Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6e11b0b5-0157-30d2-ba29-5914e8732594.roa
File:                     6e11b0b5-0157-30d2-ba29-5914e8732594.roa (raw, json)
Hash identifier:          8A0+bUswza9IAuf7uNI9GJman/G3Sp8JX3wJNs8rmSs=
Subject key identifier:   CB:FB:4F:41:E4:B7:6A:78:C4:4C:C9:EA:C6:95:04:42:C8:D2:66:79
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BB1926800949C0D4CC48A78A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6e11b0b5-0157-30d2-ba29-5914e8732594.roa
Signing time:             Thu 30 Oct 2025 13:00:38 +0000
ROA not before:           Thu 30 Oct 2025 13:00:38 +0000
ROA not after:            Wed 28 Jan 2026 14:00:38 +0000
asID:                     13335
IP address blocks:        172.70.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b1:92:68:00:94:9c:0d:4c:c4:8a:78:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 30 13:00:38 2025 GMT
            Not After : Jan 28 14:00:38 2026 GMT
        Subject: CN=2d2bd1b0-e45e-42d1-a95a-957990980eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e4:86:c3:61:55:a1:bc:50:55:8c:dc:f3:27:
                    67:ee:df:79:bb:77:e7:7e:b6:07:0f:67:22:f7:00:
                    ee:86:07:06:68:af:d3:8f:07:6c:4c:bb:6c:5c:5e:
                    6a:47:00:0c:18:69:b2:6f:f6:4e:99:2d:9a:3d:00:
                    50:1d:96:45:61:56:41:03:f7:3f:4a:15:c0:4b:49:
                    51:9f:c5:73:3d:46:df:ce:41:98:f4:4f:15:d5:95:
                    e2:f5:ae:1f:ca:1a:24:49:10:c5:0a:92:d1:77:45:
                    ab:81:5b:ef:5e:f7:2e:7a:b3:db:dd:ba:78:1e:5b:
                    16:2e:ec:8d:f0:b6:d0:bf:08:b3:41:f0:4e:08:a6:
                    34:3c:aa:9a:7c:a7:b8:aa:9e:9f:24:ff:47:45:92:
                    d3:36:07:ac:dc:c0:87:40:80:93:4d:91:d1:78:d2:
                    47:00:c3:d2:c4:33:86:da:fb:f3:be:9e:23:c6:b4:
                    bb:b3:7c:48:5d:36:a3:71:2f:32:6d:6e:55:b1:b4:
                    3f:5b:73:a0:5c:6d:0a:15:e5:fe:e6:a5:56:f2:41:
                    a2:ec:6e:5c:d8:8b:71:fd:74:23:aa:33:94:d6:85:
                    cf:ee:9a:a9:ef:5a:b0:f4:14:6a:93:25:a4:98:b3:
                    0d:ab:c1:f6:cd:f4:da:53:ff:55:05:6c:e0:88:9e:
                    f6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FB:4F:41:E4:B7:6A:78:C4:4C:C9:EA:C6:95:04:42:C8:D2:66:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6e11b0b5-0157-30d2-ba29-5914e8732594.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f2:e8:26:55:5b:b9:c4:9a:97:6e:1c:3e:04:0a:2e:3c:e4:
         3e:07:75:db:aa:7f:57:12:d4:d1:2b:17:19:31:a6:32:cf:b7:
         b8:2e:f7:59:67:ab:6f:58:90:ad:b5:b0:eb:84:d9:d3:8e:3e:
         d4:45:72:c4:c9:27:8b:07:f7:27:c1:f7:44:36:37:63:d2:6e:
         b5:a8:33:fe:b7:b8:9a:99:24:14:26:83:54:6a:c8:17:02:80:
         7f:9b:32:7d:52:6a:dd:08:24:7d:95:3f:e4:c7:77:12:44:97:
         9c:9b:9c:d1:6e:12:2f:29:e1:96:fb:ac:c3:0a:85:01:f4:ac:
         97:33:5e:4e:63:f8:c6:88:90:38:45:63:57:a2:3e:5d:3e:fa:
         be:d2:43:9e:3c:e2:79:01:42:d1:24:3f:d1:41:33:cb:f3:c4:
         68:5b:7d:f2:ef:30:d1:3f:69:34:fa:14:6f:d2:08:9a:07:33:
         4b:28:4e:6c:c8:44:35:7e:ae:69:3e:d8:22:9e:d5:be:81:d0:
         e9:73:02:fe:c0:6d:d5:62:cd:47:03:7f:b5:8c:6d:d8:94:6b:
         22:bb:42:f5:2e:3e:81:72:e1:74:d6:cb:50:ba:95:bf:3d:ac:
         6c:de:61:4d:d1:0a:8d:21:09:c9:fe:c0:03:48:14:42:e8:8e:
         32:dd:84:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmgAlJwNTMSKeKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk
MmQyYmQxYjAtZTQ1ZS00MmQxLWE5NWEtOTU3OTkwOTgwZWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeSGw2FVobxQVYzc8ydn7t95u3fnfrYHD2ci
9wDuhgcGaK/TjwdsTLtsXF5qRwAMGGmyb/ZOmS2aPQBQHZZFYVZBA/c/ShXAS0lR
n8VzPUbfzkGY9E8V1ZXi9a4fyhokSRDFCpLRd0WrgVvvXvcuerPb3bp4HlsWLuyN
8LbQvwizQfBOCKY0PKqafKe4qp6fJP9HRZLTNges3MCHQICTTZHReNJHAMPSxDOG
2vvzvp4jxrS7s3xIXTajcS8ybW5VsbQ/W3OgXG0KFeX+5qVW8kGi7G5c2Itx/XQj
qjOU1oXP7pqp71qw9BRqkyWkmLMNq8H2zfTaU/9VBWzgiJ72/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMv7T0Hkt2p4xEzJ6saVBELI0mZ5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmUxMWIwYjUtMDE1Ny0z
MGQyLWJhMjktNTkxNGU4NzMyNTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABfy6CZVW7nEmpduHD4ECi485D4Hdduqf1cS1NErFxkxpjLPt7gu91ln
q29YkK21sOuE2dOOPtRFcsTJJ4sH9yfB90Q2N2PSbrWoM/63uJqZJBQmg1RqyBcC
gH+bMn1Sat0IJH2VP+THdxJEl5ybnNFuEi8p4Zb7rMMKhQH0rJczXk5j+MaIkDhF
Y1eiPl0++r7SQ5484nkBQtEkP9FBM8vzxGhbffLvMNE/aTT6FG/SCJoHM0soTmzI
RDV+rmk+2CKe1b6B0OlzAv7AbdVizUcDf7WMbdiUayK7QvUuPoFy4XTWy1C6lb89
rGzeYU3RCo0hCcn+wANIFELojjLdhGo=
-----END CERTIFICATE-----
Generated at Sat Nov 1 10:01:48 2025 by rpki-client