Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06676d78-66c9-38d1-a0e9-22320e0eead3.roa
File:                     06676d78-66c9-38d1-a0e9-22320e0eead3.roa (raw, json)
Hash identifier:          7+r4zzNj0DHuAEviql468GXd+FZ5XsEUNB520qHGHYc=
Subject key identifier:   2F:0F:F1:21:BA:94:37:C7:7F:1B:1E:B7:1F:E3:27:ED:3B:2B:19:F9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584CBB20E04DF4A8716077449100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06676d78-66c9-38d1-a0e9-22320e0eead3.roa
Signing time:             Mon 02 Feb 2026 15:57:02 +0000
ROA not before:           Mon 02 Feb 2026 15:57:02 +0000
ROA not after:            Sun 03 May 2026 14:57:02 +0000
asID:                     14789
IP address blocks:        172.69.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bb:20:e0:4d:f4:a8:71:60:77:44:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb  2 15:57:02 2026 GMT
            Not After : May  3 14:57:02 2026 GMT
        Subject: CN=af71a5d9-e5ef-4919-ab8f-68219bfd698e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:58:86:a9:15:7a:b4:18:a1:fd:33:1b:91:3a:
                    19:ea:82:43:db:c4:0f:4f:a4:bf:ad:f5:df:e2:bb:
                    fa:ab:e9:4e:a1:16:96:78:6b:88:2f:fc:f9:c2:57:
                    49:3d:c7:e3:1b:97:16:d9:37:1b:63:4c:43:68:e5:
                    67:d7:b8:f5:04:03:e2:a2:d9:88:67:9f:b2:08:ed:
                    69:13:a7:c9:f8:e9:76:cb:f7:5c:a9:51:5a:a4:7e:
                    27:16:08:2b:fb:18:a3:f4:8d:01:86:66:e9:00:40:
                    23:38:cd:52:37:4a:03:74:34:85:5c:d1:91:a6:40:
                    3d:c4:ed:3e:ef:60:bb:85:d3:dd:27:9a:c4:98:4b:
                    57:06:b6:74:59:cb:e3:f9:36:89:28:99:22:29:92:
                    b8:c7:59:f4:36:dc:fb:9e:f6:38:ec:0c:23:c3:61:
                    01:9d:e5:c6:aa:69:04:cf:48:29:37:03:7e:b0:65:
                    47:63:d8:29:b8:9d:40:db:f8:51:a1:a0:c1:0e:7e:
                    58:0e:bc:07:27:ab:82:75:0b:5b:96:87:a9:ce:03:
                    36:1e:12:87:ab:ba:e9:19:24:c6:7f:2e:4f:b4:53:
                    ea:01:21:8a:51:2a:6d:90:ce:11:35:7b:3e:20:8b:
                    50:53:32:07:6a:ca:f4:34:c3:70:62:b6:30:92:87:
                    ca:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0F:F1:21:BA:94:37:C7:7F:1B:1E:B7:1F:E3:27:ED:3B:2B:19:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06676d78-66c9-38d1-a0e9-22320e0eead3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:78:8d:fc:22:b5:09:b5:17:5b:53:ec:76:a8:87:e0:7e:47:
         af:3e:84:72:0c:01:26:b2:63:cd:1f:dd:b4:8a:06:e4:24:91:
         af:47:d8:7e:12:cc:39:3f:4c:41:41:20:70:2a:e5:7e:f7:83:
         d0:a1:e1:e0:79:3b:bb:b7:bc:87:9a:4b:d7:57:33:0e:c6:9b:
         74:d3:7f:06:a9:12:99:75:51:5e:77:38:76:49:7e:5d:57:ca:
         3d:1c:86:07:af:e3:ce:04:bb:51:e7:84:d3:7a:c8:e1:85:c6:
         c5:a1:98:08:1e:60:13:05:02:ce:0e:41:f2:ea:24:73:20:f3:
         f3:b5:50:64:f8:8e:d6:41:18:7a:99:70:13:98:75:81:f0:0f:
         11:5a:74:5e:5e:87:d1:4f:c3:13:a7:0a:d6:a0:94:fa:01:4e:
         83:1f:29:e4:28:d0:15:bb:3a:a8:ca:f4:be:11:a4:5b:f0:0a:
         ee:41:3e:73:b1:fc:99:66:23:f4:a9:e7:0e:25:d7:b7:ca:8a:
         c4:35:ee:81:06:d2:6a:7a:c7:8e:5b:d4:a3:9e:77:c4:0d:f3:
         94:52:6d:b3:fc:8b:81:aa:35:b1:75:38:29:1c:56:2e:ba:0a:
         2a:25:81:86:35:05:4c:0e:a6:2a:0d:f7:da:4c:91:af:bd:c9:
         96:be:ed:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy7IOBN9KhxYHdEkQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDIwMjE1NTcwMloXDTI2MDUwMzE0NTcwMlowLzEtMCsGA1UEAxMk
YWY3MWE1ZDktZTVlZi00OTE5LWFiOGYtNjgyMTliZmQ2OThlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9FiGqRV6tBih/TMbkToZ6oJD28QPT6S/rfXf
4rv6q+lOoRaWeGuIL/z5wldJPcfjG5cW2TcbY0xDaOVn17j1BAPiotmIZ5+yCO1p
E6fJ+Ol2y/dcqVFapH4nFggr+xij9I0BhmbpAEAjOM1SN0oDdDSFXNGRpkA9xO0+
72C7hdPdJ5rEmEtXBrZ0Wcvj+TaJKJkiKZK4x1n0Ntz7nvY47Awjw2EBneXGqmkE
z0gpNwN+sGVHY9gpuJ1A2/hRoaDBDn5YDrwHJ6uCdQtbloepzgM2HhKHq7rpGSTG
fy5PtFPqASGKUSptkM4RNXs+IItQUzIHasr0NMNwYrYwkofKmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC8P8SG6lDfHfxsetx/jJ+07Kxn5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDY2NzZkNzgtNjZjOS0z
OGQxLWEwZTktMjIzMjBlMGVlYWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALB4jfwitQm1F1tT7Haoh+B+R68+hHIMASayY80f3bSKBuQkka9H2H4S
zDk/TEFBIHAq5X73g9Ch4eB5O7u3vIeaS9dXMw7Gm3TTfwapEpl1UV53OHZJfl1X
yj0chgev484Eu1HnhNN6yOGFxsWhmAgeYBMFAs4OQfLqJHMg8/O1UGT4jtZBGHqZ
cBOYdYHwDxFadF5eh9FPwxOnCtaglPoBToMfKeQo0BW7OqjK9L4RpFvwCu5BPnOx
/JlmI/Sp5w4l17fKisQ17oEG0mp6x45b1KOed8QN85RSbbP8i4GqNbF1OCkcVi66
CiolgYY1BUwOpioN99pMka+9yZa+7UU=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:33 2026 by rpki-client