Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/939403aa-40ef-31de-8a1b-dffc0c092dbe.roa
File:                     939403aa-40ef-31de-8a1b-dffc0c092dbe.roa (raw, json)
Hash identifier:          b0bLARGY9cK7+lWhBG/aB1zQk6BqoSBT2M08yJcppcI=
Subject key identifier:   C1:40:E2:3A:36:7E:DC:98:C8:77:E8:D3:1D:A6:A1:85:FB:35:02:F7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E51E9F58D94023A1D82F9A600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/939403aa-40ef-31de-8a1b-dffc0c092dbe.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     13335
IP address blocks:        172.70.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:f5:8d:94:02:3a:1d:82:f9:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=b41603b1-3107-46e3-963d-adfca3c074db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c0:b4:76:b2:ef:04:bb:73:53:85:84:d1:63:
                    3d:13:a1:76:2a:2b:bd:10:47:19:31:0b:d4:23:7b:
                    6d:84:f0:60:e9:6d:fe:a0:ce:46:2c:0c:be:e0:f0:
                    92:4c:0f:fe:fb:c1:ed:47:38:be:f2:9c:24:8e:e0:
                    f2:43:61:6c:23:a4:70:e3:ac:45:86:1f:fe:88:18:
                    2b:83:69:f4:0b:dd:9d:7a:fc:e3:0f:3e:d8:bb:59:
                    71:f2:71:f8:57:5f:95:5a:47:31:8b:cf:d5:11:f1:
                    85:29:dd:0f:84:c0:09:fc:a6:76:d8:75:34:e3:9d:
                    bd:28:7e:d6:fa:4b:c8:2e:1f:9c:8b:4d:d0:bc:c7:
                    da:cf:30:79:7d:b6:6f:b9:5b:a1:91:67:ad:05:8e:
                    df:91:ac:5f:f8:b6:49:1f:8e:0b:91:6e:29:41:3a:
                    34:4b:1c:40:9b:8a:06:27:90:ca:57:38:e0:c0:12:
                    4f:74:08:13:dd:f1:ab:2b:b4:f0:ec:44:4c:86:bd:
                    e1:4f:9f:27:55:c4:4e:d6:a2:a9:2d:e0:fe:79:c9:
                    6f:45:f7:98:73:76:bd:62:79:1c:62:17:1d:9e:71:
                    71:60:ec:ba:40:44:3b:34:92:8e:73:42:3f:f5:38:
                    f0:9a:f8:b7:55:04:66:76:61:67:4c:05:bf:b5:e8:
                    1c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:40:E2:3A:36:7E:DC:98:C8:77:E8:D3:1D:A6:A1:85:FB:35:02:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/939403aa-40ef-31de-8a1b-dffc0c092dbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:dd:20:36:a2:86:0a:65:58:88:df:bc:f0:e0:b0:22:d1:a6:
         15:54:83:d9:03:9b:eb:f2:bc:a7:f7:62:cf:60:11:95:7f:f6:
         73:64:87:b8:e8:49:1e:67:88:23:03:a9:52:c5:b1:5c:df:bf:
         cc:ec:75:f8:39:0c:fa:54:d8:3a:63:4f:5e:fc:1f:cf:44:ae:
         0e:dd:17:09:2b:fd:d9:07:e8:1a:95:40:83:98:7f:d1:89:0b:
         0c:3a:0a:21:24:0f:0b:6a:5c:21:bc:11:23:64:d9:23:bd:92:
         83:2c:1f:05:4f:9c:6e:d1:90:44:5e:15:a9:dc:4c:30:32:cd:
         2a:f3:7d:97:19:34:69:fb:2b:34:94:4d:3d:36:21:e9:66:9a:
         33:e8:8c:96:36:f1:ae:f6:18:db:2b:c2:4e:0f:2b:ef:ca:bc:
         cb:b2:58:ca:5f:46:84:ba:35:64:67:99:0b:60:56:8d:1f:31:
         03:98:93:9d:66:97:f8:ac:9c:e9:b6:dd:80:44:70:10:fb:8d:
         a6:26:96:07:8f:9b:6c:ab:22:56:52:6e:00:d9:db:39:47:12:
         6f:79:81:f1:f4:8d:86:93:85:44:35:ef:7d:30:8e:0f:40:91:
         e8:6a:0a:bd:0e:53:d2:0f:f1:47:1c:fb:29:29:5d:78:58:87:
         db:77:f8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:13:28 2026 by rpki-client