Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a664ce31-e334-302c-8d63-6952d26499fb.roa
File:                     a664ce31-e334-302c-8d63-6952d26499fb.roa (raw, json)
Hash identifier:          YsyiigbfiprJ4/4S5C1T4iiIw1YBWgV3Czd9zCZUnlU=
Subject key identifier:   8D:C5:27:F0:CA:C6:54:90:49:1D:45:36:3D:1B:50:C7:CC:89:F6:2E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEEB778B080AF1ED1516FE180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a664ce31-e334-302c-8d63-6952d26499fb.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     13335
IP address blocks:        172.69.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:78:b0:80:af:1e:d1:51:6f:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=004c8471-e420-4e00-8c37-3959f608595f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5a:ca:84:dd:b1:af:09:04:b7:ff:e0:0a:78:
                    87:0f:8a:3e:7e:3d:8e:3e:21:ee:3a:b7:5c:e4:ba:
                    8b:0e:a7:f2:71:56:a2:ee:f5:9b:55:6c:17:9f:04:
                    88:09:da:7a:e2:5a:40:3b:0d:12:54:d7:ee:d2:2e:
                    47:d8:6b:31:46:0f:20:b8:95:e5:88:69:38:1c:0c:
                    e8:1d:59:6a:d4:8a:7b:1d:96:55:3a:bc:46:92:71:
                    53:e9:55:8c:00:b8:28:9b:4a:27:6a:89:81:15:2e:
                    0b:a7:ce:77:4f:dc:17:9b:61:6e:f5:36:33:bf:13:
                    61:ed:dd:41:67:fa:4b:7c:81:ab:3c:13:8b:d7:bc:
                    e3:7f:2d:df:a8:7b:b1:1a:8e:a9:97:18:54:58:43:
                    17:94:0e:59:8a:ba:66:8a:ec:43:66:0f:30:cd:9d:
                    79:ab:68:29:4d:49:d7:7d:81:69:6e:e0:5b:5d:a6:
                    2a:1b:d4:a3:66:44:8b:fe:46:7c:87:98:0c:e0:5e:
                    20:56:00:0f:71:d2:25:11:35:a8:c9:07:1a:f9:00:
                    01:ad:84:ff:b1:8b:41:d4:66:00:48:b6:7a:e0:09:
                    e5:b7:11:85:c6:71:57:cd:94:8c:a6:e5:01:0d:2b:
                    28:86:14:33:ed:df:2f:9a:22:07:65:1d:d5:47:04:
                    2e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C5:27:F0:CA:C6:54:90:49:1D:45:36:3D:1B:50:C7:CC:89:F6:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a664ce31-e334-302c-8d63-6952d26499fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:f7:6e:d1:c4:96:48:db:57:ee:49:af:47:bf:f5:5d:81:68:
         c8:19:c3:46:52:bd:35:e9:1a:fa:1e:53:cb:66:8c:27:b7:e4:
         61:7a:9f:f1:7d:5f:4b:58:cf:8f:f5:7d:49:ab:8f:64:02:4c:
         0c:69:27:88:dd:0b:67:42:75:39:f5:de:08:56:54:88:78:e9:
         31:10:49:c2:95:0d:98:25:aa:4c:c2:45:03:0b:ad:0a:f1:0f:
         3d:60:d7:b1:d7:3b:7b:64:36:fe:ca:2c:b6:74:3c:d8:28:bd:
         6d:99:b2:f9:16:c8:92:83:2d:33:33:3b:01:bd:db:07:6f:39:
         9f:1b:fa:13:71:b0:7e:19:16:a6:9a:9b:83:36:ee:89:6d:65:
         22:41:a4:d0:1c:9d:c2:74:d2:90:15:ab:f0:5a:f3:6a:6c:96:
         79:f0:3f:72:af:dc:d0:3a:ae:de:3f:6f:e1:2a:a3:d5:e3:4e:
         85:36:c5:27:dc:eb:35:79:4f:e9:de:df:b8:98:6a:71:1b:60:
         ec:13:c4:c7:9d:ab:20:a5:38:ec:33:7c:18:72:14:03:a0:19:
         ba:79:65:ad:bd:b5:7f:e7:c3:e3:7c:e3:fb:27:62:f3:ae:ad:
         69:0f:7c:06:81:2e:6f:08:bc:63:ac:37:b5:3a:db:0e:98:ea:
         72:1c:70:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut3iwgK8e0VFv4YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk
MDA0Yzg0NzEtZTQyMC00ZTAwLThjMzctMzk1OWY2MDg1OTVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVrKhN2xrwkEt//gCniHD4o+fj2OPiHuOrdc
5LqLDqfycVai7vWbVWwXnwSICdp64lpAOw0SVNfu0i5H2GsxRg8guJXliGk4HAzo
HVlq1Ip7HZZVOrxGknFT6VWMALgom0onaomBFS4Lp853T9wXm2Fu9TYzvxNh7d1B
Z/pLfIGrPBOL17zjfy3fqHuxGo6plxhUWEMXlA5ZirpmiuxDZg8wzZ15q2gpTUnX
fYFpbuBbXaYqG9SjZkSL/kZ8h5gM4F4gVgAPcdIlETWoyQca+QABrYT/sYtB1GYA
SLZ64AnltxGFxnFXzZSMpuUBDSsohhQz7d8vmiIHZR3VRwQudQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI3FJ/DKxlSQSR1FNj0bUMfMifYuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTY2NGNlMzEtZTMzNC0z
MDJjLThkNjMtNjk1MmQyNjQ5OWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB33btHElkjbV+5Jr0e/9V2BaMgZw0ZSvTXpGvoeU8tmjCe35GF6n/F9
X0tYz4/1fUmrj2QCTAxpJ4jdC2dCdTn13ghWVIh46TEQScKVDZglqkzCRQMLrQrx
Dz1g17HXO3tkNv7KLLZ0PNgovW2ZsvkWyJKDLTMzOwG92wdvOZ8b+hNxsH4ZFqaa
m4M27oltZSJBpNAcncJ00pAVq/Ba82pslnnwP3Kv3NA6rt4/b+Eqo9XjToU2xSfc
6zV5T+ne37iYanEbYOwTxMedqyClOOwzfBhyFAOgGbp5Za29tX/nw+N84/snYvOu
rWkPfAaBLm8IvGOsN7U62w6Y6nIccF4=
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:56:58 2026 by rpki-client