Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/393be6c5-53ae-3d91-ac3d-e8e58fbc6dea.roa
File:                     393be6c5-53ae-3d91-ac3d-e8e58fbc6dea.roa (raw, json)
Hash identifier:          F1wRmPMAWduZMy2OnFGS/lPhJMc0tYL6wBQRDF8oyTw=
Subject key identifier:   F5:17:B4:A6:D7:5D:83:8D:2F:08:03:82:5B:3F:D7:44:60:AF:70:96
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584DC565AA9CCB746F628EF7EC80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/393be6c5-53ae-3d91-ac3d-e8e58fbc6dea.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     13335
IP address blocks:        172.70.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:aa:9c:cb:74:6f:62:8e:f7:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=216c4984-10cb-4336-8185-a03beae4f782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b9:db:d1:a8:b1:da:d2:6f:12:77:cb:db:71:
                    12:b2:3f:77:89:64:39:66:cd:b6:f9:c7:48:4d:15:
                    5a:d9:18:97:2d:3f:84:a2:1b:4f:02:0b:ca:19:da:
                    88:3c:d0:ed:4a:84:aa:aa:4f:02:05:33:1a:9f:19:
                    5e:de:c5:8a:d7:84:28:1e:a6:6f:80:69:d6:9b:5b:
                    00:94:4f:3e:d8:e9:26:22:70:30:d7:1d:94:82:4b:
                    8e:85:bc:60:07:1c:fc:96:73:d7:ab:0c:91:62:d3:
                    5b:0b:f4:8c:9a:bb:82:d1:45:72:36:9f:10:3b:f1:
                    73:58:b9:18:9b:6f:af:ca:ed:32:e8:07:cb:1a:18:
                    b4:04:af:e5:d0:f1:2b:b2:90:43:49:ed:58:c2:7f:
                    5c:54:62:7c:6c:00:26:f0:90:ff:f0:1c:9c:98:31:
                    6a:a4:01:88:04:a8:f9:95:43:d2:e5:1f:e5:fd:62:
                    65:f9:d9:ed:bf:7a:03:93:fa:97:60:69:58:3b:93:
                    3d:f1:2f:d5:2d:92:55:6f:81:74:a8:b5:a1:3d:76:
                    fa:89:68:97:3f:57:53:46:fb:02:43:93:e1:d5:c0:
                    2e:fd:04:41:14:dc:a8:8e:af:cb:0d:b9:35:05:13:
                    0d:56:0e:e5:59:c6:89:1c:ba:64:cd:08:81:51:c7:
                    79:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:17:B4:A6:D7:5D:83:8D:2F:08:03:82:5B:3F:D7:44:60:AF:70:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/393be6c5-53ae-3d91-ac3d-e8e58fbc6dea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:f5:30:6e:7b:1d:0b:73:2c:5e:bc:e3:ac:c3:85:4d:54:8d:
         f8:ba:fc:53:05:a0:be:7e:ef:9d:72:77:06:14:7e:4f:4a:b1:
         47:b7:17:ef:d0:2e:75:77:e7:e7:c2:2e:1e:80:70:88:4d:91:
         e2:eb:84:f5:b6:36:d3:63:7c:24:4a:d3:fa:12:67:fa:f8:50:
         b4:83:2a:8b:ef:79:47:93:1c:33:e9:1f:3e:16:78:53:e1:f4:
         26:bc:4a:b6:b4:76:88:f9:e6:27:63:dc:85:69:09:55:e1:0e:
         24:e0:e2:d5:4f:45:5d:25:78:ec:60:01:a0:ce:6b:98:b9:94:
         6d:a3:a3:0a:ac:3c:50:4d:b3:b0:1c:9c:2f:05:0f:71:c9:f6:
         31:46:ea:f9:ce:a9:a3:7d:65:27:51:37:6b:50:87:5a:1d:93:
         f3:70:58:be:a0:9a:2c:0d:58:8f:0b:c4:76:2b:ee:47:bc:2b:
         03:a6:ff:7d:c2:d3:85:b0:76:d0:4a:5d:64:a9:18:af:bd:1a:
         05:2b:5f:89:73:1d:33:a2:6e:8c:5f:55:5a:d7:a3:5a:27:57:
         5c:af:bd:8c:83:07:15:75:f8:47:7f:2b:48:65:48:1a:02:1e:
         a3:0c:ea:03:4d:bc:9a:bc:d8:61:74:e5:42:8c:0b:b5:e2:11:
         c9:ef:56:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3FZaqcy3RvYo737IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk
MjE2YzQ5ODQtMTBjYi00MzM2LTgxODUtYTAzYmVhZTRmNzgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbnb0aix2tJvEnfL23ESsj93iWQ5Zs22+cdI
TRVa2RiXLT+EohtPAgvKGdqIPNDtSoSqqk8CBTManxle3sWK14QoHqZvgGnWm1sA
lE8+2OkmInAw1x2UgkuOhbxgBxz8lnPXqwyRYtNbC/SMmruC0UVyNp8QO/FzWLkY
m2+vyu0y6AfLGhi0BK/l0PErspBDSe1Ywn9cVGJ8bAAm8JD/8BycmDFqpAGIBKj5
lUPS5R/l/WJl+dntv3oDk/qXYGlYO5M98S/VLZJVb4F0qLWhPXb6iWiXP1dTRvsC
Q5Ph1cAu/QRBFNyojq/LDbk1BRMNVg7lWcaJHLpkzQiBUcd5FwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPUXtKbXXYONLwgDgls/10Rgr3CWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzkzYmU2YzUtNTNhZS0z
ZDkxLWFjM2QtZThlNThmYmM2ZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAb1MG57HQtzLF6846zDhU1Ujfi6/FMFoL5+751ydwYUfk9KsUe3F+/Q
LnV35+fCLh6AcIhNkeLrhPW2NtNjfCRK0/oSZ/r4ULSDKovveUeTHDPpHz4WeFPh
9Ca8Sra0doj55idj3IVpCVXhDiTg4tVPRV0leOxgAaDOa5i5lG2jowqsPFBNs7Ac
nC8FD3HJ9jFG6vnOqaN9ZSdRN2tQh1odk/NwWL6gmiwNWI8LxHYr7ke8KwOm/33C
04WwdtBKXWSpGK+9GgUrX4lzHTOiboxfVVrXo1onV1yvvYyDBxV1+Ed/K0hlSBoC
HqMM6gNNvJq82GF05UKMC7XiEcnvVj4=
-----END CERTIFICATE-----
Generated at Sat May 9 08:09:45 2026 by rpki-client