9c2-ba04cffdddf6.roa
File:                     6f06641c-04aa-3165-b9c2-ba04cffdddf6.roa (raw, json)
Hash identifier:          72ufDcfS2UysWHO4p38W4R/eZAjJO9RB/yYBpHtRZ5o=
Subject key identifier:   97:F7:D2:59:21:CE:33:B6:FE:27:A2:E2:A3:82:A8:4D:30:3E:B8:49
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F2D87E37AB18DC8307EC47140
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6f06641c-04aa-3165-b9c2-ba04cffdddf6.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        172.64.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:e3:7a:b1:8d:c8:30:7e:c4:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=cedbbf16-2f3a-4482-8c55-0c44308800e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:31:33:e7:7d:d1:07:75:03:b4:57:dd:49:c2:
                    b1:ee:74:b7:8f:ce:6f:31:58:21:2c:9a:a9:d6:b5:
                    16:6b:79:7e:e0:0e:10:9d:b2:89:e3:c8:ab:3b:98:
                    a8:05:9c:b4:ec:64:a2:38:51:70:bc:07:54:51:65:
                    69:82:03:68:01:6b:f0:0a:a3:7b:74:a2:41:3c:c4:
                    24:d7:67:fe:e4:f3:a6:a3:a7:68:75:29:bf:fe:a5:
                    f0:13:c4:c3:48:cf:5e:87:c3:62:64:4b:8d:d0:90:
                    df:1f:62:36:6e:b3:f4:d7:2b:db:71:ef:c6:e5:60:
                    56:49:54:02:89:47:e5:13:e4:65:56:41:a8:eb:61:
                    0f:a5:75:e0:e5:10:b3:ef:76:43:f0:92:dc:24:8b:
                    10:33:3a:52:05:4d:04:d4:d7:17:ce:7c:d1:e1:22:
                    fb:af:4c:06:14:9b:4c:d7:a6:54:e0:1d:88:c0:b4:
                    9f:b9:90:e3:33:f9:41:98:06:a6:5f:33:74:e0:2e:
                    9a:d8:18:0e:57:f8:1a:a5:76:94:6d:e6:1a:fc:84:
                    41:a8:11:2d:8e:e2:7a:3b:2c:71:97:cb:c0:4a:f6:
                    4a:e2:f9:a9:7d:a9:4a:af:d5:0b:1c:e8:95:fc:db:
                    59:ea:93:b8:fa:fa:15:a0:f4:34:30:ff:c3:65:2d:
                    10:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F7:D2:59:21:CE:33:B6:FE:27:A2:E2:A3:82:A8:4D:30:3E:B8:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6f06641c-04aa-3165-b9c2-ba04cffdddf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:d3:43:c8:29:b6:36:3a:ab:8c:f3:b8:2c:4b:ad:af:fa:2a:
         b8:1c:28:35:f2:8d:b1:82:a1:97:13:66:f0:49:db:c9:d3:f1:
         f8:ac:97:78:f5:c6:00:b0:0e:db:1b:0d:86:6b:f5:8a:73:a5:
         48:8f:d8:74:8c:43:b0:5e:0a:4c:03:b1:74:72:26:63:c0:a4:
         84:ad:66:dc:a0:b0:a9:e5:99:2f:f4:fc:3c:75:80:73:37:90:
         c5:f6:08:65:88:9f:49:7c:ba:12:2d:91:22:3e:95:f9:1b:88:
         a4:d3:3a:c5:36:9e:f9:fd:68:f1:5f:b9:5f:15:5b:1c:fd:a5:
         cc:38:1e:80:bd:f5:55:50:48:44:e9:b6:b6:55:63:44:61:e1:
         12:bf:b1:73:fe:16:54:88:d0:ea:88:68:fb:5b:72:91:41:d7:
         98:87:a0:ea:f9:40:a4:0d:24:ec:37:4b:a0:4e:44:2d:e9:02:
         96:27:c2:10:cb:d2:79:cc:70:06:bc:ec:88:e9:f8:2d:10:ed:
         58:2c:7f:f2:b5:17:cb:58:f9:03:a1:44:b1:e5:9b:9f:db:b4:
         37:1c:25:c3:ec:ce:3c:ac:bd:e8:18:eb:77:fa:0c:e8:64:15:
         ac:58:9c:e3:16:0f:28:26:cf:fd:8e:e4:37:2e:a4:f3:d0:45:
         3b:70:d9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:41:53 2026 by rpki-client