Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b74f5713-0a96-3395-960f-93394e99cc6e.roa
File:                     b74f5713-0a96-3395-960f-93394e99cc6e.roa (raw, json)
Hash identifier:          uJVNcXY0XZ+FXMdbpB7BIgleFwDeXdssU/E3a+CQEpE=
Subject key identifier:   57:2A:F9:DC:92:8A:4F:64:18:63:CC:72:D9:12:D1:91:6E:39:DC:10
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4AEF5A42C1D50CCA78EDA2C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b74f5713-0a96-3395-960f-93394e99cc6e.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        172.65.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:5a:42:c1:d5:0c:ca:78:ed:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=2cfbb334-659f-4989-ad8b-c80846ae573c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:50:18:f6:dd:82:f4:85:76:97:10:d2:b6:1f:
                    24:cb:9e:91:e3:c0:22:4c:2a:24:b7:1f:1d:d1:e2:
                    c3:a9:85:f8:3b:0f:a7:05:ff:78:c5:b2:18:34:fa:
                    1e:18:32:e0:e8:43:a0:33:31:26:40:ca:82:1c:e4:
                    52:63:36:19:03:e9:7e:cc:13:3b:3a:4e:40:c7:da:
                    85:79:c0:ea:60:b8:20:0b:d8:d1:dc:1c:22:47:68:
                    17:b0:52:1d:0e:b4:ce:bb:61:51:10:6d:e8:20:c9:
                    6e:c9:d0:da:61:d3:2b:92:d4:e0:7b:25:57:67:36:
                    3e:22:27:2b:ea:84:48:16:3b:32:b6:2c:ef:ff:cd:
                    09:24:67:34:01:c3:87:fa:b3:77:e9:cd:68:ed:9e:
                    34:44:05:87:7f:fa:9e:17:b8:10:db:5e:6c:8d:2a:
                    d7:66:fe:69:7d:61:7b:77:c1:dd:57:08:ed:b3:68:
                    ad:63:55:c4:f6:2f:85:a8:4d:7a:87:a6:23:17:bb:
                    b4:92:31:d4:69:65:ff:e2:87:81:20:83:c8:17:03:
                    41:a5:35:b2:e0:4d:91:64:5b:c4:67:aa:00:38:d9:
                    44:a0:68:92:6a:6d:53:ca:2a:08:75:5e:b8:50:3a:
                    09:2b:e2:80:d6:3b:6a:12:63:e5:e1:19:f9:67:48:
                    79:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2A:F9:DC:92:8A:4F:64:18:63:CC:72:D9:12:D1:91:6E:39:DC:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b74f5713-0a96-3395-960f-93394e99cc6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.65.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:f1:50:fd:07:15:d7:00:65:e9:a3:54:18:00:cc:92:d0:11:
         e0:88:6c:cd:1a:b6:6b:f6:3f:f6:37:13:6e:fa:fe:23:99:e1:
         cb:87:94:4e:3a:9a:00:e2:27:7b:08:48:b2:cb:f6:d8:f8:bb:
         2a:46:20:e0:13:38:3e:4e:d1:58:7c:fb:05:3b:6e:7c:f7:85:
         c9:17:98:42:f5:1e:c5:e2:a9:da:36:d3:76:84:6c:1a:f3:92:
         08:d9:1a:7c:e3:dc:30:d8:21:f7:cb:1c:4d:1c:90:d4:18:a8:
         8e:c3:01:ec:48:c3:26:24:27:37:ea:df:00:61:83:19:f0:42:
         72:3d:70:60:09:9f:4a:11:84:97:02:d6:d4:87:4c:5d:c3:f8:
         97:1b:35:34:60:7d:d0:51:aa:2f:b5:e8:38:77:43:68:95:05:
         2b:7d:a1:d8:4c:8b:7c:3d:cc:6c:5a:b7:ec:ef:2a:63:c5:bb:
         8f:8e:ee:93:88:54:cb:6f:07:95:fd:3e:a2:f5:f1:13:54:83:
         f6:05:b5:3c:ab:00:df:5d:99:97:a9:38:22:8f:77:4d:1e:1e:
         12:f6:f5:64:7d:f8:5b:93:ac:77:ae:36:6b:04:7b:53:0f:b8:
         a9:65:5e:cd:8b:9f:01:c5:24:92:1b:87:ba:7b:5b:35:a9:f6:
         15:ac:6a:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K71pCwdUMynjtosAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk
MmNmYmIzMzQtNjU5Zi00OTg5LWFkOGItYzgwODQ2YWU1NzNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVAY9t2C9IV2lxDSth8ky56R48AiTCoktx8d
0eLDqYX4Ow+nBf94xbIYNPoeGDLg6EOgMzEmQMqCHORSYzYZA+l+zBM7Ok5Ax9qF
ecDqYLggC9jR3BwiR2gXsFIdDrTOu2FREG3oIMluydDaYdMrktTgeyVXZzY+Iicr
6oRIFjsytizv/80JJGc0AcOH+rN36c1o7Z40RAWHf/qeF7gQ215sjSrXZv5pfWF7
d8HdVwjts2itY1XE9i+FqE16h6YjF7u0kjHUaWX/4oeBIIPIFwNBpTWy4E2RZFvE
Z6oAONlEoGiSam1TyioIdV64UDoJK+KA1jtqEmPl4Rn5Z0h5vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFcq+dySik9kGGPMctkS0ZFuOdwQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjc0ZjU3MTMtMGE5Ni0z
Mzk1LTk2MGYtOTMzOTRlOTljYzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEFAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB7xUP0HFdcAZemjVBgAzJLQEeCIbM0atmv2P/Y3E276/iOZ4cuHlE46
mgDiJ3sISLLL9tj4uypGIOATOD5O0Vh8+wU7bnz3hckXmEL1HsXiqdo203aEbBrz
kgjZGnzj3DDYIffLHE0ckNQYqI7DAexIwyYkJzfq3wBhgxnwQnI9cGAJn0oRhJcC
1tSHTF3D+JcbNTRgfdBRqi+16Dh3Q2iVBSt9odhMi3w9zGxat+zvKmPFu4+O7pOI
VMtvB5X9PqL18RNUg/YFtTyrAN9dmZepOCKPd00eHhL29WR9+FuTrHeuNmsEe1MP
uKllXs2LnwHFJJIbh7p7WzWp9hWsajg=
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:55:56 2026 by rpki-client