Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/55114207-8244-3a39-b847-bfce3f266450.roa
File:                     55114207-8244-3a39-b847-bfce3f266450.roa (raw, json)
Hash identifier:          b6uTbDZHS1iBGIFr5J/faiPQ6WZL3AMH2jk5+k6V/qs=
Subject key identifier:   EB:EF:02:1E:CA:A8:44:25:70:86:66:1A:49:04:3D:1D:8F:94:02:BB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E91FB043AB2E6DE735D832A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/55114207-8244-3a39-b847-bfce3f266450.roa
Signing time:             Tue 20 May 2025 01:00:49 +0000
ROA not before:           Tue 20 May 2025 01:00:49 +0000
ROA not after:            Mon 18 Aug 2025 01:00:49 +0000
asID:                     13335
IP address blocks:        172.68.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e9:1f:b0:43:ab:2e:6d:e7:35:d8:32:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 20 01:00:49 2025 GMT
            Not After : Aug 18 01:00:49 2025 GMT
        Subject: CN=127381cd-b56a-43a2-97d9-d956f8640de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:db:48:5a:f5:ac:c5:df:d5:12:b1:ea:36:8d:
                    6d:d3:95:e7:da:93:34:30:23:d6:c2:71:2b:d8:db:
                    e9:79:3c:f0:2d:74:26:d8:9c:96:cb:43:14:54:fa:
                    c2:89:90:27:a6:28:ba:bc:6c:7d:d6:a0:43:01:0c:
                    ca:b4:5c:32:29:76:a6:af:6f:28:76:3b:e8:64:1d:
                    64:47:fa:33:a9:76:71:45:60:bd:fa:9e:51:79:88:
                    32:83:ed:94:b9:f5:bb:c5:26:29:80:76:60:c1:82:
                    65:d5:e5:c2:83:98:b6:82:d8:f6:7a:b3:50:4e:8f:
                    88:67:78:84:b4:f8:65:3d:46:3f:55:60:90:3e:7e:
                    5c:7a:36:c5:03:8c:25:d2:8d:b0:3b:ef:fb:37:19:
                    1f:82:a5:29:62:7f:e1:71:0c:0b:05:a7:5f:2e:e5:
                    94:9f:47:d4:dc:a1:77:5c:df:87:45:69:06:e3:6a:
                    c0:76:0f:24:2b:d7:63:f2:aa:a0:c6:e1:02:fe:21:
                    6f:df:de:d7:ed:4b:a5:fd:5c:64:e4:8b:20:a5:b2:
                    d8:ad:7c:21:33:26:e1:49:d3:27:1a:55:ea:ef:32:
                    72:07:3d:b7:7f:c5:37:cf:c2:79:e5:a6:96:14:ae:
                    41:e1:94:f0:ce:a1:db:e1:d4:d0:27:b1:f6:e2:b0:
                    a7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EF:02:1E:CA:A8:44:25:70:86:66:1A:49:04:3D:1D:8F:94:02:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/55114207-8244-3a39-b847-bfce3f266450.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:6c:0d:b8:68:98:e3:18:ee:17:47:1b:6a:26:fe:53:0b:7a:
         3b:ee:43:0b:bb:0d:06:88:b0:54:a5:60:8a:b1:f0:e3:d6:77:
         14:87:60:1d:d8:f8:4f:02:52:09:c7:46:85:88:fa:54:b3:8a:
         19:e4:4d:d3:17:99:d6:48:64:a4:d9:e9:e8:b1:ab:ba:ef:bd:
         aa:51:01:47:e2:a5:fe:97:65:cc:f7:97:19:e5:08:c2:40:b8:
         b9:a6:8c:e5:98:06:f6:36:2e:6c:32:9f:85:5b:14:cf:1c:47:
         48:4d:8e:1f:ed:3c:f7:29:fe:b0:ed:6f:79:d9:4e:86:f5:04:
         2f:b7:67:6d:de:33:eb:7c:7d:5f:aa:0b:86:ad:ea:72:df:c7:
         10:82:21:91:81:dd:1b:91:c3:0c:b9:71:82:5b:32:9c:a9:56:
         09:94:ac:25:0a:c3:c2:5c:6e:b9:7f:17:8a:f1:d8:d4:fa:bc:
         63:d5:b4:f9:a4:f6:68:94:39:65:18:7a:9c:7c:42:c9:5d:0b:
         10:8f:d0:d8:c7:f4:6d:25:e4:07:09:4f:e3:23:ce:db:e2:ec:
         0d:63:25:68:6d:6a:8b:14:68:76:94:b8:eb:39:ed:d9:c2:78:
         0e:12:e8:e1:6b:3e:ea:3e:c6:67:96:f0:6b:66:98:f6:a6:51:
         d2:37:b0:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH7BDqy5t5zXYMqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk
MTI3MzgxY2QtYjU2YS00M2EyLTk3ZDktZDk1NmY4NjQwZGU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9tIWvWsxd/VErHqNo1t05Xn2pM0MCPWwnEr
2NvpeTzwLXQm2JyWy0MUVPrCiZAnpii6vGx91qBDAQzKtFwyKXamr28odjvoZB1k
R/ozqXZxRWC9+p5ReYgyg+2UufW7xSYpgHZgwYJl1eXCg5i2gtj2erNQTo+IZ3iE
tPhlPUY/VWCQPn5cejbFA4wl0o2wO+/7NxkfgqUpYn/hcQwLBadfLuWUn0fU3KF3
XN+HRWkG42rAdg8kK9dj8qqgxuEC/iFv397X7Uul/Vxk5IsgpbLYrXwhMybhSdMn
GlXq7zJyBz23f8U3z8J55aaWFK5B4ZTwzqHb4dTQJ7H24rCntQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOvvAh7KqEQlcIZmGkkEPR2PlAK7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTUxMTQyMDctODI0NC0z
YTM5LWI4NDctYmZjZTNmMjY2NDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADBsDbhomOMY7hdHG2om/lMLejvuQwu7DQaIsFSlYIqx8OPWdxSHYB3Y
+E8CUgnHRoWI+lSzihnkTdMXmdZIZKTZ6eixq7rvvapRAUfipf6XZcz3lxnlCMJA
uLmmjOWYBvY2Lmwyn4VbFM8cR0hNjh/tPPcp/rDtb3nZTob1BC+3Z23eM+t8fV+q
C4at6nLfxxCCIZGB3RuRwwy5cYJbMpypVgmUrCUKw8Jcbrl/F4rx2NT6vGPVtPmk
9miUOWUYepx8QsldCxCP0NjH9G0l5AcJT+Mjztvi7A1jJWhtaosUaHaUuOs57dnC
eA4S6OFrPuo+xmeW8GtmmPamUdI3sPg=
-----END CERTIFICATE-----
Generated at Sun Jun 8 19:16:16 2025 by rpki-client