Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/66c1599b-74fc-3311-b048-b7ca7779d3f6.roa
File:                     66c1599b-74fc-3311-b048-b7ca7779d3f6.roa (raw, json)
Hash identifier:          urVQidwao6/cyfPyhPVE/jHNDnefWi4ZXsby9vXGH3s=
Subject key identifier:   95:A7:43:5E:6C:C4:1E:3C:6E:E0:55:49:D2:4C:89:08:33:61:31:49
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E48249AE8A460BF26B9BA1E00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/66c1599b-74fc-3311-b048-b7ca7779d3f6.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        172.69.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:9a:e8:a4:60:bf:26:b9:ba:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=5e65d494-fef2-4249-8c54-b0c6a93d53db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a6:be:c2:2f:47:a9:7f:cc:41:df:3a:7a:0a:
                    7d:1a:2c:a6:eb:1c:0a:22:fa:31:33:11:29:a4:a1:
                    b5:68:43:d7:76:5c:d3:ff:13:e1:8d:bb:dd:06:2b:
                    7f:5c:ee:bb:16:d2:ff:6d:93:31:a5:9d:7e:69:ea:
                    c6:4e:80:8d:86:59:5d:f1:1e:9e:a3:ee:30:98:ed:
                    c6:28:6b:d0:bf:35:05:d9:bb:08:d1:dd:d3:74:84:
                    5c:48:f9:dd:3c:14:f9:8b:a2:94:74:dd:71:0c:27:
                    a4:c8:44:cc:b3:9d:c5:0c:34:80:e8:19:58:59:d1:
                    e5:63:98:de:07:13:36:6b:1a:ba:cc:b1:04:31:c7:
                    11:cd:d8:87:de:b1:3d:f8:ba:c0:02:d8:fb:a7:68:
                    01:c6:3a:67:7b:11:d9:69:a1:af:b8:03:48:1b:4b:
                    75:76:85:11:fb:35:17:50:61:c3:79:6c:81:83:39:
                    7a:74:c4:f5:37:e6:db:95:fc:9d:17:a3:1c:0e:72:
                    30:96:96:09:63:9e:a5:c5:71:eb:62:f2:f1:c0:2f:
                    96:93:f8:eb:f1:17:7c:b9:8b:5b:8b:bb:ff:16:fe:
                    7a:1e:76:15:4e:54:2a:91:7c:53:df:94:51:88:c3:
                    2a:90:fc:df:ff:76:59:c5:e1:eb:38:cd:4a:5e:cf:
                    c2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A7:43:5E:6C:C4:1E:3C:6E:E0:55:49:D2:4C:89:08:33:61:31:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/66c1599b-74fc-3311-b048-b7ca7779d3f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:87:06:d2:21:dc:58:28:da:26:61:b1:f1:7f:f5:dd:ca:fd:
         75:5e:5e:d5:b8:09:b8:5e:3d:88:3c:7c:4d:bc:71:0d:d4:72:
         6e:f5:5f:ff:8e:1f:65:18:a7:b1:ac:03:76:60:8b:18:e8:36:
         bf:e6:37:83:30:4d:40:73:5e:19:34:64:07:19:0c:79:3a:f0:
         10:58:b3:78:f5:5e:c8:b7:f8:9b:81:d2:52:94:5a:a7:57:e7:
         09:26:b0:73:ca:10:bf:dd:75:03:6c:6b:47:d0:45:8c:6e:e5:
         8e:1e:62:fe:9f:96:3b:d8:c0:fe:c3:40:ff:5a:e1:c2:f1:7b:
         3f:33:34:99:49:98:92:7d:9c:5b:27:bf:6d:b4:4a:ce:f0:68:
         ed:1e:55:69:6d:d6:df:c1:dd:02:b3:fc:48:77:60:1b:d7:41:
         d6:8d:b7:26:e6:21:58:ff:f6:33:1e:43:b2:39:33:22:ab:0f:
         d5:0b:9c:1c:3c:4d:f8:f5:f5:59:a8:5d:37:c6:4a:4e:b2:72:
         ec:f2:cf:09:7f:6a:d5:41:c5:d3:61:90:c1:d6:b1:b2:12:33:
         db:bd:82:86:18:ed:2f:71:a1:43:1a:d5:1d:3a:e0:15:22:6f:
         ab:7f:99:44:14:67:37:08:95:fe:f1:3e:58:4e:30:92:85:ef:
         95:32:fe:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJJropGC/Jrm6HgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk
NWU2NWQ0OTQtZmVmMi00MjQ5LThjNTQtYjBjNmE5M2Q1M2RiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aa+wi9HqX/MQd86egp9Giym6xwKIvoxMxEp
pKG1aEPXdlzT/xPhjbvdBit/XO67FtL/bZMxpZ1+aerGToCNhlld8R6eo+4wmO3G
KGvQvzUF2bsI0d3TdIRcSPndPBT5i6KUdN1xDCekyETMs53FDDSA6BlYWdHlY5je
BxM2axq6zLEEMccRzdiH3rE9+LrAAtj7p2gBxjpnexHZaaGvuANIG0t1doUR+zUX
UGHDeWyBgzl6dMT1N+bblfydF6McDnIwlpYJY56lxXHrYvLxwC+Wk/jr8Rd8uYtb
i7v/Fv56HnYVTlQqkXxT35RRiMMqkPzf/3ZZxeHrOM1KXs/CeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJWnQ15sxB48buBVSdJMiQgzYTFJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjZjMTU5OWItNzRmYy0z
MzExLWIwNDgtYjdjYTc3NzlkM2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABOHBtIh3Fgo2iZhsfF/9d3K/XVeXtW4CbhePYg8fE28cQ3Ucm71X/+O
H2UYp7GsA3ZgixjoNr/mN4MwTUBzXhk0ZAcZDHk68BBYs3j1Xsi3+JuB0lKUWqdX
5wkmsHPKEL/ddQNsa0fQRYxu5Y4eYv6fljvYwP7DQP9a4cLxez8zNJlJmJJ9nFsn
v220Ss7waO0eVWlt1t/B3QKz/Eh3YBvXQdaNtybmIVj/9jMeQ7I5MyKrD9ULnBw8
Tfj19VmoXTfGSk6ycuzyzwl/atVBxdNhkMHWsbISM9u9goYY7S9xoUMa1R064BUi
b6t/mUQUZzcIlf7xPlhOMJKF75Uy/rQ=
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:48:18 2026 by rpki-client