Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7fc59a0c-bbe1-3882-933d-148d1dd541d2.roa
File:                     7fc59a0c-bbe1-3882-933d-148d1dd541d2.roa (raw, json)
Hash identifier:          tj4fHHXsscGAkPYdYZ/bdTgnCgI7XL+cfG3jD6KNALw=
Subject key identifier:   EF:57:EC:B3:9D:5C:C2:F7:B4:A6:7E:7B:D3:EF:31:84:E6:C5:2C:12
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EFCACEC3B8826F02E17260B80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7fc59a0c-bbe1-3882-933d-148d1dd541d2.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     14789
IP address blocks:        172.68.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:ec:3b:88:26:f0:2e:17:26:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=c016cb4a-1e65-4fb6-b075-4666fce5f361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:44:ff:8f:26:f1:40:32:a3:0b:3b:7a:cb:a1:
                    14:3b:8d:59:25:c8:d5:e0:cc:60:89:37:32:b9:bc:
                    cd:93:3a:be:4e:e9:3f:3e:07:18:9c:ed:a8:c1:60:
                    c2:e8:34:b2:dc:e9:82:fe:5d:50:83:6f:07:84:33:
                    b2:fd:c0:b9:bb:89:43:ba:00:64:f0:6c:d3:5b:e9:
                    2b:99:8c:77:ba:c8:d5:0c:37:e4:c1:15:65:98:21:
                    a7:f9:ac:86:e2:e5:ac:9d:b1:2d:e3:11:0c:1d:9b:
                    ba:d7:6d:4b:4c:4f:17:65:d3:4f:6f:f0:86:1f:59:
                    36:f5:6d:a7:c0:8c:08:03:22:2b:b2:ef:57:ae:51:
                    72:0c:51:d5:87:fd:50:62:d4:da:84:3c:f8:83:c5:
                    d6:6e:09:54:3d:fe:27:ad:7a:54:04:a6:78:d2:79:
                    1e:86:11:eb:46:cb:ad:bd:72:c6:c9:d6:18:a0:08:
                    31:b7:fd:e2:da:7d:19:41:6f:93:e8:d2:d3:14:48:
                    30:9a:03:7e:32:10:b0:8b:74:df:b8:ae:23:fa:81:
                    35:c3:28:57:f4:d3:e8:95:42:c8:94:d4:54:a8:38:
                    46:54:ed:54:7e:68:fa:4e:2c:bd:f2:91:92:dc:9a:
                    a6:10:95:91:cf:82:b1:80:7e:14:43:ad:64:d7:7a:
                    78:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:57:EC:B3:9D:5C:C2:F7:B4:A6:7E:7B:D3:EF:31:84:E6:C5:2C:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7fc59a0c-bbe1-3882-933d-148d1dd541d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:42:bf:74:49:cd:b7:f1:15:0e:04:5e:dc:1d:2e:cc:f9:4e:
         8a:cf:79:38:69:3c:ec:e9:1c:a1:e1:da:c4:98:15:a7:63:07:
         30:39:95:f2:3a:bf:f2:fd:14:de:fd:25:39:6b:43:25:d8:31:
         53:10:e8:78:44:d5:a8:01:cf:8b:2f:c9:92:1e:74:04:d0:2b:
         f4:ad:01:ad:ae:1d:43:d5:12:a3:80:1d:77:bc:70:14:8c:b5:
         e2:a3:60:3f:f2:b7:72:28:bb:b9:ee:38:12:cc:48:ee:ba:53:
         58:a1:85:90:da:aa:13:6c:aa:be:85:20:6c:40:8f:03:18:b0:
         23:85:97:d3:3b:14:17:0b:bc:6e:ae:a6:c8:03:d2:80:5f:de:
         a3:6a:20:27:f8:e5:c0:b5:7f:37:1e:80:7b:bc:d9:91:0c:36:
         61:8d:92:be:5a:3e:1c:f3:b5:96:ba:4f:ac:cd:49:56:3c:8f:
         d9:29:ce:d8:48:b6:01:ef:e6:6d:69:bf:82:2e:59:ba:79:f1:
         51:f8:01:8a:71:ff:6c:b3:49:48:31:79:e9:f5:29:c8:f2:b3:
         b4:96:c0:e6:08:de:80:2e:3a:6f:0d:28:72:c7:72:88:64:ef:
         7e:f3:1b:1c:22:80:a2:cb:fd:46:00:83:11:22:1b:91:82:59:
         83:aa:88:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rOw7iCbwLhcmC4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk
YzAxNmNiNGEtMWU2NS00ZmI2LWIwNzUtNDY2NmZjZTVmMzYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50T/jybxQDKjCzt6y6EUO41ZJcjV4MxgiTcy
ubzNkzq+Tuk/PgcYnO2owWDC6DSy3OmC/l1Qg28HhDOy/cC5u4lDugBk8GzTW+kr
mYx3usjVDDfkwRVlmCGn+ayG4uWsnbEt4xEMHZu6121LTE8XZdNPb/CGH1k29W2n
wIwIAyIrsu9XrlFyDFHVh/1QYtTahDz4g8XWbglUPf4nrXpUBKZ40nkehhHrRsut
vXLGydYYoAgxt/3i2n0ZQW+T6NLTFEgwmgN+MhCwi3TfuK4j+oE1wyhX9NPolULI
lNRUqDhGVO1Ufmj6Tiy98pGS3JqmEJWRz4KxgH4UQ61k13p4EwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO9X7LOdXML3tKZ+e9PvMYTmxSwSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2ZjNTlhMGMtYmJlMS0z
ODgyLTkzM2QtMTQ4ZDFkZDU0MWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAINCv3RJzbfxFQ4EXtwdLsz5TorPeThpPOzpHKHh2sSYFadjBzA5lfI6
v/L9FN79JTlrQyXYMVMQ6HhE1agBz4svyZIedATQK/StAa2uHUPVEqOAHXe8cBSM
teKjYD/yt3Iou7nuOBLMSO66U1ihhZDaqhNsqr6FIGxAjwMYsCOFl9M7FBcLvG6u
psgD0oBf3qNqICf45cC1fzcegHu82ZEMNmGNkr5aPhzztZa6T6zNSVY8j9kpzthI
tgHv5m1pv4IuWbp58VH4AYpx/2yzSUgxeen1Kcjys7SWwOYI3oAuOm8NKHLHcohk
737zGxwigKLL/UYAgxEiG5GCWYOqiPY=
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:08:08 2026 by rpki-client