Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5b9e27da-f59b-31dd-b05f-a9fe93397a3a.roa
File:                     5b9e27da-f59b-31dd-b05f-a9fe93397a3a.roa (raw, json)
Hash identifier:          Dh2O0yT+KWK1/RYub5Q2b9GG7XY+L4Y5lQ8jg4j7TI0=
Subject key identifier:   A1:FD:3E:F5:ED:7C:88:FD:24:9E:18:E3:AD:05:73:22:EE:D8:00:A3
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EC0A70DCE324796EF34475E2F
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5b9e27da-f59b-31dd-b05f-a9fe93397a3a.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     14789
IP address blocks:        172.69.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:0d:ce:32:47:96:ef:34:47:5e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=8280cd66-49e3-4e63-b1cf-1d08f06c0220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:41:18:61:b0:b6:80:33:3a:9b:0e:9e:70:10:
                    46:26:4e:db:67:b6:15:7e:ba:88:44:b9:d7:0f:6a:
                    91:91:34:15:90:14:12:af:82:4e:37:ca:ad:eb:4f:
                    04:cf:a7:39:c0:59:66:74:ac:f3:66:9d:5b:fe:16:
                    63:3a:00:33:80:f9:e2:f2:57:34:9f:b1:8d:bc:ad:
                    2d:2f:d3:c1:9e:40:b5:34:39:79:a7:1f:92:0e:9f:
                    dd:23:0a:f0:d2:c5:05:1f:81:04:f8:d1:2d:7d:a0:
                    12:80:f8:92:b1:d7:47:18:4a:4c:55:14:f3:bc:ca:
                    43:67:9a:02:b2:dc:56:a5:2d:ca:34:cd:b3:68:03:
                    11:50:5d:84:d7:b4:83:03:16:ac:57:d6:db:b4:d6:
                    21:df:91:38:b8:0d:59:1b:bd:1d:46:cd:09:0c:f9:
                    a6:f0:26:12:fc:bb:5d:b3:a7:fc:ef:5c:ac:a4:aa:
                    2f:7c:29:86:23:ed:21:55:25:ac:ea:17:71:0a:46:
                    88:d9:dd:0e:db:bf:d0:25:35:c5:4e:c7:8e:c6:1e:
                    54:8f:c1:f4:7d:94:5f:9a:7b:9b:3f:a0:01:45:7e:
                    eb:83:6f:66:e9:96:28:45:cd:f9:e0:2a:a8:56:10:
                    71:0c:24:dc:2e:e5:74:d4:c6:46:ff:17:34:fc:90:
                    84:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FD:3E:F5:ED:7C:88:FD:24:9E:18:E3:AD:05:73:22:EE:D8:00:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5b9e27da-f59b-31dd-b05f-a9fe93397a3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:80:93:f5:c0:60:ac:ba:0b:d3:53:96:64:04:4f:9f:f2:1b:
         f7:2e:4c:92:f2:0c:e7:66:d4:8e:8c:00:f5:41:b2:fe:a2:2b:
         d8:15:25:93:60:d4:5e:be:49:1d:1f:1e:84:97:38:aa:85:15:
         df:83:b9:42:e6:b2:65:d8:b4:82:fa:23:ad:d3:ba:31:c0:bc:
         95:8d:3b:58:c0:d8:6a:42:ee:b8:43:e4:3e:f4:33:36:cd:3f:
         99:c6:b6:92:10:a1:31:a4:9b:80:3c:0b:b2:79:7c:cb:ba:e0:
         f2:59:30:5d:e3:73:9b:1c:82:7a:97:fb:83:ce:3c:aa:6d:6d:
         7b:29:8e:3b:c2:c9:5b:be:93:a8:02:ed:ee:3a:02:bd:08:24:
         df:de:5f:7f:a2:c7:41:a6:e7:48:32:e3:4d:45:c9:0f:fb:d1:
         b9:76:e5:81:a5:a3:5f:da:42:c8:4c:1c:4d:21:41:99:16:3a:
         7e:06:5c:88:30:1c:de:00:2e:7a:fb:03:aa:93:96:bf:3c:07:
         ec:34:7e:13:ea:f1:95:4d:1a:2c:fe:55:0c:4f:15:ab:c6:8d:
         dc:90:02:16:58:f6:ae:3f:5c:22:d6:d2:60:d3:3c:0b:98:ec:
         1b:a2:41:13:7d:6d:da:8a:54:7e:79:b0:99:e3:e2:23:ac:af:
         f4:63:db:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Apw3OMkeW7zRHXi8wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk
ODI4MGNkNjYtNDllMy00ZTYzLWIxY2YtMWQwOGYwNmMwMjIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEEYYbC2gDM6mw6ecBBGJk7bZ7YVfrqIRLnX
D2qRkTQVkBQSr4JON8qt608Ez6c5wFlmdKzzZp1b/hZjOgAzgPni8lc0n7GNvK0t
L9PBnkC1NDl5px+SDp/dIwrw0sUFH4EE+NEtfaASgPiSsddHGEpMVRTzvMpDZ5oC
stxWpS3KNM2zaAMRUF2E17SDAxasV9bbtNYh35E4uA1ZG70dRs0JDPmm8CYS/Ltd
s6f871yspKovfCmGI+0hVSWs6hdxCkaI2d0O27/QJTXFTseOxh5Uj8H0fZRfmnub
P6ABRX7rg29m6ZYoRc354CqoVhBxDCTcLuV01MZG/xc0/JCESQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKH9PvXtfIj9JJ4Y460FcyLu2ACjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWI5ZTI3ZGEtZjU5Yi0z
MWRkLWIwNWYtYTlmZTkzMzk3YTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJWAk/XAYKy6C9NTlmQET5/yG/cuTJLyDOdm1I6MAPVBsv6iK9gVJZNg
1F6+SR0fHoSXOKqFFd+DuULmsmXYtIL6I63TujHAvJWNO1jA2GpC7rhD5D70MzbN
P5nGtpIQoTGkm4A8C7J5fMu64PJZMF3jc5scgnqX+4POPKptbXspjjvCyVu+k6gC
7e46Ar0IJN/eX3+ix0Gm50gy401FyQ/70bl25YGlo1/aQshMHE0hQZkWOn4GXIgw
HN4ALnr7A6qTlr88B+w0fhPq8ZVNGiz+VQxPFavGjdyQAhZY9q4/XCLW0mDTPAuY
7BuiQRN9bdqKVH55sJnj4iOsr/Rj2wU=
-----END CERTIFICATE-----
Generated at Sat Aug 8 02:56:48 2026 by rpki-client