Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a5291920-5929-3f3f-9fb9-67d690e183c7.roa
File:                     a5291920-5929-3f3f-9fb9-67d690e183c7.roa (raw, json)
Hash identifier:          H+MHqBFXqmRif5a6BD5GzRM0tJSbzhyr8X09NwlV/ao=
Subject key identifier:   D7:D2:9B:DA:E3:02:BF:FB:5C:2F:78:61:A5:FC:07:BD:C7:CC:AD:B9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4C54AE11A52D61A000EC9680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a5291920-5929-3f3f-9fb9-67d690e183c7.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     13335
IP address blocks:        172.69.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:ae:11:a5:2d:61:a0:00:ec:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=7e59ed7c-b1d2-48b4-b098-52873822f471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0a:23:43:68:09:c5:3e:a2:91:6d:64:13:43:
                    7c:ff:4f:fd:69:88:75:f2:c6:86:8a:49:f0:89:93:
                    67:02:5a:16:d8:f9:58:0b:15:fd:26:30:35:01:9a:
                    9b:7b:ed:23:b1:37:ec:1c:73:ac:b2:14:71:70:c1:
                    37:7a:92:cd:df:e9:7d:af:25:a5:8f:87:11:fb:db:
                    49:12:36:e3:d5:eb:9b:d4:f6:e0:e7:0e:d3:cc:a4:
                    82:93:3d:75:17:73:71:5c:c1:ae:6b:19:1a:e7:f4:
                    93:58:54:2a:38:07:7b:4d:61:7e:e6:2f:1f:dd:58:
                    81:2f:62:75:91:ce:a9:ce:ed:08:51:86:44:51:2e:
                    f8:57:ce:5b:f4:85:70:d2:10:92:15:e4:f3:90:fd:
                    8d:27:0c:b4:3c:10:88:9e:a7:41:e5:ed:a0:8c:3e:
                    bb:5c:3b:9d:f2:69:3e:fb:af:80:1d:4f:42:09:ba:
                    5b:93:fd:8d:94:2a:d6:4c:df:07:c4:b9:84:70:22:
                    ae:97:d9:99:8d:66:44:e0:df:23:4d:32:5c:0a:74:
                    48:91:2d:44:f4:ef:f0:73:e6:c7:8a:50:13:bb:07:
                    6f:15:f7:2f:3a:cb:28:79:f2:57:c7:f3:cf:cf:87:
                    18:b8:78:02:3f:45:4b:c2:a0:dc:2d:d9:53:4d:d5:
                    2d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D2:9B:DA:E3:02:BF:FB:5C:2F:78:61:A5:FC:07:BD:C7:CC:AD:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a5291920-5929-3f3f-9fb9-67d690e183c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:db:2e:0c:a9:83:b3:b9:b4:a7:75:52:42:a1:99:42:90:13:
         3d:a7:09:c5:bc:0e:a2:9c:ef:5f:af:68:19:e5:88:20:8e:3e:
         5e:bf:3e:be:b6:0c:74:a3:f5:03:c4:25:31:b8:4f:3d:04:7b:
         c0:61:ab:a0:78:a5:a6:54:6f:11:51:d9:e7:18:b3:3d:e0:57:
         71:db:61:9e:ba:1d:ab:af:b7:43:c5:9c:45:7d:42:ca:1e:dc:
         43:26:4e:7d:37:09:20:3f:69:8f:d2:4a:98:16:b8:7a:4a:2d:
         fb:32:bd:2c:c7:f9:6b:cc:96:a3:f5:b0:4d:33:67:8f:f7:c1:
         18:ad:68:71:27:7d:20:98:b1:ed:24:1e:6b:76:0b:2c:ae:75:
         6c:32:e3:7c:ac:49:c7:3b:0d:8c:cf:c4:5c:6f:bf:43:4e:6d:
         51:f4:bb:16:da:b2:df:bd:20:b7:6e:70:08:f4:11:9b:e2:1e:
         8f:a9:0d:00:4d:ff:39:4c:9c:60:94:1f:b6:ed:5f:4a:d6:f8:
         3d:2a:a7:fe:f2:45:4c:74:e6:ad:01:01:16:01:27:81:9b:5e:
         d0:ed:af:47:e3:09:9f:c1:f5:66:26:02:13:f0:78:d3:22:e3:
         9f:51:2d:e8:fb:c9:5d:8f:a1:92:f2:3d:00:b0:6e:4e:42:d8:
         8a:9d:7e:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVK4RpS1hoADsloAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk
N2U1OWVkN2MtYjFkMi00OGI0LWIwOTgtNTI4NzM4MjJmNDcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAojQ2gJxT6ikW1kE0N8/0/9aYh18saGiknw
iZNnAloW2PlYCxX9JjA1AZqbe+0jsTfsHHOsshRxcME3epLN3+l9ryWlj4cR+9tJ
Ejbj1eub1Pbg5w7TzKSCkz11F3NxXMGuaxka5/STWFQqOAd7TWF+5i8f3ViBL2J1
kc6pzu0IUYZEUS74V85b9IVw0hCSFeTzkP2NJwy0PBCInqdB5e2gjD67XDud8mk+
+6+AHU9CCbpbk/2NlCrWTN8HxLmEcCKul9mZjWZE4N8jTTJcCnRIkS1E9O/wc+bH
ilATuwdvFfcvOssoefJXx/PPz4cYuHgCP0VLwqDcLdlTTdUtyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNfSm9rjAr/7XC94YaX8B73HzK25MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTUyOTE5MjAtNTkyOS0z
ZjNmLTlmYjktNjdkNjkwZTE4M2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKXbLgypg7O5tKd1UkKhmUKQEz2nCcW8DqKc71+vaBnliCCOPl6/Pr62
DHSj9QPEJTG4Tz0Ee8Bhq6B4paZUbxFR2ecYsz3gV3HbYZ66Hauvt0PFnEV9Qsoe
3EMmTn03CSA/aY/SSpgWuHpKLfsyvSzH+WvMlqP1sE0zZ4/3wRitaHEnfSCYse0k
Hmt2CyyudWwy43ysScc7DYzPxFxvv0NObVH0uxbast+9ILducAj0EZviHo+pDQBN
/zlMnGCUH7btX0rW+D0qp/7yRUx05q0BARYBJ4GbXtDtr0fjCZ/B9WYmAhPweNMi
459RLej7yV2PoZLyPQCwbk5C2IqdfgM=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:28:45 2026 by rpki-client