Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f42da403-4ab1-342a-b8c0-989968dbfb29.roa
File:                     f42da403-4ab1-342a-b8c0-989968dbfb29.roa (raw, json)
Hash identifier:          1y0s7gjxWTDL96Ub8A7PLL39siuCvaBMipxkXdy25Xs=
Subject key identifier:   68:BF:DF:9E:2B:17:BE:66:A3:9F:EC:B0:4E:F5:C2:88:78:8D:6B:19
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E614578D4C0925122298D5900
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f42da403-4ab1-342a-b8c0-989968dbfb29.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     14789
IP address blocks:        172.70.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:78:d4:c0:92:51:22:29:8d:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=f303278b-a7d2-496a-8b49-4d7c1b8129ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fa:4d:05:2a:2d:87:ff:86:1e:a0:00:ef:2e:
                    4a:1b:8c:8a:a5:22:69:8e:4a:7f:d3:b0:90:1f:c1:
                    62:04:ae:d2:44:af:71:d1:61:d2:ae:9e:bf:bf:03:
                    97:45:5b:c5:aa:7e:8d:1a:90:b6:e4:dc:c9:3d:f7:
                    16:da:e6:63:79:80:57:cf:0f:f9:81:5c:3c:bf:a6:
                    a0:b6:0d:dc:aa:ee:fc:a9:9d:01:7e:a6:4f:90:13:
                    78:b3:8f:bd:dc:f5:27:8c:d4:6e:18:04:35:7f:00:
                    11:8b:96:0f:8a:05:cd:9c:31:ad:7f:0c:f7:55:1c:
                    08:4f:f4:5a:4e:6a:3a:ae:51:7e:88:6c:a1:03:81:
                    36:a4:5f:00:c8:a4:af:29:37:a5:ef:89:42:c8:5c:
                    92:98:43:84:9e:ab:5a:63:40:03:55:90:15:da:00:
                    0f:5a:d1:1b:06:4f:f7:24:f8:fa:7d:12:5d:f7:a5:
                    8d:58:67:74:3c:68:83:65:0b:ea:96:d1:68:8b:32:
                    f5:23:17:3e:04:26:0f:65:36:66:59:f0:c0:c0:b1:
                    9b:bc:e7:e3:0f:bb:9c:45:2d:cd:9b:25:64:1e:17:
                    93:91:5b:13:ea:d9:54:2e:a1:90:80:20:88:42:f3:
                    53:e8:5f:a5:cb:9e:78:fd:4a:1d:11:40:91:19:1f:
                    2a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BF:DF:9E:2B:17:BE:66:A3:9F:EC:B0:4E:F5:C2:88:78:8D:6B:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f42da403-4ab1-342a-b8c0-989968dbfb29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:5f:d5:89:8c:bf:d4:af:8f:38:ba:08:bb:28:36:be:05:6a:
         a6:6b:e7:fe:d9:37:da:dd:3d:20:4d:3e:c9:6a:47:3c:8f:17:
         7b:f6:95:fb:93:54:5e:ea:1a:5e:04:64:70:dc:a8:27:c4:13:
         81:c0:a5:e9:57:84:e5:4a:ec:e6:73:14:9c:fe:cc:bc:39:3a:
         94:0a:2e:3a:dd:bf:aa:54:7d:60:fa:ae:36:a5:b0:05:a1:20:
         90:2d:21:d1:0a:43:1a:59:0d:4c:2b:8b:d3:38:6a:6f:2d:ba:
         cc:62:4b:1a:6a:13:e4:56:66:a1:4c:0b:ee:f8:bf:2c:82:46:
         02:60:51:61:b3:ba:84:57:c7:a5:57:4c:2d:db:28:3f:92:5b:
         85:03:d8:86:0f:d9:c6:7b:c5:47:90:8c:08:98:df:35:4d:60:
         8e:0d:06:49:00:43:2a:a2:f7:e7:99:c4:2f:d3:db:8f:16:38:
         57:89:bd:8b:bc:b1:7d:30:9d:7a:22:4e:b2:32:cc:b1:18:2b:
         fa:33:07:1b:32:7c:08:cf:33:50:54:d9:22:6a:0e:32:3a:58:
         9b:bf:78:d6:a2:c1:67:c6:09:49:8b:2b:ff:17:55:c8:18:6a:
         35:87:c6:ab:77:f1:15:8f:f3:47:55:53:a1:1c:d7:c4:97:a8:
         bd:48:0e:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRXjUwJJRIimNWQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk
ZjMwMzI3OGItYTdkMi00OTZhLThiNDktNGQ3YzFiODEyOWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvpNBSoth/+GHqAA7y5KG4yKpSJpjkp/07CQ
H8FiBK7SRK9x0WHSrp6/vwOXRVvFqn6NGpC25NzJPfcW2uZjeYBXzw/5gVw8v6ag
tg3cqu78qZ0BfqZPkBN4s4+93PUnjNRuGAQ1fwARi5YPigXNnDGtfwz3VRwIT/Ra
Tmo6rlF+iGyhA4E2pF8AyKSvKTel74lCyFySmEOEnqtaY0ADVZAV2gAPWtEbBk/3
JPj6fRJd96WNWGd0PGiDZQvqltFoizL1Ixc+BCYPZTZmWfDAwLGbvOfjD7ucRS3N
myVkHheTkVsT6tlULqGQgCCIQvNT6F+ly554/UodEUCRGR8qpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGi/354rF75mo5/ssE71woh4jWsZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjQyZGE0MDMtNGFiMS0z
NDJhLWI4YzAtOTg5OTY4ZGJmYjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEa6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADxf1YmMv9Svjzi6CLsoNr4FaqZr5/7ZN9rdPSBNPslqRzyPF3v2lfuT
VF7qGl4EZHDcqCfEE4HApelXhOVK7OZzFJz+zLw5OpQKLjrdv6pUfWD6rjalsAWh
IJAtIdEKQxpZDUwri9M4am8tusxiSxpqE+RWZqFMC+74vyyCRgJgUWGzuoRXx6VX
TC3bKD+SW4UD2IYP2cZ7xUeQjAiY3zVNYI4NBkkAQyqi9+eZxC/T248WOFeJvYu8
sX0wnXoiTrIyzLEYK/ozBxsyfAjPM1BU2SJqDjI6WJu/eNaiwWfGCUmLK/8XVcgY
ajWHxqt38RWP80dVU6Ec18SXqL1IDik=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:01:07 2026 by rpki-client