Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/370063de-93e7-3d74-a5dd-61306e4d2610.roa
File:                     370063de-93e7-3d74-a5dd-61306e4d2610.roa (raw, json)
Hash identifier:          W6+X/O5xdJG7dD+Qb0r+2zVTGFJxkCNNLWS62ITTfmw=
Subject key identifier:   7C:B1:E5:5F:98:78:1C:FF:AB:77:43:A8:73:0C:98:26:55:39:D4:44
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BABFD335EFFD3126117885640
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/370063de-93e7-3d74-a5dd-61306e4d2610.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     13335
IP address blocks:        172.69.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:33:5e:ff:d3:12:61:17:88:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=d2420307-87b4-4057-b2ac-64c616e0ad6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f1:70:44:8b:b4:b4:61:6f:66:1c:af:b3:c3:
                    ca:83:3b:8d:7d:16:63:69:65:f6:ec:21:88:f6:fc:
                    76:02:ae:fa:d0:0b:82:27:89:5e:19:73:50:83:f5:
                    f4:43:50:83:aa:3e:d0:62:94:24:71:f0:34:e7:de:
                    43:1f:f2:b3:c7:20:17:9f:c3:5a:06:f9:d4:6b:4a:
                    e7:8e:5b:f0:2e:d8:59:ae:8a:a3:48:c3:fe:a4:86:
                    d7:71:79:2d:92:57:6b:17:19:8b:d9:8a:a2:3f:bc:
                    3b:b4:9d:52:cb:d6:94:89:e7:1a:f1:26:79:42:3e:
                    e9:e4:3b:67:fa:0c:e5:57:d2:de:a1:ba:b5:cd:07:
                    55:59:ea:28:91:3e:58:53:cd:6a:7a:26:9c:9d:f3:
                    e0:96:86:78:45:2d:26:fd:81:ee:57:df:70:91:b1:
                    3c:a9:9f:b1:83:df:37:e4:f1:0e:be:1b:35:a0:8f:
                    ae:75:d4:9a:7b:a0:b9:ba:87:85:65:28:68:5b:83:
                    03:c4:7c:39:3c:ac:22:39:c7:dc:24:7b:26:c7:66:
                    f4:27:9b:5e:71:8e:58:25:5c:e7:5f:e9:29:9d:51:
                    14:4f:50:1d:97:1c:ae:59:ab:f0:57:ee:8f:ee:1b:
                    c3:77:76:99:ad:16:92:4e:be:08:55:ea:71:85:e7:
                    48:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B1:E5:5F:98:78:1C:FF:AB:77:43:A8:73:0C:98:26:55:39:D4:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/370063de-93e7-3d74-a5dd-61306e4d2610.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:bd:d2:7c:57:a6:66:be:9b:b9:f3:38:b6:f5:e1:d6:3b:f4:
         9a:07:f6:e6:0f:ae:a4:86:f1:f7:7f:ea:31:8c:8e:40:b4:a0:
         f7:e3:b9:1f:76:67:51:03:ab:6d:51:27:64:2a:36:f8:4c:dd:
         30:f9:ae:40:58:11:87:65:49:c6:63:1e:d7:96:47:d3:c6:82:
         d8:67:16:2e:03:99:51:34:bd:0b:cb:5c:18:4a:78:f3:e4:6a:
         89:f8:4d:71:ce:46:62:c1:4a:05:a6:f0:8e:d5:17:b1:ff:bb:
         f7:9f:1f:f6:67:a5:a3:bc:8a:e0:d0:db:68:38:f7:1c:0f:b1:
         d3:d3:5f:ee:6a:42:78:79:cf:6a:11:c3:67:6a:60:41:a4:dd:
         cf:65:0d:2f:f5:75:61:e5:d8:0a:84:fa:90:14:34:c2:44:aa:
         11:57:f4:35:ce:43:c2:1d:88:6a:4e:ef:da:21:61:bc:7c:90:
         b5:ed:f4:bf:7c:e9:86:f6:c9:ae:84:04:eb:86:ed:13:8f:65:
         7b:ed:27:95:3f:ca:da:07:ef:fa:ab:08:70:8d:4b:dc:05:06:
         37:22:65:13:9e:06:b9:89:c0:fa:8b:7e:bf:3e:0a:f3:04:4e:
         81:7e:05:6a:1d:67:b4:60:c6:bc:79:33:60:96:e9:fd:3e:b4:
         1c:47:cf:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/TNe/9MSYReIVkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk
ZDI0MjAzMDctODdiNC00MDU3LWIyYWMtNjRjNjE2ZTBhZDZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofFwRIu0tGFvZhyvs8PKgzuNfRZjaWX27CGI
9vx2Aq760AuCJ4leGXNQg/X0Q1CDqj7QYpQkcfA0595DH/KzxyAXn8NaBvnUa0rn
jlvwLthZroqjSMP+pIbXcXktkldrFxmL2YqiP7w7tJ1Sy9aUieca8SZ5Qj7p5Dtn
+gzlV9Leobq1zQdVWeookT5YU81qeiacnfPgloZ4RS0m/YHuV99wkbE8qZ+xg983
5PEOvhs1oI+uddSae6C5uoeFZShoW4MDxHw5PKwiOcfcJHsmx2b0J5tecY5YJVzn
X+kpnVEUT1AdlxyuWavwV+6P7hvDd3aZrRaSTr4IVepxhedI/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHyx5V+YeBz/q3dDqHMMmCZVOdREMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzcwMDYzZGUtOTNlNy0z
ZDc0LWE1ZGQtNjEzMDZlNGQyNjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEVAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEm90nxXpma+m7nzOLb14dY79JoH9uYPrqSG8fd/6jGMjkC0oPfjuR92
Z1EDq21RJ2QqNvhM3TD5rkBYEYdlScZjHteWR9PGgthnFi4DmVE0vQvLXBhKePPk
aon4TXHORmLBSgWm8I7VF7H/u/efH/ZnpaO8iuDQ22g49xwPsdPTX+5qQnh5z2oR
w2dqYEGk3c9lDS/1dWHl2AqE+pAUNMJEqhFX9DXOQ8IdiGpO79ohYbx8kLXt9L98
6Yb2ya6EBOuG7ROPZXvtJ5U/ytoH7/qrCHCNS9wFBjciZROeBrmJwPqLfr8+CvME
ToF+BWodZ7Rgxrx5M2CW6f0+tBxHzyg=
-----END CERTIFICATE-----
Generated at Sat Nov 1 10:02:43 2025 by rpki-client