Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bd6aa06b-58c1-3898-a006-bb70908ee2b6.roa
File:                     bd6aa06b-58c1-3898-a006-bb70908ee2b6.roa (raw, json)
Hash identifier:          +Aq7kLvkJ4kvFgDiqrAKUOofp1paRMDA0nzs2RBnQn0=
Subject key identifier:   F1:DD:B8:A1:4B:D0:D8:AE:E7:A2:3B:DC:3B:05:14:79:95:CF:49:BC
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BA9328FFBDCA165BBB74BDB40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bd6aa06b-58c1-3898-a006-bb70908ee2b6.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     13335
IP address blocks:        172.68.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:8f:fb:dc:a1:65:bb:b7:4b:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=5d0b55f8-16a7-4a5a-b3bd-9c3daa5cefa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ec:1f:4e:5c:ca:79:90:4c:c5:64:25:67:b2:
                    70:04:d9:15:2c:dc:5b:94:c4:2e:21:6b:cb:1b:5a:
                    08:48:df:8b:4b:ee:ab:5c:34:89:6f:6f:8c:4e:ff:
                    2d:89:11:a1:39:81:31:4a:5d:94:f8:fc:89:4c:43:
                    81:40:84:b2:28:42:4b:e8:8f:e4:46:de:35:d3:17:
                    c5:e5:80:91:28:37:ed:1c:31:c8:eb:06:ec:05:ea:
                    35:e6:e9:25:98:5a:20:e1:cb:13:b5:d3:78:86:a9:
                    e1:a5:24:86:f3:5d:c4:c5:2b:43:bd:6c:33:28:a8:
                    39:50:e5:99:8a:41:c5:32:e9:2a:5c:2e:a8:1f:43:
                    90:b5:ab:c2:95:a9:09:c8:bc:f9:70:c8:80:28:0c:
                    f8:e8:8f:7e:21:8a:74:c7:f5:3b:8b:21:27:03:55:
                    66:97:f3:81:81:e5:10:d5:6e:48:a3:5b:a8:3d:a2:
                    e6:16:9b:7c:fc:40:13:ce:02:62:c6:98:dc:cf:86:
                    bb:7f:f8:0c:80:22:43:d0:b0:cb:79:9b:fa:7b:ed:
                    50:27:10:6d:7e:45:ac:86:37:d0:3a:58:68:a6:c2:
                    ef:dd:d6:17:c0:46:75:33:8d:82:91:c1:6a:3d:1a:
                    24:77:c7:92:bd:a9:04:d0:8f:27:da:59:06:62:4a:
                    77:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DD:B8:A1:4B:D0:D8:AE:E7:A2:3B:DC:3B:05:14:79:95:CF:49:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bd6aa06b-58c1-3898-a006-bb70908ee2b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:76:f3:a4:1a:da:f6:df:52:d0:07:5d:6c:10:f2:45:20:b2:
         7e:96:16:55:54:99:25:f3:9a:c4:11:f2:e6:2a:a3:7b:72:4f:
         28:b9:57:f9:e6:e5:95:26:ae:e2:87:f1:9f:bb:74:af:ea:9c:
         be:3d:2b:e1:dd:e1:3c:1f:87:70:e7:7f:b2:6d:2b:98:ea:6a:
         b5:c2:ee:b6:34:63:48:68:ed:5c:cd:19:a3:6e:76:3c:f1:bb:
         ae:89:c0:6a:e0:a4:1b:07:6f:92:b0:a8:18:61:ea:b0:71:04:
         e5:00:ad:11:62:0f:0a:df:76:fd:ef:97:93:83:7c:70:c3:ff:
         21:8c:74:ac:20:4e:84:91:fd:c9:a4:93:32:7a:02:c1:2d:c2:
         d6:bf:d9:ba:97:23:54:58:72:05:42:c9:35:f2:66:a9:a9:8f:
         d5:fc:16:1d:62:ee:63:92:75:fd:b0:4b:03:81:dd:6d:96:fb:
         9f:91:07:e4:4c:d4:24:45:b9:8a:12:86:18:cd:3a:4e:94:3a:
         b6:0b:8b:93:47:01:81:73:6a:90:6a:56:d3:75:14:4e:37:f2:
         92:62:28:f8:8b:80:00:27:0f:1a:44:b0:94:23:79:59:33:58:
         5f:f0:fa:b3:14:70:2e:cd:72:eb:a9:ec:b5:7a:9b:27:11:c8:
         db:df:77:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMo/73KFlu7dL20AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk
NWQwYjU1ZjgtMTZhNy00YTVhLWIzYmQtOWMzZGFhNWNlZmE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOwfTlzKeZBMxWQlZ7JwBNkVLNxblMQuIWvL
G1oISN+LS+6rXDSJb2+MTv8tiRGhOYExSl2U+PyJTEOBQISyKEJL6I/kRt410xfF
5YCRKDftHDHI6wbsBeo15uklmFog4csTtdN4hqnhpSSG813ExStDvWwzKKg5UOWZ
ikHFMukqXC6oH0OQtavClakJyLz5cMiAKAz46I9+IYp0x/U7iyEnA1Vml/OBgeUQ
1W5Io1uoPaLmFpt8/EATzgJixpjcz4a7f/gMgCJD0LDLeZv6e+1QJxBtfkWshjfQ
OlhopsLv3dYXwEZ1M42CkcFqPRokd8eSvakE0I8n2lkGYkp3awIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPHduKFL0Niu56I73DsFFHmVz0m8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmQ2YWEwNmItNThjMS0z
ODk4LWEwMDYtYmI3MDkwOGVlMmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEROMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADl286Qa2vbfUtAHXWwQ8kUgsn6WFlVUmSXzmsQR8uYqo3tyTyi5V/nm
5ZUmruKH8Z+7dK/qnL49K+Hd4Twfh3Dnf7JtK5jqarXC7rY0Y0ho7VzNGaNudjzx
u66JwGrgpBsHb5KwqBhh6rBxBOUArRFiDwrfdv3vl5ODfHDD/yGMdKwgToSR/cmk
kzJ6AsEtwta/2bqXI1RYcgVCyTXyZqmpj9X8Fh1i7mOSdf2wSwOB3W2W+5+RB+RM
1CRFuYoShhjNOk6UOrYLi5NHAYFzapBqVtN1FE438pJiKPiLgAAnDxpEsJQjeVkz
WF/w+rMUcC7Ncuup7LV6mycRyNvfdys=
-----END CERTIFICATE-----
Generated at Sat Nov 1 10:01:44 2025 by rpki-client