Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0e69942c-5e68-39b2-84a7-ddaab90d22eb.roa
File:                     0e69942c-5e68-39b2-84a7-ddaab90d22eb.roa (raw, json)
Hash identifier:          cREcUJc0A576ScQfw32bAm7GE8fNXEDPWQmBE2LmhKc=
Subject key identifier:   13:F4:52:44:E3:2A:0D:EC:ED:18:F5:9D:65:CB:62:F0:9D:B4:F0:37
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584ACF710DDC833E7005D0C5CF30
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0e69942c-5e68-39b2-84a7-ddaab90d22eb.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     13335
IP address blocks:        172.70.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:0d:dc:83:3e:70:05:d0:c5:cf:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=d489fd5d-26f5-4724-931b-2150933b4153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1b:fa:c6:e6:5d:9f:74:6a:51:f3:76:bc:49:
                    12:12:57:98:7b:9f:32:aa:b3:90:f9:c7:f8:47:2d:
                    2e:0a:f4:49:c8:5d:2a:c9:9e:4e:80:3d:04:82:9a:
                    91:ee:51:f7:d6:3e:7f:12:20:c8:a0:46:18:d2:10:
                    03:ff:e6:16:d8:21:6d:42:69:0e:04:ad:fd:1e:fa:
                    52:79:df:d1:10:7f:e1:17:d5:4f:dd:64:53:67:93:
                    a0:31:c6:9f:bc:45:d8:50:67:2c:01:1c:82:2f:93:
                    43:f9:4b:58:d4:54:2a:bd:70:d6:14:4d:b0:4a:0f:
                    1a:35:dc:b5:69:47:36:8c:be:cb:cf:3e:e6:0a:74:
                    7d:cc:56:f0:3b:da:df:a3:81:de:d9:93:c4:ca:54:
                    b3:77:d6:d4:a5:bf:8d:07:91:f4:e3:0e:0b:37:be:
                    fe:5b:6d:35:67:74:f9:e8:44:16:0c:51:20:ab:50:
                    39:1b:f3:9f:47:72:00:3d:14:97:6f:1c:09:50:3a:
                    c3:ac:23:08:31:6b:a5:c6:bf:83:47:a2:ba:58:2d:
                    94:d2:2c:5a:b1:24:59:66:1d:ec:13:23:66:8f:4c:
                    31:bc:db:36:23:24:db:39:33:23:83:93:44:43:a8:
                    e5:04:25:ee:3b:2b:e3:56:2b:1d:9a:49:a3:d0:61:
                    2a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F4:52:44:E3:2A:0D:EC:ED:18:F5:9D:65:CB:62:F0:9D:B4:F0:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0e69942c-5e68-39b2-84a7-ddaab90d22eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:d2:89:92:dc:1a:2d:1e:a6:4f:c4:01:b2:ca:9a:7c:67:4d:
         88:c1:f3:6b:79:ef:68:9d:c4:68:51:45:2b:5e:db:20:27:7f:
         8e:9c:14:ab:9e:8a:3b:71:18:1f:11:ce:fa:ca:02:68:18:58:
         30:a2:ee:d0:6e:ab:a6:44:ed:03:3c:4a:d6:ed:76:c2:10:a4:
         10:ab:c1:75:55:40:f5:67:b9:15:02:1c:ba:19:32:cd:a7:6d:
         2f:48:d3:ef:fd:f0:5b:4d:9f:9f:8d:47:e0:8b:9e:8a:78:54:
         9f:54:9b:cc:92:84:46:82:0b:a6:90:ac:b0:5b:90:0a:58:f0:
         c8:cf:bb:17:2a:08:2a:c0:f5:68:ef:96:94:ef:6c:99:e9:4d:
         6b:85:b6:00:38:33:61:73:34:2a:b8:14:95:dd:4f:41:e7:80:
         17:68:23:3d:0c:95:5c:85:35:f6:f0:07:f5:7e:1a:7c:4c:de:
         62:4b:0b:f7:b4:0e:a3:d2:07:98:18:c5:69:d0:0a:7c:cd:93:
         99:5c:aa:0d:28:53:eb:14:98:7b:1c:c4:24:c9:b5:b9:78:13:
         8c:89:b9:67:de:91:e0:db:16:13:de:eb:4e:21:79:28:ae:c9:
         3e:bc:41:b3:46:de:92:7c:a0:bb:e1:0b:17:d0:f2:95:5f:16:
         55:a1:ca:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQ3cgz5wBdDFzzAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk
ZDQ4OWZkNWQtMjZmNS00NzI0LTkzMWItMjE1MDkzM2I0MTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhv6xuZdn3RqUfN2vEkSEleYe58yqrOQ+cf4
Ry0uCvRJyF0qyZ5OgD0EgpqR7lH31j5/EiDIoEYY0hAD/+YW2CFtQmkOBK39HvpS
ed/REH/hF9VP3WRTZ5OgMcafvEXYUGcsARyCL5ND+UtY1FQqvXDWFE2wSg8aNdy1
aUc2jL7Lzz7mCnR9zFbwO9rfo4He2ZPEylSzd9bUpb+NB5H04w4LN77+W201Z3T5
6EQWDFEgq1A5G/OfR3IAPRSXbxwJUDrDrCMIMWulxr+DR6K6WC2U0ixasSRZZh3s
EyNmj0wxvNs2IyTbOTMjg5NEQ6jlBCXuOyvjVisdmkmj0GEqlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBP0UkTjKg3s7Rj1nWXLYvCdtPA3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGU2OTk0MmMtNWU2OC0z
OWIyLTg0YTctZGRhYWI5MGQyMmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALzSiZLcGi0epk/EAbLKmnxnTYjB82t572idxGhRRSte2yAnf46cFKue
ijtxGB8RzvrKAmgYWDCi7tBuq6ZE7QM8StbtdsIQpBCrwXVVQPVnuRUCHLoZMs2n
bS9I0+/98FtNn5+NR+CLnop4VJ9Um8yShEaCC6aQrLBbkApY8MjPuxcqCCrA9Wjv
lpTvbJnpTWuFtgA4M2FzNCq4FJXdT0HngBdoIz0MlVyFNfbwB/V+GnxM3mJLC/e0
DqPSB5gYxWnQCnzNk5lcqg0oU+sUmHscxCTJtbl4E4yJuWfekeDbFhPe604heSiu
yT68QbNG3pJ8oLvhCxfQ8pVfFlWhyqM=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:55:19 2025 by rpki-client