Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5b57c942-8730-3669-abe0-76ebd7be03ab.roa
File:                     5b57c942-8730-3669-abe0-76ebd7be03ab.roa (raw, json)
Hash identifier:          S8E3ZMMocoAHuzFIUadiUSyBpc3m7xKY2V6Q5eaT3N8=
Subject key identifier:   5C:6C:D0:31:94:71:95:1C:D8:EE:88:83:66:D9:4A:74:B1:A5:B3:BF
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584B70371F27237181A2B0AB0900
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5b57c942-8730-3669-abe0-76ebd7be03ab.roa
Signing time:             Tue 07 Oct 2025 03:09:18 +0000
ROA not before:           Tue 07 Oct 2025 03:09:18 +0000
ROA not after:            Mon 05 Jan 2026 04:09:18 +0000
asID:                     14789
IP address blocks:        172.71.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:70:37:1f:27:23:71:81:a2:b0:ab:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct  7 03:09:18 2025 GMT
            Not After : Jan  5 04:09:18 2026 GMT
        Subject: CN=9d4c2ef5-e162-4592-9616-d8a208a6556a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e7:73:88:23:6b:be:12:17:f9:a4:ce:62:99:
                    0b:4a:4c:a0:b1:eb:e2:b9:76:18:f6:d4:40:68:fa:
                    9c:21:e2:dc:cc:6d:46:19:fe:31:26:4a:47:ad:e8:
                    2b:b1:a5:99:ec:be:c0:ff:81:94:f4:d7:70:4f:09:
                    63:80:fd:e1:6a:a9:d5:bd:49:0c:16:9f:0b:0f:09:
                    63:b0:a9:01:50:28:2d:7c:fd:12:cf:28:a5:02:2a:
                    77:79:a7:ad:7d:bb:b0:b3:71:98:c1:fc:6f:04:35:
                    a9:6c:c9:ed:83:4d:a8:f1:3a:86:71:ca:22:f2:db:
                    b4:9d:d0:c3:ab:48:33:39:d2:1c:f8:08:25:06:e5:
                    b1:e5:f8:b2:09:7f:af:40:45:db:3c:e7:6b:51:c3:
                    ae:fa:f6:69:4e:c8:4b:d6:43:3e:b8:a6:c4:10:54:
                    2a:0c:70:c3:31:19:09:fd:57:61:23:c3:4a:18:1c:
                    5b:cc:c2:cb:05:2b:18:ea:f6:f7:b4:d3:ed:c1:a1:
                    d5:bb:34:0d:40:96:e3:5f:c2:ed:1a:24:da:33:ab:
                    44:16:80:2e:03:79:f1:96:9c:d9:9c:12:b3:d0:8c:
                    03:53:93:11:2e:56:f2:7e:b8:1b:25:5e:81:01:aa:
                    ae:86:5a:c9:df:2f:fd:d8:74:8d:6d:98:5f:95:32:
                    50:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:6C:D0:31:94:71:95:1C:D8:EE:88:83:66:D9:4A:74:B1:A5:B3:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5b57c942-8730-3669-abe0-76ebd7be03ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:28:26:ba:6f:7d:8f:e0:39:6e:8d:d2:9b:4b:be:25:d7:05:
         c8:13:e8:bf:1c:cb:ae:d8:ff:d1:43:04:0f:28:e5:74:22:6b:
         d3:c7:c7:03:d9:9d:f3:4c:dd:79:e2:b4:22:8a:4a:6b:92:0a:
         ad:f0:c1:92:8b:93:b6:cd:d4:b6:0f:6b:62:ba:b3:ad:aa:a4:
         42:63:4b:c9:16:e7:d7:55:50:08:9c:d0:f5:f9:55:00:0a:43:
         60:77:4e:ad:cb:c3:bf:45:94:52:11:1c:d8:19:1a:9e:6a:f3:
         03:83:3f:04:39:fa:4a:fd:b4:fa:b1:49:60:c0:9a:b8:2a:88:
         43:6a:35:ff:11:ef:a5:09:0e:36:9e:7c:33:e9:3d:b5:aa:4e:
         45:f1:e8:ed:53:81:2e:ff:c5:93:24:09:6b:38:03:33:93:3e:
         58:db:82:5a:51:12:42:a4:97:06:bf:7f:0f:b6:21:e7:69:45:
         e8:8a:15:3d:2c:85:c3:84:e2:e1:38:3e:ae:42:51:59:ee:b2:
         1d:94:5c:b6:02:e4:b3:c8:84:81:57:96:16:c4:26:4e:54:63:
         8b:e1:f6:5c:56:2c:a4:76:f1:5b:b9:ad:cf:25:4e:a9:e0:26:
         71:08:cb:df:02:dd:63:c6:23:d9:cf:d9:51:14:86:a9:d5:21:
         2b:4d:a9:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtwNx8nI3GBorCrCQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MTAwNzAzMDkxOFoXDTI2MDEwNTA0MDkxOFowLzEtMCsGA1UEAxMk
OWQ0YzJlZjUtZTE2Mi00NTkyLTk2MTYtZDhhMjA4YTY1NTZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+dziCNrvhIX+aTOYpkLSkygseviuXYY9tRA
aPqcIeLczG1GGf4xJkpHregrsaWZ7L7A/4GU9NdwTwljgP3haqnVvUkMFp8LDwlj
sKkBUCgtfP0SzyilAip3eaetfbuws3GYwfxvBDWpbMntg02o8TqGccoi8tu0ndDD
q0gzOdIc+AglBuWx5fiyCX+vQEXbPOdrUcOu+vZpTshL1kM+uKbEEFQqDHDDMRkJ
/VdhI8NKGBxbzMLLBSsY6vb3tNPtwaHVuzQNQJbjX8LtGiTaM6tEFoAuA3nxlpzZ
nBKz0IwDU5MRLlbyfrgbJV6BAaquhlrJ3y/92HSNbZhflTJQeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFxs0DGUcZUc2O6Ig2bZSnSxpbO/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWI1N2M5NDItODczMC0z
NjY5LWFiZTAtNzZlYmQ3YmUwM2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFMoJrpvfY/gOW6N0ptLviXXBcgT6L8cy67Y/9FDBA8o5XQia9PHxwPZ
nfNM3XnitCKKSmuSCq3wwZKLk7bN1LYPa2K6s62qpEJjS8kW59dVUAic0PX5VQAK
Q2B3Tq3Lw79FlFIRHNgZGp5q8wODPwQ5+kr9tPqxSWDAmrgqiENqNf8R76UJDjae
fDPpPbWqTkXx6O1TgS7/xZMkCWs4AzOTPljbglpREkKklwa/fw+2IedpReiKFT0s
hcOE4uE4Pq5CUVnush2UXLYC5LPIhIFXlhbEJk5UY4vh9lxWLKR28Vu5rc8lTqng
JnEIy98C3WPGI9nP2VEUhqnVIStNqbU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:14:04 2025 by rpki-client