Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3da1933-719a-376b-8a81-9403d3933a55.roa
File:                     b3da1933-719a-376b-8a81-9403d3933a55.roa (raw, json)
Hash identifier:          8XVNnCITxDneNOeIZCUpK46CzlPCl3lPdcDKPH+9axg=
Subject key identifier:   94:86:58:B5:B0:34:8B:F8:AB:14:5A:75:B2:36:4E:19:82:67:B5:8A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4AEF5FC6EDDC9B830A85ED40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3da1933-719a-376b-8a81-9403d3933a55.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        172.68.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:5f:c6:ed:dc:9b:83:0a:85:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=ad0c3909-4c4c-4a21-baf7-a78e20002c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9a:89:95:12:3a:9c:05:e9:2e:c3:fd:38:32:
                    2a:a7:ef:7f:8c:13:51:4f:02:a4:9a:89:68:00:3b:
                    66:bf:5c:3b:f2:58:7a:b0:fe:c2:2f:ac:92:85:09:
                    47:7b:63:63:7d:df:8e:78:80:01:5f:21:f0:71:47:
                    7f:ff:46:2d:04:58:cc:fc:99:b9:53:7e:e4:58:62:
                    0d:74:58:1d:20:8e:6d:af:61:a4:f7:52:38:a6:b4:
                    c2:ec:6b:8c:92:36:13:a1:98:e8:af:da:35:50:bd:
                    d8:e5:a6:46:c8:f3:1b:c8:42:11:6a:64:d0:80:0e:
                    2d:b8:8f:76:3e:76:0e:ab:6f:bf:78:4d:d4:c5:9f:
                    e9:4e:10:ab:13:b9:65:fe:8b:1e:8d:7a:34:f2:49:
                    c9:db:70:bb:7c:d0:c4:85:02:9e:68:b6:3b:f1:5e:
                    0a:30:0d:a2:ca:4c:3e:d0:4b:cb:08:0b:65:77:fb:
                    8e:0c:7c:a9:b8:bd:2a:3f:8a:8d:0d:b3:a5:5a:7d:
                    2b:dd:bf:df:d9:44:f0:f6:5c:3c:3b:30:85:ac:85:
                    c2:4b:38:e0:f1:a3:71:8f:5c:3f:fe:34:66:22:9d:
                    e1:85:9f:f2:78:a0:d0:37:01:a8:78:f1:c2:e3:89:
                    57:3e:4a:eb:96:4f:e8:7f:1e:c3:44:ff:ad:cd:d5:
                    a1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:86:58:B5:B0:34:8B:F8:AB:14:5A:75:B2:36:4E:19:82:67:B5:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3da1933-719a-376b-8a81-9403d3933a55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:72:eb:86:02:1d:80:1a:cb:0b:d8:f5:01:52:a3:9d:46:a1:
         97:93:82:8c:2b:f4:c6:ef:63:4f:73:61:ce:c5:62:50:11:08:
         06:65:d5:80:56:8b:95:6a:56:ff:f6:a6:28:ca:f5:0b:d8:1c:
         c1:52:2d:08:52:67:83:4d:93:ba:c0:a9:a5:97:dc:a6:17:97:
         3c:67:41:5a:31:b6:29:ac:a7:9f:68:88:49:76:6a:33:df:b2:
         f6:d3:32:74:dc:66:1f:ab:25:d3:f6:93:4f:03:31:4d:5b:f4:
         9e:52:ae:17:74:5e:a6:64:ce:a9:47:9e:ba:a8:f2:79:50:6d:
         20:f6:9e:aa:0d:4f:5f:a9:59:e1:a6:1b:c0:58:0b:97:ba:f0:
         7e:25:eb:dd:5d:45:4f:45:6d:f0:af:36:e5:78:ef:d5:71:7f:
         20:c5:d5:62:bb:0b:e9:61:99:7a:fc:71:66:1b:10:55:9b:0b:
         dd:cc:94:fc:70:46:dd:8d:a1:b5:98:e1:3d:c8:f9:84:f4:18:
         dd:5b:e4:ff:40:92:2b:47:7c:8d:c2:31:c0:90:c8:58:06:24:
         c1:2f:4b:ce:70:ad:72:4c:54:30:92:df:7b:33:ca:c6:d8:a7:
         be:f7:c6:68:8a:27:d7:ac:92:24:ca:70:93:b2:01:1b:1d:38:
         8d:e6:73:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K71/G7dybgwqF7UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk
YWQwYzM5MDktNGM0Yy00YTIxLWJhZjctYTc4ZTIwMDAyYzg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJqJlRI6nAXpLsP9ODIqp+9/jBNRTwKkmolo
ADtmv1w78lh6sP7CL6yShQlHe2Njfd+OeIABXyHwcUd//0YtBFjM/Jm5U37kWGIN
dFgdII5tr2Gk91I4prTC7GuMkjYToZjor9o1UL3Y5aZGyPMbyEIRamTQgA4tuI92
PnYOq2+/eE3UxZ/pThCrE7ll/osejXo08knJ23C7fNDEhQKeaLY78V4KMA2iykw+
0EvLCAtld/uODHypuL0qP4qNDbOlWn0r3b/f2UTw9lw8OzCFrIXCSzjg8aNxj1w/
/jRmIp3hhZ/yeKDQNwGoePHC44lXPkrrlk/ofx7DRP+tzdWhxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJSGWLWwNIv4qxRadbI2ThmCZ7WKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjNkYTE5MzMtNzE5YS0z
NzZiLThhODEtOTQwM2QzOTMzYTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHZy64YCHYAaywvY9QFSo51GoZeTgowr9MbvY09zYc7FYlARCAZl1YBW
i5VqVv/2pijK9QvYHMFSLQhSZ4NNk7rAqaWX3KYXlzxnQVoxtimsp59oiEl2ajPf
svbTMnTcZh+rJdP2k08DMU1b9J5Srhd0XqZkzqlHnrqo8nlQbSD2nqoNT1+pWeGm
G8BYC5e68H4l691dRU9FbfCvNuV479VxfyDF1WK7C+lhmXr8cWYbEFWbC93MlPxw
Rt2NobWY4T3I+YT0GN1b5P9AkitHfI3CMcCQyFgGJMEvS85wrXJMVDCS33szysbY
p773xmiKJ9eskiTKcJOyARsdOI3mcw0=
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:48:12 2026 by rpki-client