Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aabf019e-0a17-3f63-99eb-839361db408e.roa
File:                     aabf019e-0a17-3f63-99eb-839361db408e.roa (raw, json)
Hash identifier:          xqTz4YLNvTsXNC6xg2S3KyFrDGZNXuKjdDXgZHz6CcE=
Subject key identifier:   74:C6:19:5D:9B:CC:79:02:A2:D3:DE:ED:D2:B0:32:38:EA:1A:5E:44
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4C54A9D4E15BC2FA134ED720
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aabf019e-0a17-3f63-99eb-839361db408e.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     13335
IP address blocks:        172.68.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:a9:d4:e1:5b:c2:fa:13:4e:d7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=e2c4f108-a7ff-462f-a1c5-97eedb55d149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4d:3f:f6:e2:72:b8:72:14:d4:a9:18:76:d2:
                    e1:f1:c5:cd:80:b1:fb:de:7c:31:c6:c4:02:80:9a:
                    da:67:a3:b5:1f:2c:e4:af:b2:e9:1d:30:2c:49:40:
                    4b:14:d7:6a:4b:c1:fc:9d:10:17:86:92:e8:17:77:
                    93:02:70:1a:86:67:01:2e:0d:27:7b:2f:79:d8:23:
                    fd:c6:52:38:b1:86:f5:b3:34:d7:76:a0:c8:bf:94:
                    e4:5a:c8:78:bb:ac:d9:42:90:e9:f0:12:f5:5b:a8:
                    ed:6e:61:4d:37:bd:59:f3:40:ee:2c:35:9e:3b:c7:
                    54:03:31:27:d3:e5:5f:69:3d:1d:46:e8:ac:9e:42:
                    3b:20:55:3d:75:65:37:8e:89:fc:6c:93:a9:8a:8c:
                    b1:9c:ed:07:2b:0d:d7:28:a7:84:56:3e:ef:ea:2b:
                    97:65:87:a9:68:2b:b4:49:8d:69:3d:b8:5b:3c:6a:
                    88:4b:e4:96:e8:42:32:6f:f2:28:fb:0b:1a:ee:0c:
                    97:8e:e2:86:b7:61:f8:f0:5d:18:4a:27:19:f5:57:
                    6c:71:15:65:f0:17:93:10:11:cc:fb:aa:3e:f1:94:
                    c1:93:c6:30:af:00:c4:00:b0:7b:03:6f:fd:38:16:
                    8f:71:fa:43:a8:9c:1a:6a:45:48:cc:c8:07:e5:8c:
                    6d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C6:19:5D:9B:CC:79:02:A2:D3:DE:ED:D2:B0:32:38:EA:1A:5E:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aabf019e-0a17-3f63-99eb-839361db408e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:e7:dd:d9:ac:45:1e:f8:28:d9:03:d0:39:53:85:5c:7d:49:
         fc:ce:03:9d:d3:0c:16:09:2f:27:1a:5a:da:01:1b:6b:7d:ec:
         ee:7e:08:e8:ad:ab:2b:77:e3:d0:5e:09:c4:76:2e:e8:e1:47:
         5c:db:30:c9:e9:eb:aa:18:d7:46:84:7a:f3:a0:35:17:01:e1:
         3e:cd:55:a2:fe:86:90:f5:92:43:89:5f:73:65:d0:a5:b5:e2:
         ef:59:e8:4e:38:fd:c0:66:51:64:85:35:79:63:28:bc:dc:1d:
         e2:e0:17:37:b8:81:87:a4:55:df:08:8e:02:cb:be:25:eb:17:
         ab:ac:f4:79:50:f9:fd:f3:b1:3e:f1:76:d2:6e:58:7c:b7:78:
         dd:82:48:d1:08:f8:5a:b8:73:65:be:a6:43:01:d7:ed:d4:d0:
         02:37:8f:33:d5:62:fe:59:c6:02:bd:97:6c:01:2a:cf:3b:15:
         f6:26:27:95:55:6f:cb:04:69:2b:eb:c3:66:5d:3a:58:07:9e:
         8d:1f:1e:33:64:05:4e:72:1b:2d:d4:ba:d9:50:a2:14:37:f7:
         64:6c:07:8e:12:ec:30:37:09:86:eb:6c:2d:a9:3e:de:12:30:
         47:fd:6e:60:26:e4:cd:f6:e9:60:09:56:af:3b:fa:f9:6b:0b:
         ee:50:a2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:28:07 2026 by rpki-client