Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/77756e04-1139-3bbb-b595-468098097acb.roa
File:                     77756e04-1139-3bbb-b595-468098097acb.roa (raw, json)
Hash identifier:          /gc2qU+PueqT1tYI1CCUEpOkI9Kx06sRI4wEdn8CsHc=
Subject key identifier:   0C:D5:10:4F:97:D3:16:A5:F8:37:F7:EC:04:A6:C6:52:D6:96:BE:06
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849EEB50B3C001842435C210F00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/77756e04-1139-3bbb-b595-468098097acb.roa
Signing time:             Thu 22 May 2025 01:00:51 +0000
ROA not before:           Thu 22 May 2025 01:00:51 +0000
ROA not after:            Wed 20 Aug 2025 01:00:51 +0000
asID:                     13335
IP address blocks:        172.71.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:b5:0b:3c:00:18:42:43:5c:21:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 22 01:00:51 2025 GMT
            Not After : Aug 20 01:00:51 2025 GMT
        Subject: CN=2ab6b97e-f579-423f-b6ae-1d224225336e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2d:20:7a:12:77:d9:d1:92:48:9d:9a:56:61:
                    c4:c4:c7:71:26:bf:6f:3f:93:f8:cd:b4:e2:4a:5d:
                    da:99:5f:a1:a9:08:67:d6:d4:2f:6a:63:33:b3:ee:
                    66:98:f9:ef:f2:9e:4d:32:12:02:d4:0b:4b:a0:8f:
                    1d:9d:d7:a3:5d:d4:63:52:1f:05:25:4b:10:89:29:
                    cb:c0:04:1e:ec:8e:7f:0f:49:2b:8f:36:a3:48:32:
                    de:13:b6:52:14:d4:87:fb:35:b1:eb:64:3d:4b:08:
                    86:be:0a:8c:42:3d:55:9d:69:60:1a:54:e0:a0:01:
                    ab:71:58:40:a5:a3:6b:a6:fe:1a:b9:61:0b:81:7d:
                    e6:52:c0:a6:69:c6:df:89:3d:0e:1c:52:9f:d9:71:
                    f8:2d:b1:c5:9a:db:07:48:48:df:e1:b9:34:a3:8f:
                    fe:df:f3:f4:0e:36:6b:fe:c4:ff:84:82:38:75:de:
                    53:d5:ea:35:5a:55:34:eb:af:e0:b1:97:56:d8:87:
                    7f:a3:6a:72:5f:b8:97:bb:7c:96:c8:10:25:e5:d5:
                    0d:c7:a5:f6:d5:0f:7a:37:93:ea:7e:ff:6f:be:d9:
                    9b:d8:b2:d7:57:d5:f9:67:75:95:13:fd:40:64:97:
                    98:e2:4f:bf:1a:55:e5:51:49:e3:db:ca:9f:40:e6:
                    ad:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D5:10:4F:97:D3:16:A5:F8:37:F7:EC:04:A6:C6:52:D6:96:BE:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/77756e04-1139-3bbb-b595-468098097acb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:35:32:38:5d:4f:76:bb:d9:c9:c4:26:a3:c0:d2:d1:09:9f:
         33:fa:89:e9:dc:ca:d6:e4:80:01:ce:b4:8f:c8:2f:4f:76:b6:
         c6:87:c2:df:78:4e:1b:ae:c3:4c:af:cb:8a:5f:ad:d1:bf:d4:
         e5:a7:71:bf:67:3e:14:fd:d9:a5:4e:98:88:ee:29:1b:e0:66:
         99:be:1b:c8:e0:10:30:bf:50:c5:8d:1e:56:2b:26:e3:20:2d:
         e1:bd:37:ef:43:ba:58:ac:50:22:7d:40:10:6e:fb:96:9e:80:
         cd:2d:d4:fd:7b:c2:2c:3b:40:72:b1:25:02:2b:cb:27:15:c1:
         db:8a:46:c0:8d:73:92:d1:24:c5:e5:76:20:a5:33:64:d2:c2:
         43:7c:3a:a3:88:60:97:99:23:e4:fc:12:8a:c0:f5:d7:97:d8:
         52:7c:88:cc:c9:0a:60:ce:3f:aa:5f:97:82:3b:4e:5f:e2:41:
         b5:32:b5:b6:0c:47:5d:2c:bc:27:91:18:70:60:23:97:4c:af:
         74:8b:2d:78:a7:ba:45:dc:60:1f:69:81:85:47:fd:f0:12:52:
         9c:a9:0b:45:2e:3d:36:5e:8d:0d:ab:21:99:31:c0:5a:30:e0:
         b2:de:1d:ec:08:25:52:ea:42:22:b2:8f:a6:5e:d6:d1:48:03:
         49:3e:71:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnutQs8ABhCQ1whDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUyMjAxMDA1MVoXDTI1MDgyMDAxMDA1MVowLzEtMCsGA1UEAxMk
MmFiNmI5N2UtZjU3OS00MjNmLWI2YWUtMWQyMjQyMjUzMzZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly0gehJ32dGSSJ2aVmHExMdxJr9vP5P4zbTi
Sl3amV+hqQhn1tQvamMzs+5mmPnv8p5NMhIC1AtLoI8dndejXdRjUh8FJUsQiSnL
wAQe7I5/D0krjzajSDLeE7ZSFNSH+zWx62Q9SwiGvgqMQj1VnWlgGlTgoAGrcVhA
paNrpv4auWELgX3mUsCmacbfiT0OHFKf2XH4LbHFmtsHSEjf4bk0o4/+3/P0DjZr
/sT/hII4dd5T1eo1WlU066/gsZdW2Id/o2pyX7iXu3yWyBAl5dUNx6X21Q96N5Pq
fv9vvtmb2LLXV9X5Z3WVE/1AZJeY4k+/GlXlUUnj28qfQOat0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAzVEE+X0xal+Df37ASmxlLWlr4GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzc3NTZlMDQtMTEzOS0z
YmJiLWI1OTUtNDY4MDk4MDk3YWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMU1MjhdT3a72cnEJqPA0tEJnzP6iencytbkgAHOtI/IL092tsaHwt94
Thuuw0yvy4pfrdG/1OWncb9nPhT92aVOmIjuKRvgZpm+G8jgEDC/UMWNHlYrJuMg
LeG9N+9DulisUCJ9QBBu+5aegM0t1P17wiw7QHKxJQIryycVwduKRsCNc5LRJMXl
diClM2TSwkN8OqOIYJeZI+T8EorA9deX2FJ8iMzJCmDOP6pfl4I7Tl/iQbUytbYM
R10svCeRGHBgI5dMr3SLLXinukXcYB9pgYVH/fASUpypC0UuPTZejQ2rIZkxwFow
4LLeHewIJVLqQiKyj6Ze1tFIA0k+cac=
-----END CERTIFICATE-----
Generated at Tue Jul 1 22:49:24 2025 by rpki-client