Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/51538882-2131-3a5c-ac56-9683e4ffa1a2.roa
File:                     51538882-2131-3a5c-ac56-9683e4ffa1a2.roa (raw, json)
Hash identifier:          kg6hfNy7iScOE1k29BQqqkZkWJBsFUbE9I1mrPRGhoM=
Subject key identifier:   C1:FD:33:C8:B5:EF:D5:6A:52:05:05:F2:83:C5:1B:66:C9:F2:4B:1C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC9DBAE6E8F66DD34C014B180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/51538882-2131-3a5c-ac56-9683e4ffa1a2.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        172.68.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:ae:6e:8f:66:dd:34:c0:14:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=957cc0b1-fff7-400a-b266-5ccf61daf1a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:60:ca:7b:78:c1:0d:75:5a:07:81:ff:ca:bc:
                    e1:4d:24:24:c6:8f:62:6f:50:f0:eb:56:a2:85:e9:
                    5a:d0:2b:85:eb:b2:e2:04:40:af:9f:da:39:e6:f0:
                    d5:37:e5:81:41:5b:05:d8:bc:b3:0f:e6:78:b3:f9:
                    76:e6:91:3c:03:2a:ef:54:13:18:39:69:cc:cb:be:
                    cc:d0:77:54:80:f4:d3:6a:76:f5:3c:5b:61:72:a5:
                    36:2d:5a:ab:55:33:16:c2:14:61:1d:10:9c:65:84:
                    a3:80:55:5a:d0:6f:1d:7e:98:2a:29:90:d4:c0:b9:
                    28:11:ed:11:19:a4:bf:a8:9c:be:88:77:ee:af:2f:
                    ee:65:69:f4:52:a4:67:8f:03:89:45:17:47:04:6d:
                    1e:8a:f5:49:91:e3:90:46:20:ac:a6:c2:08:f4:84:
                    41:a6:d8:2a:63:8c:3c:04:59:c2:53:6c:9d:d1:d3:
                    a1:bf:f6:7b:6c:7f:b3:18:5d:f4:10:fd:10:d6:64:
                    be:59:c7:09:12:bc:8f:0d:32:80:69:7a:fb:f9:e4:
                    81:25:44:ac:8d:29:36:8a:82:48:e0:ce:6c:47:67:
                    07:6c:7e:4c:40:53:2b:46:3a:e5:66:f7:47:ee:d1:
                    86:97:0f:31:fb:81:22:b7:4e:05:54:bd:a0:79:af:
                    7c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FD:33:C8:B5:EF:D5:6A:52:05:05:F2:83:C5:1B:66:C9:F2:4B:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/51538882-2131-3a5c-ac56-9683e4ffa1a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:28:ea:50:65:55:59:2e:67:e0:0c:f0:5f:59:ba:38:ab:40:
         d8:b6:f5:cc:7a:04:87:6a:67:68:e5:b9:c6:2a:cb:00:3b:70:
         b3:87:4f:4c:a9:81:7d:06:c1:e8:41:b9:a6:7c:c0:cb:df:cf:
         04:01:5b:00:82:1d:7e:dc:cb:ac:2c:02:4f:bf:17:2b:42:1a:
         6a:d0:8c:f6:fc:b9:db:b9:96:cf:2a:08:5f:e4:0d:b1:a6:57:
         1c:10:a3:af:ca:63:5b:1d:b9:85:f0:79:19:e2:06:c0:15:12:
         78:1f:e2:13:00:6f:79:c6:ae:00:58:0d:fb:ce:45:04:33:78:
         fc:1a:74:23:d8:ab:eb:d8:f7:a4:87:5d:39:da:60:42:b5:ba:
         3d:9d:da:a1:0b:de:9e:96:39:99:99:18:f0:aa:a8:f5:20:e3:
         83:8b:98:01:cc:cf:c4:d2:fe:15:f8:a2:98:e8:aa:05:49:b7:
         c8:73:50:7c:09:9e:01:1d:3f:3e:0f:0c:67:27:c4:2e:09:f3:
         30:d5:44:37:82:16:19:29:6e:e5:b4:a2:08:7f:7e:d5:11:5f:
         fe:36:5e:66:67:f7:31:e9:04:d9:54:11:b4:76:3e:e4:17:fb:
         08:a7:64:3a:3f:2a:d4:f6:40:e9:a1:be:e4:20:cc:26:17:71:
         92:c8:99:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ265uj2bdNMAUsYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk
OTU3Y2MwYjEtZmZmNy00MDBhLWIyNjYtNWNjZjYxZGFmMWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWDKe3jBDXVaB4H/yrzhTSQkxo9ib1Dw61ai
hela0CuF67LiBECvn9o55vDVN+WBQVsF2LyzD+Z4s/l25pE8AyrvVBMYOWnMy77M
0HdUgPTTanb1PFthcqU2LVqrVTMWwhRhHRCcZYSjgFVa0G8dfpgqKZDUwLkoEe0R
GaS/qJy+iHfury/uZWn0UqRnjwOJRRdHBG0eivVJkeOQRiCspsII9IRBptgqY4w8
BFnCU2yd0dOhv/Z7bH+zGF30EP0Q1mS+WccJEryPDTKAaXr7+eSBJUSsjSk2ioJI
4M5sR2cHbH5MQFMrRjrlZvdH7tGGlw8x+4Eit04FVL2gea98TQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMH9M8i179VqUgUF8oPFG2bJ8kscMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTE1Mzg4ODItMjEzMS0z
YTVjLWFjNTYtOTY4M2U0ZmZhMWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC8o6lBlVVkuZ+AM8F9ZujirQNi29cx6BIdqZ2jlucYqywA7cLOHT0yp
gX0GwehBuaZ8wMvfzwQBWwCCHX7cy6wsAk+/FytCGmrQjPb8udu5ls8qCF/kDbGm
VxwQo6/KY1sduYXweRniBsAVEngf4hMAb3nGrgBYDfvORQQzePwadCPYq+vY96SH
XTnaYEK1uj2d2qEL3p6WOZmZGPCqqPUg44OLmAHMz8TS/hX4opjoqgVJt8hzUHwJ
ngEdPz4PDGcnxC4J8zDVRDeCFhkpbuW0ogh/ftURX/42XmZn9zHpBNlUEbR2PuQX
+winZDo/KtT2QOmhvuQgzCYXcZLImfg=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:09:02 2025 by rpki-client