Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b539d4db-3c7f-398c-a05d-94f2e6e59fdd.roa
File:                     b539d4db-3c7f-398c-a05d-94f2e6e59fdd.roa (raw, json)
Hash identifier:          L8hyPTXmMTX0oF6kWJxm5HV3T2BzboAffveHYLhBOOM=
Subject key identifier:   78:F7:F7:E5:6D:02:D3:8C:D4:16:E7:EA:99:FA:CC:68:36:02:45:EC
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584B64B379E8DA6148445FABAE80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b539d4db-3c7f-398c-a05d-94f2e6e59fdd.roa
Signing time:             Fri 03 Oct 2025 00:10:09 +0000
ROA not before:           Fri 03 Oct 2025 00:10:09 +0000
ROA not after:            Thu 01 Jan 2026 01:10:09 +0000
asID:                     14789
IP address blocks:        172.71.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:b3:79:e8:da:61:48:44:5f:ab:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct  3 00:10:09 2025 GMT
            Not After : Jan  1 01:10:09 2026 GMT
        Subject: CN=34c94d3b-e33f-4724-b2a1-81903485da7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c9:96:9b:08:d4:79:75:95:06:ab:07:4f:2d:
                    93:e9:38:be:8e:b6:bc:29:aa:0e:a4:69:80:af:82:
                    70:9f:47:cb:50:52:d8:93:d7:21:5f:dd:95:1f:df:
                    cf:5a:3a:6d:5a:ce:86:ba:54:d6:11:99:be:1b:be:
                    da:e9:31:4d:9e:0f:e6:b0:46:21:f6:ae:df:7b:f4:
                    8c:de:45:4b:81:c4:c3:6c:32:de:10:99:07:dc:d5:
                    ee:69:fb:16:31:a1:a2:ff:a0:fc:18:42:8c:6b:70:
                    7e:a8:2d:7a:7d:ce:22:df:0e:23:36:bc:17:5b:7e:
                    0e:28:99:93:88:81:86:e2:40:e0:f5:2d:dd:f9:8d:
                    3c:15:e3:0c:8f:7c:cf:ef:79:c7:c0:6c:48:9b:09:
                    ae:c6:70:06:a1:bc:f7:51:96:db:7a:70:ec:a2:9c:
                    56:f4:00:08:76:cb:9f:53:70:50:3f:b4:19:24:fb:
                    0f:53:d3:94:1d:0b:26:67:3a:f9:3e:01:77:69:a2:
                    28:e6:7c:12:45:17:e7:0e:e1:1e:28:f7:4c:9c:ac:
                    7d:30:77:71:a7:74:ba:06:b8:3c:4d:a5:93:27:9b:
                    ba:d1:a1:c9:fd:06:4e:11:4c:bd:bd:88:c8:7c:f0:
                    75:3a:77:b3:ac:62:c4:dc:bb:7e:dd:7d:07:19:cd:
                    e4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F7:F7:E5:6D:02:D3:8C:D4:16:E7:EA:99:FA:CC:68:36:02:45:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b539d4db-3c7f-398c-a05d-94f2e6e59fdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:f2:2a:f8:35:35:f9:a6:88:df:6d:74:cc:d0:70:94:1c:f0:
         90:46:00:41:2d:48:ea:31:39:91:30:d0:f3:52:a8:48:e6:fc:
         81:4a:59:1e:77:29:83:46:2c:cc:50:9e:6b:57:b7:ad:e7:52:
         70:d9:e2:af:a8:a5:2b:d9:57:28:31:88:81:37:58:d3:2f:1e:
         67:2a:1a:2c:6a:e1:58:bd:64:8d:f5:d7:39:c8:3a:8b:43:3a:
         e8:d7:16:4c:47:df:46:0b:c9:c8:ec:a5:96:0c:36:b1:b7:10:
         db:0c:03:a2:27:5d:71:57:34:a1:25:02:70:88:49:43:76:9a:
         cd:cb:12:90:ec:c5:c3:da:dd:35:00:a1:a1:44:b9:60:75:6d:
         46:92:f6:eb:9b:05:ad:30:40:32:e9:cf:57:92:c5:4a:6f:ba:
         a9:db:bb:a6:9a:6c:fe:a2:d9:df:7f:6b:eb:8d:df:83:3f:ee:
         da:3d:4e:3b:22:2a:7b:4a:44:87:26:75:7b:8c:88:02:31:c9:
         c7:c7:fa:b0:60:b3:94:3f:05:6e:07:2a:cc:25:ab:ae:6f:1f:
         61:51:a7:5f:9c:fb:fc:99:61:5c:e5:f6:0c:a0:bf:61:1f:23:
         cf:38:62:68:99:ce:c3:2a:24:dc:e8:59:d9:a8:e5:a9:bb:f3:
         44:8a:ea:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtks3no2mFIRF+rroAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MTAwMzAwMTAwOVoXDTI2MDEwMTAxMTAwOVowLzEtMCsGA1UEAxMk
MzRjOTRkM2ItZTMzZi00NzI0LWIyYTEtODE5MDM0ODVkYTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8mWmwjUeXWVBqsHTy2T6Ti+jra8KaoOpGmA
r4Jwn0fLUFLYk9chX92VH9/PWjptWs6GulTWEZm+G77a6TFNng/msEYh9q7fe/SM
3kVLgcTDbDLeEJkH3NXuafsWMaGi/6D8GEKMa3B+qC16fc4i3w4jNrwXW34OKJmT
iIGG4kDg9S3d+Y08FeMMj3zP73nHwGxImwmuxnAGobz3UZbbenDsopxW9AAIdsuf
U3BQP7QZJPsPU9OUHQsmZzr5PgF3aaIo5nwSRRfnDuEeKPdMnKx9MHdxp3S6Brg8
TaWTJ5u60aHJ/QZOEUy9vYjIfPB1OnezrGLE3Lt+3X0HGc3kCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHj39+VtAtOM1Bbn6pn6zGg2AkXsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjUzOWQ0ZGItM2M3Zi0z
OThjLWEwNWQtOTRmMmU2ZTU5ZmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEe6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJDyKvg1NfmmiN9tdMzQcJQc8JBGAEEtSOoxOZEw0PNSqEjm/IFKWR53
KYNGLMxQnmtXt63nUnDZ4q+opSvZVygxiIE3WNMvHmcqGixq4Vi9ZI311znIOotD
OujXFkxH30YLycjspZYMNrG3ENsMA6InXXFXNKElAnCISUN2ms3LEpDsxcPa3TUA
oaFEuWB1bUaS9uubBa0wQDLpz1eSxUpvuqnbu6aabP6i2d9/a+uN34M/7to9Tjsi
KntKRIcmdXuMiAIxycfH+rBgs5Q/BW4HKswlq65vH2FRp1+c+/yZYVzl9gygv2Ef
I884YmiZzsMqJNzoWdmo5am780SK6mw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:35:06 2025 by rpki-client