Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7fad9b23-4779-30e6-a138-18cb124dd0c3.roa
File:                     7fad9b23-4779-30e6-a138-18cb124dd0c3.roa (raw, json)
Hash identifier:          SwFUvibuwrKKUMs+J/ZFfdlDOUY/UCrkg0KQB5MVty8=
Subject key identifier:   A9:E2:91:71:28:D1:70:DF:6A:EA:95:88:4E:24:7F:63:E8:0C:5E:24
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4AEF54B453DE3EFF1645A900
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7fad9b23-4779-30e6-a138-18cb124dd0c3.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        172.70.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:54:b4:53:de:3e:ff:16:45:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=3901db60-8f01-420b-b594-32743fe188a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:73:28:c9:3a:0c:b3:64:ca:96:69:f1:e6:a9:
                    06:12:61:a9:3c:71:6e:0b:94:ae:8a:41:56:8f:33:
                    35:22:bc:d1:9e:6c:c2:f9:75:0a:f1:d5:10:83:4e:
                    16:ef:87:0d:4e:1e:c7:69:08:2a:9c:eb:e4:5e:fc:
                    5b:c3:22:81:32:f4:ef:e8:55:f9:a8:00:ab:1f:a3:
                    34:08:67:ab:08:55:e1:38:af:0a:96:3d:5b:85:a2:
                    fd:b1:6f:ec:85:eb:8a:bc:d6:7e:91:94:be:4a:27:
                    39:2e:f0:5a:b0:1e:6f:ce:b3:a1:8f:db:68:65:e1:
                    02:56:24:20:68:18:bb:6f:b7:4c:8c:cb:34:6f:92:
                    e9:7a:12:a6:55:b0:d1:37:a8:ba:06:3f:93:a3:c5:
                    03:6c:1b:03:b5:fe:0d:6f:c9:52:66:d9:ca:4b:4e:
                    09:fe:42:9b:c7:1a:ca:70:93:ae:85:c1:04:a5:23:
                    ce:ea:81:cc:f4:02:00:89:9b:be:20:32:d1:ab:39:
                    1b:36:d9:d4:8b:45:69:08:32:b1:ea:72:10:54:7f:
                    c1:08:45:0b:26:19:36:93:52:ea:cb:ee:92:4f:b0:
                    f2:bb:8f:ed:c3:65:6e:63:1f:f7:80:87:ef:4d:71:
                    a4:b6:48:d4:70:ae:bb:e9:57:1c:e5:4b:e5:a4:6f:
                    7e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E2:91:71:28:D1:70:DF:6A:EA:95:88:4E:24:7F:63:E8:0C:5E:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7fad9b23-4779-30e6-a138-18cb124dd0c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:14:10:e7:17:93:09:3f:f5:7f:0c:b5:3b:88:17:cf:a4:f9:
         0d:53:ed:2a:3f:0f:52:6c:b9:58:9e:af:d7:03:da:39:fa:f9:
         99:6b:c6:8c:75:e8:5b:85:cf:3f:af:96:8d:c9:f5:fe:ec:0f:
         22:83:4b:77:8b:37:7f:2c:c6:57:82:27:00:c8:f7:51:2c:ce:
         5f:2e:59:a4:22:a5:74:8d:df:22:fb:f8:87:d2:48:c3:5b:be:
         59:36:e8:a7:47:f8:d3:53:08:c4:75:e9:ec:f2:81:93:cc:22:
         44:e2:8f:fd:5c:93:c6:fa:4e:a0:3f:74:a2:08:25:bf:6d:f5:
         63:4b:76:4a:84:e9:fa:d6:b2:45:70:44:ed:48:08:49:56:b1:
         1c:69:bc:01:5a:31:48:2c:bd:65:71:46:28:a5:0a:ee:10:7d:
         c7:c3:8d:5b:6a:e4:95:b6:b1:b5:3d:63:ac:97:4a:82:ec:0b:
         17:83:a4:ff:e0:8b:cc:82:aa:d8:de:7f:c2:af:81:c6:44:9c:
         25:33:7e:ff:59:45:95:94:aa:35:28:c3:b4:a0:a0:0c:f7:14:
         8b:2e:b0:ee:e0:ee:ec:46:f3:6e:54:25:d6:ef:28:65:fc:1e:
         c6:64:95:9f:b2:30:41:47:1c:84:84:be:aa:eb:2a:16:44:62:
         ea:a6:cc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:29:19 2026 by rpki-client