Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/79fc54d2-5c38-3a4c-a876-268cfa958129.roa
File:                     79fc54d2-5c38-3a4c-a876-268cfa958129.roa (raw, json)
Hash identifier:          hVuPF+iUcvB1OAku0tghzB7TnQWDFMKc+AvKLz6ihhM=
Subject key identifier:   CA:E1:02:78:81:92:0F:79:2F:7E:B1:F7:BD:17:50:D7:B4:03:A5:00
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584ACB4103DB03C264B422E4F1A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/79fc54d2-5c38-3a4c-a876-268cfa958129.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        172.69.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:41:03:db:03:c2:64:b4:22:e4:f1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=a583c0e8-849c-41fc-a7e1-5b08f3643aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ae:c7:d6:c2:c8:51:f1:dd:4e:e4:02:93:41:
                    51:0a:e3:8d:61:21:a3:ec:72:cd:9d:a7:44:39:17:
                    92:c7:01:9b:44:0b:44:2a:09:a7:80:3b:09:fc:8a:
                    15:f0:8d:d7:de:ee:2f:b7:eb:ce:0a:d2:ac:b9:27:
                    85:d0:54:6c:cc:38:dc:83:60:20:a6:56:65:41:89:
                    ae:6a:c6:7a:f3:e5:a8:b8:b4:73:db:35:7f:19:3a:
                    9f:7d:9c:e5:41:cc:b9:1c:91:fb:ff:13:86:ff:99:
                    bc:17:8d:ed:cc:5c:0f:cc:e8:d8:15:c4:57:fc:6e:
                    41:d0:83:8c:f2:ea:55:5f:dc:f1:78:52:16:32:3a:
                    46:2f:82:23:17:f3:6b:42:b0:ce:1f:5d:2c:2e:e7:
                    3d:6b:eb:a9:0a:af:f0:98:f1:3b:42:49:41:a0:e3:
                    e6:e6:f4:1f:ed:bf:12:30:1d:23:cd:a4:81:a1:7c:
                    bf:61:d7:45:95:a8:ee:9b:c5:cb:14:ea:c3:1a:b8:
                    18:5b:a2:40:b3:68:43:00:9c:2f:d9:93:cc:f4:4e:
                    43:0e:38:09:c1:65:51:8b:80:f4:d0:37:ea:fa:2a:
                    d4:ac:a8:68:fa:fe:59:9f:5e:93:4a:eb:c3:29:c8:
                    3c:62:73:f0:11:e5:78:d5:f4:1d:7b:99:d4:8d:39:
                    1a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E1:02:78:81:92:0F:79:2F:7E:B1:F7:BD:17:50:D7:B4:03:A5:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/79fc54d2-5c38-3a4c-a876-268cfa958129.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:2d:d3:29:3e:a9:22:59:d5:34:e4:a6:ef:3a:82:d8:32:e4:
         1d:78:f0:79:7b:25:44:68:4b:03:f2:44:42:65:d6:90:83:f9:
         df:7e:96:bc:82:58:19:be:15:6e:c2:aa:55:78:f8:7e:ce:94:
         24:d9:24:b5:f9:09:37:67:ad:f1:8d:4a:b7:67:ef:d6:58:d6:
         a7:1e:81:22:69:0b:60:04:0e:b1:39:51:0c:2a:b4:82:05:97:
         19:f6:10:97:60:0c:50:a1:a6:dc:9a:55:9e:fb:b8:bd:86:9d:
         7e:df:f7:13:5b:f1:20:95:b3:be:d3:fd:92:fb:80:f2:a3:6c:
         9b:4b:ab:80:c4:a3:7b:ae:f6:68:cb:be:f2:0a:19:aa:12:f7:
         9b:43:81:ac:f1:af:8f:77:47:72:fe:cb:37:95:19:64:82:98:
         f3:a7:0b:83:0d:e2:bc:67:0c:9a:67:ad:da:69:01:63:0f:67:
         d9:a3:3b:83:7a:6e:8e:96:97:54:4e:60:b6:54:72:63:7a:bf:
         7d:14:e6:c9:cc:bb:f1:16:87:96:21:4f:95:cc:5d:73:a9:e8:
         f5:81:4e:7b:71:ab:8d:07:a0:aa:29:56:94:36:a5:a3:b4:c8:
         21:c5:2b:79:b8:46:96:ec:97:dd:17:84:ab:89:cc:56:b3:3c:
         0e:43:a9:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQQPbA8JktCLk8aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk
YTU4M2MwZTgtODQ5Yy00MWZjLWE3ZTEtNWIwOGYzNjQzYWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta7H1sLIUfHdTuQCk0FRCuONYSGj7HLNnadE
OReSxwGbRAtEKgmngDsJ/IoV8I3X3u4vt+vOCtKsuSeF0FRszDjcg2AgplZlQYmu
asZ68+WouLRz2zV/GTqffZzlQcy5HJH7/xOG/5m8F43tzFwPzOjYFcRX/G5B0IOM
8upVX9zxeFIWMjpGL4IjF/NrQrDOH10sLuc9a+upCq/wmPE7QklBoOPm5vQf7b8S
MB0jzaSBoXy/YddFlajum8XLFOrDGrgYW6JAs2hDAJwv2ZPM9E5DDjgJwWVRi4D0
0Dfq+irUrKho+v5Zn16TSuvDKcg8YnPwEeV41fQde5nUjTkaZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMrhAniBkg95L36x970XUNe0A6UAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzlmYzU0ZDItNWMzOC0z
YTRjLWE4NzYtMjY4Y2ZhOTU4MTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHYt0yk+qSJZ1TTkpu86gtgy5B148Hl7JURoSwPyREJl1pCD+d9+lryC
WBm+FW7CqlV4+H7OlCTZJLX5CTdnrfGNSrdn79ZY1qcegSJpC2AEDrE5UQwqtIIF
lxn2EJdgDFChptyaVZ77uL2GnX7f9xNb8SCVs77T/ZL7gPKjbJtLq4DEo3uu9mjL
vvIKGaoS95tDgazxr493R3L+yzeVGWSCmPOnC4MN4rxnDJpnrdppAWMPZ9mjO4N6
bo6Wl1ROYLZUcmN6v30U5snMu/EWh5YhT5XMXXOp6PWBTntxq40HoKopVpQ2paO0
yCHFK3m4Rpbsl90XhKuJzFazPA5DqXo=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:55:24 2025 by rpki-client