Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8b16e37-8abe-3d38-8f92-6823bb0e66e4.roa
File:                     a8b16e37-8abe-3d38-8f92-6823bb0e66e4.roa (raw, json)
Hash identifier:          WclLGrAcLYXcQz8g64qd5TfbbB7Il1rQqhNKN01YqNE=
Subject key identifier:   2E:25:8B:28:EB:F1:78:50:19:9A:3F:83:A8:4F:B3:27:85:27:2D:38
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC8766A0D683E9E02EA198350
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8b16e37-8abe-3d38-8f92-6823bb0e66e4.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        172.68.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:6a:0d:68:3e:9e:02:ea:19:83:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=082af3ae-fe97-451d-97c2-122585bc59e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:23:5d:50:f9:d0:31:f7:3e:b2:57:80:3c:dc:
                    ba:28:83:bf:c1:36:ae:2a:f6:34:f0:f2:66:93:4f:
                    dd:60:b7:9b:44:50:12:c3:65:df:b6:19:4e:5f:92:
                    60:65:21:f2:59:0d:ac:47:7f:c3:83:38:bc:ad:87:
                    21:93:a6:90:47:99:f8:8d:e6:c3:01:e4:c5:65:3d:
                    b7:13:04:8d:49:3d:95:4f:e0:1c:93:94:ae:72:75:
                    4c:ed:16:d6:ec:b0:5a:52:ed:b6:de:06:c8:20:8d:
                    44:e7:81:ff:00:51:85:f6:c1:7c:34:8d:7d:4a:74:
                    ca:59:ac:3d:e7:e5:c6:d0:34:60:2d:a7:8c:8e:c5:
                    c6:06:39:6a:e5:60:a5:f1:0c:6d:2c:80:ec:46:d5:
                    1b:84:85:8f:09:2f:05:5d:75:1c:c9:8d:04:8a:99:
                    ba:76:e3:14:82:20:91:3d:a4:a1:ae:3e:a4:bd:b1:
                    53:22:98:9c:c7:b5:72:9f:85:1c:0c:1d:4b:32:72:
                    cb:ca:bf:b5:67:61:c9:89:74:81:cc:5e:5b:27:58:
                    88:11:f1:a0:9d:24:ee:95:15:e2:a5:27:d2:f9:48:
                    80:d1:e4:4f:54:3c:0b:85:0e:c4:dc:d7:70:78:44:
                    32:e9:6d:6c:d8:7e:51:70:aa:48:93:25:a3:ff:a7:
                    6f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:25:8B:28:EB:F1:78:50:19:9A:3F:83:A8:4F:B3:27:85:27:2D:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8b16e37-8abe-3d38-8f92-6823bb0e66e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:83:ae:78:df:90:38:61:9f:be:25:18:3a:8b:2f:1d:b8:73:
         92:a3:38:f8:30:e1:e6:85:c5:37:b5:1f:48:46:78:47:35:0c:
         ad:5e:54:38:23:30:e7:34:62:e0:90:50:4d:58:cd:2a:c4:b6:
         43:05:08:c6:f7:2f:7c:56:31:cf:e4:2e:bb:95:27:c9:5e:f6:
         11:c4:26:0d:4c:ad:c4:79:b7:1f:e8:b1:66:d1:49:5b:f2:24:
         ba:45:0b:a3:3b:b0:b5:10:21:69:84:84:ae:c6:d0:9e:3e:e3:
         35:56:f1:08:9a:ad:1a:33:4d:3c:bf:11:cf:fd:24:99:69:87:
         01:f4:a1:04:36:4a:82:90:01:90:c7:db:cd:db:e0:10:87:26:
         b4:f2:d3:bc:86:3b:25:62:19:53:80:f0:95:d3:6a:03:d1:e5:
         c2:3d:4f:49:bd:63:69:20:73:23:58:84:18:78:b2:47:c6:cd:
         b6:5f:03:a8:97:10:4d:37:9a:4e:d1:c0:37:bd:60:a1:49:65:
         88:2d:13:e0:c9:ea:d6:f0:f9:cd:e6:87:c2:63:66:e6:fe:58:
         c9:51:8d:79:25:78:9f:de:40:d4:80:2c:56:19:e3:78:27:8b:
         5a:8b:43:2e:8d:34:bb:6f:94:78:79:ee:07:f0:b1:c9:9f:a8:
         1b:df:0a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:33:14 2025 by rpki-client