Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f738c624-bd8b-3e1b-851e-93888bb84d41.roa
File:                     f738c624-bd8b-3e1b-851e-93888bb84d41.roa (raw, json)
Hash identifier:          +lSRFrM6sE+TzQUaeLpNAi9L7xkERssXj2yGCHRxg50=
Subject key identifier:   F1:D6:9D:DE:2E:9E:E8:51:0D:AE:A4:E2:22:24:80:E2:A7:A6:F9:6F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E5084A92F17BFB7138B176380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f738c624-bd8b-3e1b-851e-93888bb84d41.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        172.70.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:a9:2f:17:bf:b7:13:8b:17:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=ae984d38-c0ce-44b7-a79a-41520fdf2c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:93:3c:99:9a:61:ca:c5:16:53:60:a8:98:5d:
                    24:40:b8:2f:55:16:fd:51:c9:b1:55:11:cd:b4:43:
                    49:2d:cf:a4:25:94:9a:73:f5:18:08:20:22:65:90:
                    e2:56:22:cb:ec:f1:16:2a:64:e6:d8:64:f8:90:f2:
                    12:98:69:f0:51:a5:b9:7e:cb:e1:a9:b1:b2:d2:91:
                    f5:25:a9:b8:70:1b:82:e5:e8:dd:ff:bf:87:0e:4d:
                    9e:43:17:1c:bf:20:9b:68:00:46:bc:4b:44:5a:cb:
                    f7:1d:c7:c0:02:4d:2c:f4:14:d7:b0:db:ab:eb:41:
                    02:8a:00:0d:c4:82:ac:92:58:f3:c9:81:ef:1d:74:
                    8b:0c:03:96:1b:1a:39:b7:6a:af:8d:4b:a4:47:93:
                    b5:10:91:ef:fc:00:fd:7c:00:7a:7e:e1:35:f1:67:
                    15:8e:3c:aa:f0:7d:5d:76:f7:b6:69:33:8a:1e:03:
                    3f:d6:91:7a:98:a5:0f:07:54:02:df:1c:28:bc:30:
                    d9:5f:2b:54:16:1d:1f:cc:75:40:fb:f8:76:89:8b:
                    83:98:f2:be:f1:b9:be:c1:2d:41:a6:89:79:f5:c0:
                    2e:17:2d:00:8a:a2:a8:0f:35:a8:68:fb:c8:5c:6c:
                    4e:1d:18:01:e2:cf:88:46:0f:cb:cc:fb:5e:4b:00:
                    2e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D6:9D:DE:2E:9E:E8:51:0D:AE:A4:E2:22:24:80:E2:A7:A6:F9:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f738c624-bd8b-3e1b-851e-93888bb84d41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:6a:22:fa:16:23:40:b8:f3:99:d0:80:26:f1:04:30:fc:f4:
         79:62:fa:e3:61:7c:c6:b3:1b:01:75:37:52:d8:8d:84:f5:90:
         e6:4b:25:eb:0e:4a:38:fa:79:7e:6d:c4:2b:1a:93:51:45:2d:
         72:39:f9:ec:9f:de:75:dd:98:49:c4:38:a5:65:f4:b3:fc:ce:
         71:ec:23:6d:a5:48:0c:b9:2c:72:7a:06:01:a8:5f:09:07:62:
         45:a3:b9:4d:8e:de:28:9c:1c:3a:cd:eb:c8:da:c3:41:87:53:
         dd:32:5a:bf:fb:56:94:b2:19:21:87:9d:5c:7d:85:8a:df:d8:
         87:9e:51:61:b7:d9:be:6d:87:7f:13:2e:b1:ae:fb:f8:54:a0:
         66:ee:7f:e0:f9:54:d7:8c:88:c2:51:24:99:17:e6:ff:a4:a2:
         1c:9d:c6:7e:ba:5d:cc:de:52:3e:68:69:e6:61:0d:8c:ad:18:
         ce:b7:02:67:f9:95:cf:ff:63:42:5c:fd:c3:a1:c2:70:e7:72:
         3e:eb:92:20:ce:eb:59:c3:e5:0d:d1:e1:aa:45:37:3a:ef:39:
         23:b0:cf:f2:09:eb:5d:e0:bc:1c:be:8d:a6:8d:3a:92:f4:72:
         2f:3f:1d:40:f4:ef:b4:69:63:76:60:05:9e:d8:df:8c:84:4c:
         93:f3:5c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:49:12 2026 by rpki-client