Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/220eb0a9-5964-33b9-bbc7-c2f72035fe14.roa
File:                     220eb0a9-5964-33b9-bbc7-c2f72035fe14.roa (raw, json)
Hash identifier:          RuK5ynQbaua2qSO52wkh5mGMv9Wq8Vh30mzr1+W7ADo=
Subject key identifier:   48:D3:7B:6E:64:CA:EC:7E:17:C1:26:B4:CC:CF:35:9C:8D:31:80:95
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584B6EAB58763DDF85338FEA7E40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/220eb0a9-5964-33b9-bbc7-c2f72035fe14.roa
Signing time:             Mon 06 Oct 2025 13:51:51 +0000
ROA not before:           Mon 06 Oct 2025 13:51:51 +0000
ROA not after:            Sun 04 Jan 2026 14:51:51 +0000
asID:                     14789
IP address blocks:        172.71.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:ab:58:76:3d:df:85:33:8f:ea:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct  6 13:51:51 2025 GMT
            Not After : Jan  4 14:51:51 2026 GMT
        Subject: CN=903ddefd-e1b2-4748-ac25-1c09e6b7dfec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:56:00:79:c9:4f:76:20:46:5d:5d:73:8e:29:
                    c1:f4:b6:42:2e:cb:cf:c6:6a:f6:24:ba:b2:a4:46:
                    80:95:3e:65:aa:3e:6d:01:e1:7e:b2:4b:92:4c:f5:
                    be:9b:46:bb:76:c0:97:9f:01:4a:4c:6e:00:cf:9f:
                    2e:2a:35:b2:0e:f2:d6:4a:c7:e6:32:35:64:fc:14:
                    e8:d4:0b:4e:2b:60:2a:cc:7b:3f:94:61:ed:6d:9f:
                    ab:6d:b1:d4:b8:97:10:c2:d0:0b:e0:28:57:6f:60:
                    84:94:18:a3:ec:d6:d5:93:ae:31:a0:8c:6d:a2:46:
                    20:57:1a:b3:97:c7:5c:8c:03:0f:db:5b:b0:56:5f:
                    8b:09:7c:5a:f5:ed:41:1f:6e:64:74:5f:05:08:0c:
                    09:1f:42:fe:0f:18:20:39:bd:c4:8e:60:cf:16:83:
                    1b:9c:8c:04:0c:ad:15:1a:ed:29:24:69:e3:2b:3b:
                    9e:11:7d:ff:f5:a7:6c:01:10:83:1e:5f:da:c6:d8:
                    67:86:4b:9a:c2:ed:e8:df:95:89:1c:cc:59:2f:4e:
                    7b:a2:57:02:87:35:d0:0b:17:ee:d2:c0:be:20:9e:
                    5b:3e:2a:c6:a5:db:01:d2:d9:f6:4b:e3:ce:66:7e:
                    28:f6:6b:87:d4:76:cd:29:07:7b:f6:85:17:6c:90:
                    71:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D3:7B:6E:64:CA:EC:7E:17:C1:26:B4:CC:CF:35:9C:8D:31:80:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/220eb0a9-5964-33b9-bbc7-c2f72035fe14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:a1:00:27:bf:eb:5f:38:12:98:c2:4e:5f:5f:b5:b2:f8:11:
         bc:e7:5c:7a:14:11:a3:0f:62:19:55:b3:a3:79:36:87:04:2c:
         3c:2d:97:82:27:3b:0c:e8:b7:e3:a8:2e:f7:1c:2f:66:ac:b5:
         b0:7a:e2:f4:dc:15:e6:94:84:4b:49:5b:13:bc:08:9c:56:f5:
         ee:d8:43:43:4d:ae:f3:6c:44:91:66:ca:5e:12:e8:48:5c:d8:
         ea:ba:61:2d:33:d2:7c:16:ef:17:70:ac:5b:f3:79:5d:9c:6e:
         d3:3b:48:0f:43:09:e7:07:70:40:bc:37:ea:a3:04:92:f2:9d:
         8f:3c:20:ea:98:d0:27:56:88:6e:17:ee:b1:82:a0:0b:81:5d:
         82:85:d6:a5:c2:76:86:0a:77:45:84:c4:3c:f6:48:c0:9d:39:
         7b:7c:26:3c:b6:ab:6b:22:7c:b2:15:f7:b0:4b:15:57:5a:30:
         5c:41:29:67:90:12:b1:03:59:29:57:63:97:29:18:c1:0d:51:
         f1:36:04:d8:cb:bb:40:b5:e9:91:c1:0d:9e:f1:d1:85:b8:e9:
         4b:1c:dd:ec:a1:e5:74:f1:00:f0:90:c6:c0:20:f9:f2:87:fc:
         39:72:4d:df:4f:2b:19:2d:fe:f1:77:16:26:8a:09:80:9e:15:
         34:68:ab:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtuq1h2Pd+FM4/qfkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MTAwNjEzNTE1MVoXDTI2MDEwNDE0NTE1MVowLzEtMCsGA1UEAxMk
OTAzZGRlZmQtZTFiMi00NzQ4LWFjMjUtMWMwOWU2YjdkZmVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFYAeclPdiBGXV1zjinB9LZCLsvPxmr2JLqy
pEaAlT5lqj5tAeF+skuSTPW+m0a7dsCXnwFKTG4Az58uKjWyDvLWSsfmMjVk/BTo
1AtOK2AqzHs/lGHtbZ+rbbHUuJcQwtAL4ChXb2CElBij7NbVk64xoIxtokYgVxqz
l8dcjAMP21uwVl+LCXxa9e1BH25kdF8FCAwJH0L+DxggOb3EjmDPFoMbnIwEDK0V
Gu0pJGnjKzueEX3/9adsARCDHl/axthnhkuawu3o35WJHMxZL057olcChzXQCxfu
0sC+IJ5bPirGpdsB0tn2S+POZn4o9muH1HbNKQd79oUXbJBxawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEjTe25kyux+F8EmtMzPNZyNMYCVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjIwZWIwYTktNTk2NC0z
M2I5LWJiYzctYzJmNzIwMzVmZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEihACe/6184EpjCTl9ftbL4EbznXHoUEaMPYhlVs6N5NocELDwtl4In
Owzot+OoLvccL2astbB64vTcFeaUhEtJWxO8CJxW9e7YQ0NNrvNsRJFmyl4S6Ehc
2Oq6YS0z0nwW7xdwrFvzeV2cbtM7SA9DCecHcEC8N+qjBJLynY88IOqY0CdWiG4X
7rGCoAuBXYKF1qXCdoYKd0WExDz2SMCdOXt8Jjy2q2sifLIV97BLFVdaMFxBKWeQ
ErEDWSlXY5cpGMENUfE2BNjLu0C16ZHBDZ7x0YW46Usc3eyh5XTxAPCQxsAg+fKH
/DlyTd9PKxkt/vF3FiaKCYCeFTRoqxg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:08:47 2025 by rpki-client