Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5be14a37-b219-3c75-8c68-d8a5bc8ec38d.roa
File:                     5be14a37-b219-3c75-8c68-d8a5bc8ec38d.roa (raw, json)
Hash identifier:          FBPaT/dra996bOLrslF8gEgckp5n31Xn93nSDwSQhnQ=
Subject key identifier:   66:02:5A:14:67:62:D7:51:18:50:B8:0C:54:E4:74:AE:58:C0:8F:47
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584B8648E72F59B1D2DA5FEB2FC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5be14a37-b219-3c75-8c68-d8a5bc8ec38d.roa
Signing time:             Wed 15 Oct 2025 00:52:55 +0000
ROA not before:           Wed 15 Oct 2025 00:52:55 +0000
ROA not after:            Tue 13 Jan 2026 01:52:55 +0000
asID:                     13335
IP address blocks:        172.68.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:86:48:e7:2f:59:b1:d2:da:5f:eb:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 15 00:52:55 2025 GMT
            Not After : Jan 13 01:52:55 2026 GMT
        Subject: CN=8bd307f9-7042-4a36-a29d-8ce3a8bf9442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:99:b5:78:d3:78:a9:ff:ca:96:f8:d0:53:24:
                    be:08:e2:e4:22:14:2a:73:07:ff:3e:c8:55:b9:91:
                    1f:e0:02:90:2d:9b:fe:8c:68:f6:44:bc:a8:7e:d6:
                    a6:80:c7:00:5b:a2:fe:b0:df:8c:a1:e2:d1:d2:3c:
                    f6:03:ac:c4:01:24:e2:e1:24:4c:64:d5:0b:76:51:
                    40:87:4c:a9:a5:25:b3:42:08:01:8b:91:cc:9b:fd:
                    e9:46:7a:69:ca:61:20:33:09:56:8b:76:8f:24:62:
                    73:ff:3a:69:f6:a5:07:58:5b:9f:43:d7:21:44:e0:
                    2d:94:0f:8f:9b:3f:b7:fd:57:7f:88:57:60:f4:28:
                    d1:b9:10:68:bb:06:d1:06:52:d5:16:3b:a8:de:88:
                    ef:aa:87:9a:4a:80:7c:b2:16:56:e4:c0:e2:25:c7:
                    62:1d:1c:29:6f:ff:23:61:57:bf:42:f3:41:f2:d5:
                    16:cc:82:03:10:62:4b:0d:ac:e9:9a:28:62:a1:56:
                    7f:84:4e:23:b9:c5:e6:61:f1:7d:e7:28:16:cf:03:
                    0d:a5:1f:de:bd:20:40:a2:9f:7c:fb:ef:83:0b:07:
                    b3:41:3d:22:f2:91:24:41:8e:01:5f:7f:d3:ac:21:
                    fe:f8:f2:59:c5:cc:93:96:09:53:9e:2c:67:96:f0:
                    45:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:02:5A:14:67:62:D7:51:18:50:B8:0C:54:E4:74:AE:58:C0:8F:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5be14a37-b219-3c75-8c68-d8a5bc8ec38d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:1c:9d:7b:1a:1a:eb:c2:09:cd:85:7c:7b:a7:ee:2a:de:96:
         66:93:de:2f:3c:4f:bb:fc:43:08:d6:6f:61:18:a8:b6:9d:88:
         d4:1b:36:e4:7b:a6:67:a3:c9:95:c6:60:91:b8:cf:a5:bc:a8:
         f0:69:3c:32:f4:91:e1:a4:71:8c:a4:84:87:92:f0:d5:0e:3f:
         9a:d5:ae:ae:2f:4c:51:b8:c5:11:c4:5d:dd:5a:ba:f2:cb:dd:
         f9:a8:cd:27:91:39:aa:31:b1:fb:3d:09:92:58:e0:47:56:2a:
         a2:a9:8c:9b:a4:99:5d:25:b5:21:09:bb:75:09:17:88:3f:0b:
         e8:85:be:82:e9:57:7d:7c:20:75:89:9f:7c:bd:d8:ea:64:d2:
         0f:7e:69:64:ec:e5:5a:7e:fe:f2:cc:c8:d2:1a:56:6b:c8:62:
         d2:05:de:72:05:89:de:eb:f4:23:ba:e4:08:0a:16:5d:8c:46:
         b5:d8:12:23:97:e9:05:29:0c:36:da:90:02:82:01:dd:f0:3c:
         40:20:d1:b2:31:30:15:39:f1:4c:cf:3b:58:92:7a:16:a5:b7:
         42:0d:e4:c8:43:15:1b:c7:6d:56:12:61:da:11:1b:4b:a2:8d:
         df:c1:3f:a7:d7:57:30:c6:2b:e3:42:54:ed:f4:0b:b5:cd:b9:
         4f:f3:d7:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuGSOcvWbHS2l/rL8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MTAxNTAwNTI1NVoXDTI2MDExMzAxNTI1NVowLzEtMCsGA1UEAxMk
OGJkMzA3ZjktNzA0Mi00YTM2LWEyOWQtOGNlM2E4YmY5NDQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJm1eNN4qf/KlvjQUyS+COLkIhQqcwf/PshV
uZEf4AKQLZv+jGj2RLyoftamgMcAW6L+sN+MoeLR0jz2A6zEASTi4SRMZNULdlFA
h0yppSWzQggBi5HMm/3pRnppymEgMwlWi3aPJGJz/zpp9qUHWFufQ9chROAtlA+P
mz+3/Vd/iFdg9CjRuRBouwbRBlLVFjuo3ojvqoeaSoB8shZW5MDiJcdiHRwpb/8j
YVe/QvNB8tUWzIIDEGJLDazpmihioVZ/hE4jucXmYfF95ygWzwMNpR/evSBAop98
+++DCwezQT0i8pEkQY4BX3/TrCH++PJZxcyTlglTnixnlvBF2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGYCWhRnYtdRGFC4DFTkdK5YwI9HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWJlMTRhMzctYjIxOS0z
Yzc1LThjNjgtZDhhNWJjOGVjMzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAEcnXsaGuvCCc2FfHun7irelmaT3i88T7v8QwjWb2EYqLadiNQbNuR7
pmejyZXGYJG4z6W8qPBpPDL0keGkcYykhIeS8NUOP5rVrq4vTFG4xRHEXd1auvLL
3fmozSeROaoxsfs9CZJY4EdWKqKpjJukmV0ltSEJu3UJF4g/C+iFvoLpV318IHWJ
n3y92Opk0g9+aWTs5Vp+/vLMyNIaVmvIYtIF3nIFid7r9CO65AgKFl2MRrXYEiOX
6QUpDDbakAKCAd3wPEAg0bIxMBU58UzPO1iSehalt0IN5MhDFRvHbVYSYdoRG0ui
jd/BP6fXVzDGK+NCVO30C7XNuU/z13o=
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:10:18 2025 by rpki-client