Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99e99c01-71d7-38b0-b504-024bec7c6183.roa
File:                     99e99c01-71d7-38b0-b504-024bec7c6183.roa (raw, json)
Hash identifier:          138jChPYZJRuHO4CxX3r1xCzaZgp9zB2E9qKPFeXwrU=
Subject key identifier:   76:A4:AA:91:26:5B:EF:26:FB:5B:47:81:5E:79:9C:F5:4B:A2:EF:20
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC9DBAB0286F1842AEAE89480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99e99c01-71d7-38b0-b504-024bec7c6183.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        172.68.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:ab:02:86:f1:84:2a:ea:e8:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=ea971c25-2e34-48ea-9c35-e05ae527e865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b6:95:d2:52:9a:9c:ee:e2:85:48:60:f7:39:
                    2c:10:c2:e0:5f:fe:1d:dd:b6:3b:ff:d9:bb:d8:ed:
                    57:00:c5:dc:1b:5a:bd:de:26:9d:ac:e7:9b:51:38:
                    90:fa:7a:65:da:8f:60:35:f1:6c:41:ae:39:dc:e7:
                    d9:d7:68:22:c3:c3:c1:8c:ee:81:de:e9:6f:fc:a5:
                    01:f6:85:a3:11:a4:60:37:92:51:9a:10:28:58:82:
                    b6:ce:79:a4:5a:37:f4:f9:ec:fc:1a:b6:38:b9:44:
                    23:a9:0b:c4:7f:22:f9:16:c3:e2:b6:8d:1c:f6:7c:
                    46:29:f2:06:2f:79:d9:60:0e:84:1e:6e:14:cb:b8:
                    fc:23:4e:ea:7b:2d:6a:e2:16:6c:9d:9a:7d:d2:b4:
                    40:62:3a:e5:b1:0e:f5:b8:75:d7:f4:55:68:5d:6f:
                    74:8f:23:5e:f1:39:66:39:53:11:c9:4e:81:c6:58:
                    5d:aa:f4:63:66:f7:3e:76:14:f9:01:b4:03:22:b9:
                    d4:3a:ba:87:b9:e1:9f:f7:af:1d:2d:9a:ba:eb:62:
                    98:5e:15:68:92:9a:28:7d:bb:1f:68:05:e1:ca:7f:
                    20:30:49:eb:c8:d3:3a:df:8e:eb:45:9a:34:a2:1f:
                    1f:7c:68:b7:b0:fa:f7:8e:3b:d9:bf:fd:5e:24:c6:
                    66:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A4:AA:91:26:5B:EF:26:FB:5B:47:81:5E:79:9C:F5:4B:A2:EF:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99e99c01-71d7-38b0-b504-024bec7c6183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d9:df:0e:34:e9:7b:0f:7a:10:a2:df:c2:f7:2b:4d:20:b5:
         02:6c:ff:f2:34:51:bb:99:09:4e:51:90:f2:45:6e:e5:26:52:
         6b:c2:72:93:ae:0c:4b:2c:a8:7f:13:20:e7:4d:20:f3:7b:46:
         28:3d:cd:57:eb:4a:52:7e:0d:90:86:df:fe:81:6f:b7:ef:78:
         d7:34:a2:bb:1d:67:be:77:e1:b5:6f:25:b9:ab:cb:58:4d:75:
         33:32:7d:61:37:d0:82:aa:3e:85:e8:96:85:90:c7:7b:00:b5:
         fc:c8:bc:23:e5:ab:30:5d:43:ce:45:f5:97:08:47:98:88:b7:
         ff:e8:3c:63:20:81:11:a9:69:5d:10:1d:33:e1:93:22:a8:72:
         71:a8:32:bc:1c:ef:7a:87:ff:8a:1b:c2:12:19:b8:c7:d7:9a:
         e7:a5:ec:df:ab:8f:dc:4d:57:d6:e8:b5:a4:87:5a:25:ba:b3:
         5a:d6:5a:60:9a:a1:f6:78:1d:eb:95:ab:b3:bb:dd:1c:cc:54:
         72:c0:46:d5:5e:74:88:06:99:50:8d:51:0f:a0:47:37:c4:1b:
         ea:e6:75:b7:7c:71:96:08:60:e6:95:f7:5c:04:ed:29:a5:1c:
         29:d4:a2:98:d8:10:5e:b6:bf:b4:87:84:0b:1a:ae:84:3d:75:
         a2:47:9e:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ26sChvGEKurolIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk
ZWE5NzFjMjUtMmUzNC00OGVhLTljMzUtZTA1YWU1MjdlODY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7aV0lKanO7ihUhg9zksEMLgX/4d3bY7/9m7
2O1XAMXcG1q93iadrOebUTiQ+npl2o9gNfFsQa453OfZ12giw8PBjO6B3ulv/KUB
9oWjEaRgN5JRmhAoWIK2znmkWjf0+ez8GrY4uUQjqQvEfyL5FsPito0c9nxGKfIG
L3nZYA6EHm4Uy7j8I07qey1q4hZsnZp90rRAYjrlsQ71uHXX9FVoXW90jyNe8Tlm
OVMRyU6BxlhdqvRjZvc+dhT5AbQDIrnUOrqHueGf968dLZq662KYXhVokpoofbsf
aAXhyn8gMEnryNM6347rRZo0oh8ffGi3sPr3jjvZv/1eJMZmdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHakqpEmW+8m+1tHgV55nPVLou8gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTllOTljMDEtNzFkNy0z
OGIwLWI1MDQtMDI0YmVjN2M2MTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABfZ3w406XsPehCi38L3K00gtQJs//I0UbuZCU5RkPJFbuUmUmvCcpOu
DEssqH8TIOdNIPN7Rig9zVfrSlJ+DZCG3/6Bb7fveNc0orsdZ7534bVvJbmry1hN
dTMyfWE30IKqPoXoloWQx3sAtfzIvCPlqzBdQ85F9ZcIR5iIt//oPGMggRGpaV0Q
HTPhkyKocnGoMrwc73qH/4obwhIZuMfXmuel7N+rj9xNV9botaSHWiW6s1rWWmCa
ofZ4HeuVq7O73RzMVHLARtVedIgGmVCNUQ+gRzfEG+rmdbd8cZYIYOaV91wE7Sml
HCnUopjYEF62v7SHhAsaroQ9daJHnvo=
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:17:39 2025 by rpki-client