Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6570ec9f-ef08-300a-a83c-ee35525e710e.roa
File:                     6570ec9f-ef08-300a-a83c-ee35525e710e.roa (raw, json)
Hash identifier:          IbQPpCgRHaOnY+L3qCSK5mBjX7YUhM5OAED28lfarr8=
Subject key identifier:   02:7A:4C:AC:2B:53:9A:C7:38:43:46:8E:47:28:D3:3E:CD:FA:26:D2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EF44CBB42343D1ADD62318400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6570ec9f-ef08-300a-a83c-ee35525e710e.roa
Signing time:             Tue 25 Aug 2026 13:00:12 +0000
ROA not before:           Tue 25 Aug 2026 13:00:12 +0000
ROA not after:            Mon 23 Nov 2026 14:00:12 +0000
asID:                     13335
IP address blocks:        172.71.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:4c:bb:42:34:3d:1a:dd:62:31:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 25 13:00:12 2026 GMT
            Not After : Nov 23 14:00:12 2026 GMT
        Subject: CN=0b049600-49a5-401d-ad7e-cd577b6a9c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e4:0a:d4:4f:54:0c:70:be:ca:a8:86:1a:6a:
                    d0:1a:75:7a:6c:3a:52:68:ed:23:c8:e4:b8:25:b6:
                    93:75:9a:9a:70:96:83:7e:e3:28:d1:c7:e7:c1:72:
                    9b:2f:f4:46:9c:c6:41:22:12:27:26:5b:02:63:4c:
                    f1:5b:12:be:a0:0a:86:b2:0d:c3:23:31:f8:d9:11:
                    da:52:1b:16:9b:bc:3b:03:e1:12:f2:f9:40:f6:0d:
                    3e:21:69:73:24:0f:2d:94:55:f4:15:3d:e7:b2:f4:
                    9a:3b:ba:d6:ab:da:8f:22:1b:22:88:cd:66:54:01:
                    83:05:6a:2e:cb:41:8e:31:5a:0a:69:72:dc:d9:de:
                    29:53:c0:69:a5:ba:dc:2f:89:3f:d4:f5:4c:f6:d8:
                    02:a3:58:89:b1:e8:b9:79:19:73:9e:0f:10:e8:a9:
                    3e:12:23:d6:3e:30:d4:c6:c4:e4:e5:aa:68:fa:b4:
                    c9:f5:ec:11:73:78:a2:8d:eb:fa:b5:33:cf:bf:b0:
                    7e:f6:76:94:c6:8d:ed:d7:ec:02:12:07:c3:39:2c:
                    20:e9:3e:bd:21:b0:21:c8:03:fd:d1:d6:99:f5:5a:
                    9c:c0:4f:c7:41:7a:63:21:a5:5d:05:50:8c:18:30:
                    d4:05:d5:c2:81:6d:c8:c3:e2:94:88:6a:4d:5a:96:
                    f6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7A:4C:AC:2B:53:9A:C7:38:43:46:8E:47:28:D3:3E:CD:FA:26:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6570ec9f-ef08-300a-a83c-ee35525e710e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:53:21:77:77:6b:b7:2c:c3:15:b8:1f:41:d8:c3:13:25:75:
         34:08:e6:cd:38:b9:1b:95:39:4e:51:a8:52:0b:18:5c:21:06:
         c4:5f:0f:f9:03:e4:79:6d:a4:1a:8a:d3:94:37:95:69:b0:87:
         37:89:da:19:96:b8:57:cf:4a:b7:d9:16:5f:ba:cb:c6:35:08:
         62:22:99:35:43:20:d1:4b:cf:42:89:21:70:27:64:e9:12:4b:
         25:e3:05:af:8a:0e:20:d6:44:98:c3:26:0e:92:5c:b2:b0:ce:
         9a:8f:20:0b:44:00:cf:c0:e2:f9:d8:ea:a3:7c:19:5e:06:83:
         23:a1:59:6f:fe:ae:82:ec:ee:cf:5a:7f:70:0b:70:a5:64:0c:
         27:6a:9c:67:f4:2a:00:f2:57:3c:b2:16:11:a7:a9:4f:29:11:
         f9:21:46:49:a6:be:1d:18:65:e3:57:ec:4e:88:c8:ea:4d:da:
         78:11:2f:61:fd:bf:ac:61:84:b1:04:a7:3b:ac:5e:56:34:4c:
         38:38:6f:1b:bc:ef:d2:c5:53:a3:18:eb:40:13:ac:5a:25:ed:
         69:43:3c:37:e4:f5:dc:34:88:f0:20:b2:33:c2:40:6c:fb:f4:
         96:37:bc:d2:cb:ba:98:40:7c:12:02:1c:e6:e7:09:e9:8d:1f:
         be:3e:86:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TLtCND0a3WIxhAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk
MGIwNDk2MDAtNDlhNS00MDFkLWFkN2UtY2Q1NzdiNmE5Yzg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreQK1E9UDHC+yqiGGmrQGnV6bDpSaO0jyOS4
JbaTdZqacJaDfuMo0cfnwXKbL/RGnMZBIhInJlsCY0zxWxK+oAqGsg3DIzH42RHa
UhsWm7w7A+ES8vlA9g0+IWlzJA8tlFX0FT3nsvSaO7rWq9qPIhsiiM1mVAGDBWou
y0GOMVoKaXLc2d4pU8BppbrcL4k/1PVM9tgCo1iJsei5eRlzng8Q6Kk+EiPWPjDU
xsTk5apo+rTJ9ewRc3iijev6tTPPv7B+9naUxo3t1+wCEgfDOSwg6T69IbAhyAP9
0daZ9VqcwE/HQXpjIaVdBVCMGDDUBdXCgW3Iw+KUiGpNWpb2WwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAJ6TKwrU5rHOENGjkco0z7N+ibSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjU3MGVjOWYtZWYwOC0z
MDBhLWE4M2MtZWUzNTUyNWU3MTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEd/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFVTIXd3a7cswxW4H0HYwxMldTQI5s04uRuVOU5RqFILGFwhBsRfD/kD
5HltpBqK05Q3lWmwhzeJ2hmWuFfPSrfZFl+6y8Y1CGIimTVDINFLz0KJIXAnZOkS
SyXjBa+KDiDWRJjDJg6SXLKwzpqPIAtEAM/A4vnY6qN8GV4GgyOhWW/+roLs7s9a
f3ALcKVkDCdqnGf0KgDyVzyyFhGnqU8pEfkhRkmmvh0YZeNX7E6IyOpN2ngRL2H9
v6xhhLEEpzusXlY0TDg4bxu879LFU6MY60ATrFol7WlDPDfk9dw0iPAgsjPCQGz7
9JY3vNLLuphAfBICHObnCemNH74+hjw=
-----END CERTIFICATE-----
Generated at Tue Sep 22 11:32:31 2026 by rpki-client