Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c7ce2ae-6bb6-386b-aad8-9fe2a5ee32d1.roa
File:                     9c7ce2ae-6bb6-386b-aad8-9fe2a5ee32d1.roa (raw, json)
Hash identifier:          ieuHvxWM4x8uNBmDmNZFZyptFA3L5Zc/Jm6wi3sdBpA=
Subject key identifier:   8E:B3:6A:BB:DD:A4:26:59:E5:C1:7E:58:BD:EB:6C:27:E0:BA:2D:01
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4824B5A7EEA375878376AC80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c7ce2ae-6bb6-386b-aad8-9fe2a5ee32d1.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        172.69.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:b5:a7:ee:a3:75:87:83:76:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=42def877-b38a-4569-97c1-87d08bed4eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dc:2b:9f:e7:c9:8c:f7:4a:a4:7e:98:84:d7:
                    ba:ab:ae:8f:65:e9:06:df:3c:3e:26:ef:7d:62:33:
                    55:d9:b1:d0:2d:81:81:c8:8b:cb:2a:97:d4:cd:c1:
                    c3:e2:99:10:c4:e0:a5:76:2b:38:4e:79:27:4d:9d:
                    83:b9:4f:a6:03:06:d0:3b:88:e3:51:56:10:f5:73:
                    fb:ae:a1:9d:9b:32:f8:77:95:04:e9:13:06:0b:7a:
                    7d:9f:d1:e3:17:c6:be:a3:64:24:6f:e8:2f:88:0d:
                    fa:ba:a8:79:9c:9f:f2:3e:eb:7f:52:89:5e:f5:77:
                    b0:3b:3d:8e:47:37:04:a3:2d:1f:61:05:6c:40:49:
                    75:0f:f3:5b:57:59:20:58:61:df:be:95:c3:37:04:
                    83:8f:7f:a4:96:ff:57:8d:c6:ea:9f:b3:26:6c:62:
                    bd:02:d5:be:37:0b:ae:89:13:8b:7a:16:db:97:67:
                    7f:d5:04:ec:c8:56:f1:88:ec:50:29:4f:24:ce:9f:
                    a0:88:b1:ea:47:b2:47:76:eb:00:8f:a5:89:83:6d:
                    08:8f:13:a8:03:08:be:04:66:87:b7:66:cd:3a:9b:
                    bc:07:39:55:91:00:17:d0:df:bf:f0:fc:3a:99:1f:
                    07:f6:94:5d:67:97:66:ef:b7:ad:43:5b:c0:5a:1c:
                    e1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B3:6A:BB:DD:A4:26:59:E5:C1:7E:58:BD:EB:6C:27:E0:BA:2D:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c7ce2ae-6bb6-386b-aad8-9fe2a5ee32d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:4a:59:e7:e4:f1:f0:69:b9:4f:c2:7b:6f:63:06:da:75:6e:
         37:45:f2:ff:f9:ef:dd:43:04:7d:3d:b9:b8:1b:4c:4d:c0:b1:
         0c:2b:49:a2:2e:7c:1e:22:7a:7a:3c:c7:0a:66:c7:0d:46:ab:
         b4:f7:9a:3b:9b:c5:38:b9:e2:8a:21:70:b4:37:e3:93:db:fb:
         5f:85:a6:1d:e8:cd:cd:e9:db:99:86:14:22:ec:4a:ea:60:2e:
         2f:e3:8b:35:5c:45:61:d9:b8:23:dc:a8:fa:02:7b:53:3e:4a:
         31:59:ea:00:20:ff:1c:6c:30:1a:cd:5f:05:ce:b4:90:bd:d7:
         c6:26:eb:23:c7:0e:21:2c:85:10:3b:a3:fa:81:48:4e:f6:48:
         66:87:ca:7d:a2:a4:aa:50:c3:c8:ee:02:6c:03:1f:ac:db:dd:
         b4:a7:7e:52:e2:1b:65:5c:90:e6:b6:18:a1:66:b3:16:80:be:
         16:df:f6:e9:9a:0f:09:71:bb:4b:b2:ba:47:ba:7b:67:23:f2:
         42:13:0f:ef:f3:72:a6:68:22:40:61:09:0f:39:85:23:c6:fe:
         34:1b:b7:4b:44:75:23:0f:3d:5c:e4:df:8e:e9:f9:04:fe:14:
         b9:e0:bc:bd:55:47:1e:87:82:5a:f7:e9:51:37:00:4b:0f:10:
         1c:9e:6f:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJLWn7qN1h4N2rIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk
NDJkZWY4NzctYjM4YS00NTY5LTk3YzEtODdkMDhiZWQ0ZWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNwrn+fJjPdKpH6YhNe6q66PZekG3zw+Ju99
YjNV2bHQLYGByIvLKpfUzcHD4pkQxOCldis4TnknTZ2DuU+mAwbQO4jjUVYQ9XP7
rqGdmzL4d5UE6RMGC3p9n9HjF8a+o2Qkb+gviA36uqh5nJ/yPut/Uole9XewOz2O
RzcEoy0fYQVsQEl1D/NbV1kgWGHfvpXDNwSDj3+klv9Xjcbqn7MmbGK9AtW+Nwuu
iROLehbbl2d/1QTsyFbxiOxQKU8kzp+giLHqR7JHdusAj6WJg20IjxOoAwi+BGaH
t2bNOpu8BzlVkQAX0N+/8Pw6mR8H9pRdZ5dm77etQ1vAWhzhEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI6zarvdpCZZ5cF+WL3rbCfgui0BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWM3Y2UyYWUtNmJiNi0z
ODZiLWFhZDgtOWZlMmE1ZWUzMmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEX3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ5KWefk8fBpuU/Ce29jBtp1bjdF8v/5791DBH09ubgbTE3AsQwrSaIu
fB4ieno8xwpmxw1Gq7T3mjubxTi54oohcLQ345Pb+1+Fph3ozc3p25mGFCLsSupg
Li/jizVcRWHZuCPcqPoCe1M+SjFZ6gAg/xxsMBrNXwXOtJC918Ym6yPHDiEshRA7
o/qBSE72SGaHyn2ipKpQw8juAmwDH6zb3bSnflLiG2VckOa2GKFmsxaAvhbf9uma
Dwlxu0uyuke6e2cj8kITD+/zcqZoIkBhCQ85hSPG/jQbt0tEdSMPPVzk347p+QT+
FLngvL1VRx6Hglr36VE3AEsPEByeb/k=
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:46:37 2026 by rpki-client