Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b719df29-7e05-3aa8-b2e0-bfea56043e8f.roa
File:                     b719df29-7e05-3aa8-b2e0-bfea56043e8f.roa (raw, json)
Hash identifier:          /yADGu3p2z6/4jfpSByzvrrqqCP+KU0n9lVE1y3lMpY=
Subject key identifier:   44:10:29:5F:C8:5B:3F:F9:17:60:9D:F2:26:6B:CF:D9:25:1C:04:CF
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E51E9F4A7B16C83FDDD000B00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b719df29-7e05-3aa8-b2e0-bfea56043e8f.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     13335
IP address blocks:        172.70.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:f4:a7:b1:6c:83:fd:dd:00:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=7c8885c8-2aa0-4c04-ab14-0a4b8f919093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:70:b2:49:e3:52:c2:0f:a0:5a:f0:8f:8a:2e:
                    8b:25:d5:f6:9e:fe:3b:3c:e9:23:ec:9c:35:30:42:
                    ef:2a:10:99:d7:99:ca:35:f0:3f:77:0e:aa:bb:e8:
                    37:94:de:34:4d:3e:a5:d7:60:a5:d8:1a:f7:08:af:
                    3a:e3:6f:35:d9:72:b0:3e:4f:60:22:76:28:d1:88:
                    a8:0d:ae:9c:86:7b:76:57:c4:43:31:5b:2f:80:6f:
                    5e:c8:b1:cd:85:51:97:87:f6:62:d1:55:ce:8d:c0:
                    fe:c7:4f:5d:90:df:b3:64:5c:04:1d:15:70:bb:93:
                    0a:2d:34:40:dc:c0:7b:72:d3:c4:58:f9:e9:3a:39:
                    f4:a7:b6:c6:8f:ba:8f:3f:04:49:a0:7a:fd:88:67:
                    31:e2:c1:1f:de:ef:d3:b6:45:cb:b5:8a:80:5e:64:
                    dc:dc:a5:d7:bb:06:51:c5:b9:96:dc:8a:dd:20:e2:
                    57:5e:ea:b9:02:55:f8:7c:f3:33:e2:12:bd:1e:f8:
                    aa:df:f8:ba:ce:7f:b5:fb:ad:cb:69:17:83:0f:25:
                    d8:52:9d:a0:a2:23:47:d2:49:19:9b:6c:87:02:52:
                    9a:97:cc:6a:12:04:56:20:0d:aa:93:f4:d4:b6:df:
                    ac:03:74:56:14:c3:2d:0b:2f:45:98:6b:69:b4:fb:
                    61:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:10:29:5F:C8:5B:3F:F9:17:60:9D:F2:26:6B:CF:D9:25:1C:04:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b719df29-7e05-3aa8-b2e0-bfea56043e8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:1a:34:8d:7d:72:6c:5f:41:76:2e:95:13:a1:8d:5a:57:3d:
         cf:be:9d:75:46:02:0d:cf:64:30:f8:ae:94:74:3c:67:82:54:
         80:41:e1:a4:ac:e0:d9:7d:28:89:42:59:ce:96:9c:a7:f4:53:
         d4:06:df:a5:fd:88:1e:88:51:ee:c9:7e:0d:d7:5e:eb:33:de:
         d1:ea:cf:58:d7:37:01:3c:12:c0:e6:ab:b3:2b:48:8f:84:ba:
         12:c7:8b:bd:14:48:e4:26:0d:30:eb:76:5f:d2:b7:9e:f3:a2:
         3b:48:0a:ef:5e:ad:30:3b:65:c0:8a:42:4c:7b:5d:12:c4:8f:
         90:b9:2f:a2:22:30:a9:c8:fc:cf:07:56:19:6b:aa:89:34:69:
         ea:28:95:a6:f7:ca:ee:54:a9:98:7a:bc:91:b1:53:79:0d:0e:
         33:87:90:ed:3a:ab:f4:57:25:2d:dc:21:5b:e1:15:37:bc:48:
         99:93:6b:b7:0b:32:fa:1a:d2:d0:8e:af:b5:5e:77:d1:1f:64:
         9a:a8:0b:53:13:e1:99:5e:57:59:73:3f:d9:a4:43:3a:66:35:
         84:ed:80:ad:e0:4b:0f:a8:a0:49:2d:6c:49:a3:16:9f:98:91:
         ad:0a:26:6b:02:53:96:df:c1:78:36:a2:cb:b8:3f:9b:1f:c9:
         47:37:d3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:22:22 2026 by rpki-client