Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f49b0436-1f80-3802-9fb5-3e8d48835807.roa
File:                     f49b0436-1f80-3802-9fb5-3e8d48835807.roa (raw, json)
Hash identifier:          5IG68sLvqz9NHOBpkqHDD58WL2xTC+FNRSWSJa+UGaQ=
Subject key identifier:   AC:77:26:A4:44:C2:39:89:FE:0F:59:2E:CC:D2:46:00:EE:72:72:97
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEEB778D2A7055C066461E140
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f49b0436-1f80-3802-9fb5-3e8d48835807.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     13335
IP address blocks:        172.69.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:78:d2:a7:05:5c:06:64:61:e1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=37c51f01-188c-4627-98f1-76fb559e3b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:86:aa:f0:ff:5b:68:74:e0:f8:d4:72:d8:0c:
                    ff:7f:27:3d:4e:c8:e1:73:46:fa:0d:8c:c4:dc:5c:
                    0a:ee:29:b5:69:db:f9:34:24:31:6b:3e:13:19:d1:
                    a8:74:71:e1:d7:53:1e:de:12:6e:b1:53:fb:7a:79:
                    31:af:fd:96:e8:a8:81:82:5a:26:a2:9d:9a:f5:c7:
                    25:36:2d:d8:68:9a:eb:5e:b0:14:8a:0b:32:8d:e2:
                    22:c1:96:43:a9:57:67:af:12:58:b7:10:7c:2f:68:
                    3e:34:a3:92:1e:ee:9e:dd:e7:05:31:ae:33:8e:09:
                    5b:1d:e3:90:da:80:c3:4e:a1:f0:64:c0:e4:f4:36:
                    17:0f:6e:90:97:4a:a4:63:07:8e:8b:c5:03:9b:4d:
                    08:87:cf:98:7a:2a:f6:eb:e2:b4:e6:9b:12:9b:11:
                    12:b0:e9:97:f6:74:94:ee:6d:92:42:f1:ef:42:af:
                    79:2c:50:f2:98:bb:6e:a0:94:32:f8:cb:c4:84:c1:
                    e8:d3:1b:4f:ee:0c:ab:1d:b2:e2:72:49:08:77:2a:
                    eb:7e:9f:45:1b:76:c6:d8:01:a8:e2:1b:b0:90:71:
                    07:c7:f3:a8:25:e1:48:ff:ee:a5:21:72:73:4a:75:
                    8a:6a:37:78:1e:56:14:72:d8:64:f0:7b:82:fb:71:
                    1f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:77:26:A4:44:C2:39:89:FE:0F:59:2E:CC:D2:46:00:EE:72:72:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f49b0436-1f80-3802-9fb5-3e8d48835807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:0f:17:7a:fa:76:7a:eb:3d:d5:a1:16:0f:00:56:48:0a:93:
         47:a6:b4:80:4e:50:11:5f:5f:67:d4:5e:11:72:db:b2:62:4b:
         37:d8:d4:ef:20:74:c8:f2:aa:5f:01:bd:77:42:2f:90:30:35:
         0c:d6:15:36:eb:30:46:22:c3:a7:ac:11:e1:c7:56:67:b6:33:
         66:48:b4:35:38:51:4b:59:a8:59:a4:48:45:d3:a1:68:b2:09:
         2e:31:24:d5:81:1e:1c:49:d1:4a:12:26:d8:57:5c:c6:a4:ef:
         26:00:ed:b7:0e:3d:5d:8a:da:36:ed:ca:a1:f6:94:50:45:f9:
         e8:28:0d:45:06:94:ba:84:c9:ed:64:17:a9:ad:fb:d4:3d:2c:
         c2:6b:06:f6:65:36:a9:22:18:25:24:f4:e3:23:24:5a:a3:e8:
         2c:87:91:78:f4:93:c7:b6:0e:76:ef:30:a1:a1:a8:f0:aa:8b:
         e5:9c:6a:71:ff:4a:dc:24:c2:5e:6e:0d:3f:43:bf:dc:de:e8:
         33:66:89:2e:8e:f4:a4:75:84:fa:4c:83:9b:06:6d:75:1d:06:
         fa:7e:f0:32:2d:3b:67:8c:bf:f8:58:45:73:94:6c:01:5a:73:
         9c:7a:11:b6:c6:2c:8d:8e:46:f7:3e:e0:34:fd:00:06:84:f3:
         a8:dd:29:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut3jSpwVcBmRh4UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk
MzdjNTFmMDEtMTg4Yy00NjI3LTk4ZjEtNzZmYjU1OWUzYjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4aq8P9baHTg+NRy2Az/fyc9Tsjhc0b6DYzE
3FwK7im1adv5NCQxaz4TGdGodHHh11Me3hJusVP7enkxr/2W6KiBglomop2a9ccl
Ni3YaJrrXrAUigsyjeIiwZZDqVdnrxJYtxB8L2g+NKOSHu6e3ecFMa4zjglbHeOQ
2oDDTqHwZMDk9DYXD26Ql0qkYweOi8UDm00Ih8+Yeir26+K05psSmxESsOmX9nSU
7m2SQvHvQq95LFDymLtuoJQy+MvEhMHo0xtP7gyrHbLickkIdyrrfp9FG3bG2AGo
4huwkHEHx/OoJeFI/+6lIXJzSnWKajd4HlYUcthk8HuC+3EfKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKx3JqREwjmJ/g9ZLszSRgDucnKXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjQ5YjA0MzYtMWY4MC0z
ODAyLTlmYjUtM2U4ZDQ4ODM1ODA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADYPF3r6dnrrPdWhFg8AVkgKk0emtIBOUBFfX2fUXhFy27JiSzfY1O8g
dMjyql8BvXdCL5AwNQzWFTbrMEYiw6esEeHHVme2M2ZItDU4UUtZqFmkSEXToWiy
CS4xJNWBHhxJ0UoSJthXXMak7yYA7bcOPV2K2jbtyqH2lFBF+egoDUUGlLqEye1k
F6mt+9Q9LMJrBvZlNqkiGCUk9OMjJFqj6CyHkXj0k8e2DnbvMKGhqPCqi+WcanH/
Stwkwl5uDT9Dv9ze6DNmiS6O9KR1hPpMg5sGbXUdBvp+8DItO2eMv/hYRXOUbAFa
c5x6EbbGLI2ORvc+4DT9AAaE86jdKZc=
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:10:40 2026 by rpki-client