Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0f30e15-1ff8-38c6-9b43-afc4f9fb0e89.roa
File:                     d0f30e15-1ff8-38c6-9b43-afc4f9fb0e89.roa (raw, json)
Hash identifier:          6uMtzHeZNUPUl8dnrwl3eDLJFoQ3Pg3Wt9Cx76sMLFA=
Subject key identifier:   5F:D2:E1:D3:9B:45:05:08:3A:88:79:A7:A4:AE:F5:07:DA:43:83:EC
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEA876E27FF9B18C3A9B3242B
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0f30e15-1ff8-38c6-9b43-afc4f9fb0e89.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        173.245.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:6e:27:ff:9b:18:c3:a9:b3:24:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=69b008a2-df6f-43fd-9137-bd90e7b25be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:81:e1:26:9d:5e:40:dd:92:cf:99:fe:70:15:
                    81:65:5c:bd:17:6d:57:30:5c:cc:54:7f:aa:7d:2a:
                    e7:b9:ce:a0:97:43:29:5c:4e:c8:18:e2:d4:23:9d:
                    27:c9:2a:b0:e0:8f:95:a6:3d:a3:e0:94:01:d5:01:
                    49:c8:f7:9d:a6:39:4c:17:e4:56:87:4f:bc:ca:75:
                    ad:ac:a6:10:10:6c:c8:72:0f:51:65:f0:0d:28:dc:
                    ec:e5:ee:80:4d:ab:0c:a8:8a:7c:0e:03:a3:a8:3f:
                    54:16:cc:17:dd:71:cb:4f:a6:52:8c:8c:f0:cc:5d:
                    9e:e7:78:a7:0a:22:45:d2:1e:fd:dc:c9:17:e2:eb:
                    9a:29:1b:6c:0b:87:11:a2:5c:a6:ea:cb:f7:8f:b1:
                    88:c8:aa:c3:8a:46:93:2f:d3:ee:6f:06:09:f2:3f:
                    58:03:63:10:eb:7e:73:dd:87:e3:c0:fe:da:02:08:
                    1d:4a:c9:fd:00:de:21:89:81:f4:35:33:ac:b0:68:
                    d6:cc:31:4c:61:2d:61:2c:98:d9:7c:38:73:0e:ec:
                    2e:a1:f9:f4:81:a0:68:99:2e:74:18:2b:77:77:28:
                    0a:b0:ab:df:7c:31:7f:20:a8:e9:a5:13:a5:3e:57:
                    06:5e:ba:cc:a4:b0:67:c4:6a:ae:e3:40:58:5e:26:
                    44:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D2:E1:D3:9B:45:05:08:3A:88:79:A7:A4:AE:F5:07:DA:43:83:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0f30e15-1ff8-38c6-9b43-afc4f9fb0e89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.245.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:56:c7:19:a1:56:23:7d:b4:c9:ae:1c:c3:e5:db:79:91:a1:
         b3:19:ff:4f:57:9d:e7:aa:34:3f:48:c7:40:0a:cd:cf:6f:dc:
         de:f0:43:6c:d1:ef:ef:96:b1:38:bd:53:a2:69:52:ca:d5:a8:
         81:39:5d:18:e4:33:0c:0f:41:88:f6:ba:5e:95:16:b5:5b:f8:
         35:48:f1:5c:f0:31:bb:3f:b4:a3:8b:1c:9c:ad:86:92:8d:6a:
         23:c1:36:ff:1a:e3:59:c5:28:c8:24:4b:93:b2:75:fb:af:0e:
         52:1e:f8:17:ce:8a:5d:15:06:74:b2:fa:30:d3:83:df:ea:6a:
         de:b2:69:8a:c3:77:6a:87:1e:32:0d:94:b2:82:11:5a:32:22:
         8a:b0:f0:4c:04:cc:1c:f8:89:47:8f:ed:45:b1:50:98:7c:84:
         d4:fd:58:ec:01:8b:17:d4:8d:09:71:3d:71:18:d8:07:cf:ee:
         0d:df:3f:a1:b5:0f:d3:68:12:00:13:34:d7:c5:55:e4:08:6a:
         f7:8f:b3:3e:1b:17:f1:fd:20:e6:98:25:a7:a2:43:bf:35:6a:
         85:40:c6:96:2e:46:b9:4a:fe:1c:03:69:27:60:8f:c8:30:9a:
         d3:1b:68:b6:95:b7:34:40:41:f2:d3:0a:38:64:b5:c8:f1:2a:
         ac:a9:b1:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh24n/5sYw6mzJCswDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk
NjliMDA4YTItZGY2Zi00M2ZkLTkxMzctYmQ5MGU3YjI1YmUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIHhJp1eQN2Sz5n+cBWBZVy9F21XMFzMVH+q
fSrnuc6gl0MpXE7IGOLUI50nySqw4I+Vpj2j4JQB1QFJyPedpjlMF+RWh0+8ynWt
rKYQEGzIcg9RZfANKNzs5e6ATasMqIp8DgOjqD9UFswX3XHLT6ZSjIzwzF2e53in
CiJF0h793MkX4uuaKRtsC4cRolym6sv3j7GIyKrDikaTL9PubwYJ8j9YA2MQ635z
3YfjwP7aAggdSsn9AN4hiYH0NTOssGjWzDFMYS1hLJjZfDhzDuwuofn0gaBomS50
GCt3dygKsKvffDF/IKjppROlPlcGXrrMpLBnxGqu40BYXiZE+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF/S4dObRQUIOoh5p6Su9QfaQ4PsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDBmMzBlMTUtMWZmOC0z
OGM2LTliNDMtYWZjNGY5ZmIwZTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfU/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD1WxxmhViN9tMmuHMPl23mRobMZ/09XneeqND9Ix0AKzc9v3N7wQ2zR
7++WsTi9U6JpUsrVqIE5XRjkMwwPQYj2ul6VFrVb+DVI8VzwMbs/tKOLHJythpKN
aiPBNv8a41nFKMgkS5OydfuvDlIe+BfOil0VBnSy+jDTg9/qat6yaYrDd2qHHjIN
lLKCEVoyIoqw8EwEzBz4iUeP7UWxUJh8hNT9WOwBixfUjQlxPXEY2AfP7g3fP6G1
D9NoEgATNNfFVeQIavePsz4bF/H9IOaYJaeiQ781aoVAxpYuRrlK/hwDaSdgj8gw
mtMbaLaVtzRAQfLTCjhktcjxKqypsc8=
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:00:02 2026 by rpki-client