Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/77ab796e-54fd-332f-a5b6-90cb2da21116.roa
File:                     77ab796e-54fd-332f-a5b6-90cb2da21116.roa (raw, json)
Hash identifier:          mOFaWPvtQtsD64RLfwCE74tmwIVvxMokWolXh+/eU+4=
Subject key identifier:   85:66:24:D1:5E:D6:AE:AF:46:FE:5C:D2:31:F8:E8:33:DB:28:A4:D7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E51E9F7ABAC3B6F1C304B8080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/77ab796e-54fd-332f-a5b6-90cb2da21116.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     13335
IP address blocks:        172.71.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:f7:ab:ac:3b:6f:1c:30:4b:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=d9662a33-a995-4695-baa8-e964efeaa17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:39:ed:39:6a:e5:80:d9:41:65:0d:79:f2:3b:
                    83:83:d5:f5:d2:4f:9a:e3:74:de:2d:af:a9:bc:a6:
                    a6:90:e0:cc:ef:91:53:90:84:a0:c0:46:1b:62:3e:
                    e6:c3:38:fe:41:d5:10:34:55:ea:4e:99:bc:23:9d:
                    fd:c3:53:cc:09:67:c8:dd:fe:52:f2:e3:21:17:05:
                    e4:6b:00:99:58:0d:59:8e:f0:8b:14:d9:bd:21:bb:
                    df:5c:9a:eb:d1:06:1c:08:9c:10:9e:1b:ca:b3:b7:
                    5c:78:3d:8c:ba:e7:29:c8:d1:6a:67:2e:4f:51:ba:
                    58:6c:29:22:41:87:f0:84:e9:f3:0a:52:40:33:27:
                    93:7d:3b:fa:41:d1:a2:06:8c:62:4f:bb:ab:32:3a:
                    9c:74:8a:c1:48:5d:97:5d:23:65:fb:6a:7e:b0:9a:
                    3e:51:e2:3c:ce:94:dd:03:22:a6:ee:b3:15:92:2c:
                    7b:c3:fd:2b:4b:34:b4:60:17:28:b2:96:49:aa:4a:
                    e3:c7:ac:23:de:d6:4e:94:d3:cd:2a:c2:e1:bc:4c:
                    b1:e8:f8:6b:81:c7:8a:bf:5d:3e:41:72:44:37:8a:
                    16:69:1b:d6:d9:d0:29:07:0b:c2:8d:9d:d9:a0:c6:
                    1d:f2:97:0d:e8:2e:f9:b4:69:e9:12:2a:2e:5e:a5:
                    16:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:66:24:D1:5E:D6:AE:AF:46:FE:5C:D2:31:F8:E8:33:DB:28:A4:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/77ab796e-54fd-332f-a5b6-90cb2da21116.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:f8:ed:78:17:c8:68:b0:7f:dc:d9:bf:fe:3b:44:92:05:3a:
         4c:c7:48:54:17:60:9f:92:63:86:39:0a:a9:91:a0:06:20:58:
         90:1b:df:56:d8:3d:c9:bf:ef:7c:5e:e5:b3:94:16:77:41:71:
         fe:f9:56:e8:48:dc:24:92:ee:90:e9:1a:21:be:b6:54:d4:31:
         27:5c:c9:fe:29:05:cf:c1:0f:15:cf:1e:a6:3b:c6:2a:8c:f3:
         0c:0f:7c:fe:35:d6:08:6e:fa:b7:5b:03:b8:7d:92:5f:b0:c3:
         d5:e9:62:43:e8:93:d8:48:cc:0b:72:bf:e9:b9:3e:47:e2:12:
         8c:e8:51:29:69:1c:e6:53:a7:cc:ac:b7:7f:4a:f2:5a:aa:9b:
         e1:83:4e:de:6c:b9:c4:cd:60:39:38:c5:7b:48:6b:0f:7f:2d:
         48:37:53:29:3b:02:cb:5d:95:bf:3d:d0:69:b5:e2:77:b5:16:
         d0:06:0a:b1:09:77:e7:05:74:1b:cd:75:4e:31:9d:46:36:6b:
         57:a0:b6:45:7d:e8:34:8b:2a:20:87:d1:08:13:4d:7a:69:35:
         8c:67:a9:19:df:27:0b:a0:6c:1b:ab:af:47:fe:36:11:5f:76:
         09:25:62:90:5e:40:b9:e7:4f:0d:ba:5c:1f:74:16:1c:e6:0c:
         32:8e:76:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:52:05 2026 by rpki-client