Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5e8dc8c-5149-3a49-9ef3-d8924030d642.roa
File:                     d5e8dc8c-5149-3a49-9ef3-d8924030d642.roa (raw, json)
Hash identifier:          WGaRqZVMgrdB5QZpvBAyjl1ZecV3sPt86Fv17IcHcQk=
Subject key identifier:   D9:0F:01:EA:E8:BB:76:FC:C5:32:88:B6:04:09:6C:F7:5C:FB:12:18
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E5084A8F378C5619DB080F280
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5e8dc8c-5149-3a49-9ef3-d8924030d642.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        172.70.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:a8:f3:78:c5:61:9d:b0:80:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=6d195452-d73e-422a-a3ec-6afbf6c89b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9a:4f:47:40:ec:34:cc:54:ce:35:77:ca:e7:
                    72:a7:3c:02:68:ab:87:ea:fc:f4:e3:c1:ab:23:52:
                    fa:b8:f1:52:04:24:ee:4f:47:a9:87:49:a8:66:11:
                    11:39:ac:b9:63:d4:72:d2:e4:00:e3:22:84:9a:c2:
                    c6:6b:57:d8:81:50:3e:78:e1:33:7a:6d:68:8c:06:
                    55:e5:a8:d5:73:9a:85:02:da:3d:f8:f9:3b:a6:7d:
                    14:4e:78:74:6a:a9:ff:96:82:5f:01:c0:d1:f5:ae:
                    bc:44:db:e0:69:e2:7f:3e:50:b9:e7:a1:ea:ef:ee:
                    d7:5d:d6:67:2d:8b:42:05:3a:4b:6d:fb:22:ed:ad:
                    6d:f9:98:df:77:d2:34:fe:60:3e:48:f3:f2:13:4a:
                    74:b4:5b:b0:90:e9:8f:0b:a1:a2:c2:a3:da:70:60:
                    61:09:c6:b3:28:91:73:e4:48:83:2a:7c:be:1f:75:
                    8e:6b:74:2f:3d:bb:ef:01:17:ce:4c:71:06:e2:1d:
                    08:34:59:7f:b7:9e:90:c7:08:8b:82:57:e9:25:22:
                    78:51:4b:dd:8d:bf:cf:9d:5f:4b:65:d7:af:5f:da:
                    09:2b:a6:c6:98:db:fa:2e:c5:1d:7e:c5:5b:c0:0d:
                    77:a1:6e:db:f8:45:68:c6:f3:05:19:1a:51:80:f6:
                    fa:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:0F:01:EA:E8:BB:76:FC:C5:32:88:B6:04:09:6C:F7:5C:FB:12:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5e8dc8c-5149-3a49-9ef3-d8924030d642.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:22:41:59:4a:07:4a:d3:08:be:50:5b:d8:83:c5:89:02:7b:
         a9:53:42:8f:e6:cd:24:f7:a2:a9:81:34:b8:f3:d2:be:2f:2a:
         23:8c:64:e6:ba:09:7f:8e:25:c0:c1:eb:fa:fe:1a:ce:1c:7d:
         3c:61:ee:10:21:54:05:33:5a:87:f5:ad:f4:37:42:f2:ea:81:
         29:6c:81:a2:42:1f:b6:99:bd:12:2a:96:85:9e:29:8b:0c:09:
         ed:64:10:78:66:39:e7:98:99:04:f9:7c:41:0d:d0:35:03:fa:
         f1:ab:bf:98:d4:26:6a:11:3d:39:9d:52:5d:8b:b1:96:d2:6d:
         a3:7e:2f:4f:d8:8c:b9:3a:37:67:08:46:9b:76:99:b4:b7:17:
         f8:0d:f1:b7:7d:c5:6e:6e:41:a2:1d:7f:2b:07:13:e1:ea:bb:
         98:06:0c:21:43:0f:fd:c4:ca:6b:1c:9e:dc:65:68:70:d1:30:
         ae:de:62:94:01:a6:9e:9e:b2:05:4d:66:2a:a3:2e:a1:e6:ac:
         63:b9:eb:5e:f0:e7:e0:69:82:df:e1:66:12:c0:65:83:22:a3:
         34:77:bc:60:3b:52:b6:27:e0:38:a0:2b:cb:19:af:07:ef:c5:
         e6:ef:0e:d7:8c:ea:7a:d2:14:5a:b1:e1:ef:3a:97:04:b4:ab:
         b3:f8:e4:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhKjzeMVhnbCA8oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk
NmQxOTU0NTItZDczZS00MjJhLWEzZWMtNmFmYmY2Yzg5YjgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5pPR0DsNMxUzjV3yudypzwCaKuH6vz048Gr
I1L6uPFSBCTuT0eph0moZhEROay5Y9Ry0uQA4yKEmsLGa1fYgVA+eOEzem1ojAZV
5ajVc5qFAto9+Pk7pn0UTnh0aqn/loJfAcDR9a68RNvgaeJ/PlC556Hq7+7XXdZn
LYtCBTpLbfsi7a1t+Zjfd9I0/mA+SPPyE0p0tFuwkOmPC6GiwqPacGBhCcazKJFz
5EiDKny+H3WOa3QvPbvvARfOTHEG4h0INFl/t56QxwiLglfpJSJ4UUvdjb/PnV9L
ZdevX9oJK6bGmNv6LsUdfsVbwA13oW7b+EVoxvMFGRpRgPb6nQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNkPAerou3b8xTKItgQJbPdc+xIYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDVlOGRjOGMtNTE0OS0z
YTQ5LTllZjMtZDg5MjQwMzBkNjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEY+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADEiQVlKB0rTCL5QW9iDxYkCe6lTQo/mzST3oqmBNLjz0r4vKiOMZOa6
CX+OJcDB6/r+Gs4cfTxh7hAhVAUzWof1rfQ3QvLqgSlsgaJCH7aZvRIqloWeKYsM
Ce1kEHhmOeeYmQT5fEEN0DUD+vGrv5jUJmoRPTmdUl2LsZbSbaN+L0/YjLk6N2cI
Rpt2mbS3F/gN8bd9xW5uQaIdfysHE+Hqu5gGDCFDD/3EymscntxlaHDRMK7eYpQB
pp6esgVNZiqjLqHmrGO5617w5+Bpgt/hZhLAZYMiozR3vGA7UrYn4DigK8sZrwfv
xebvDteM6nrSFFqx4e86lwS0q7P45Dw=
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:53:49 2026 by rpki-client