Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c6ac8cf-b7ac-3364-81bb-2666168000cf.roa
File:                     1c6ac8cf-b7ac-3364-81bb-2666168000cf.roa (raw, json)
Hash identifier:          SVI3FVg/ddf+w+vCJyzvP9oDPDd07m2CGtLyLiWAzwo=
Subject key identifier:   3E:31:C1:71:84:2A:77:78:09:B9:13:31:77:34:51:F2:B0:EF:AE:91
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E9EB01972C2E5B028C0D7D480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c6ac8cf-b7ac-3364-81bb-2666168000cf.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     14789
IP address blocks:        172.68.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:b0:19:72:c2:e5:b0:28:c0:d7:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=3550f463-22ec-429d-baae-d78ad80fad12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3d:f5:e2:5c:9e:46:cc:ba:d2:ad:81:8d:99:
                    e9:aa:15:f4:2e:1e:5e:a6:4e:7f:b8:5d:cb:8e:b1:
                    22:f9:f8:38:bf:9d:ad:b7:b1:8a:ca:64:97:3c:1d:
                    94:45:26:ac:ae:e8:42:6d:1c:2c:d7:a9:ec:55:40:
                    40:b1:cc:4c:f8:e8:b9:75:6a:4e:08:43:72:0f:2b:
                    5f:48:1b:10:8f:5f:f9:b1:67:82:bc:72:a5:29:94:
                    25:06:5b:8b:b4:e8:03:66:c8:24:88:d4:19:61:1a:
                    70:9c:a4:2a:0e:37:4e:c7:48:b1:ad:e0:29:59:ea:
                    d2:1a:a4:d4:8b:48:9d:0b:36:1e:12:39:b9:f9:93:
                    86:0c:36:e3:4b:59:21:ae:d8:57:36:ae:61:66:4b:
                    b0:db:4b:f2:cd:1e:d4:52:34:32:58:16:4c:91:f4:
                    0b:a0:5a:50:c3:af:4e:a2:17:10:32:fa:f1:4a:51:
                    e2:ec:6e:b4:38:02:0e:36:6a:5c:35:27:4a:67:72:
                    e0:0f:b4:ad:3d:0b:de:6f:58:20:a5:89:ea:93:27:
                    d3:a7:dd:4f:f3:7c:4a:40:02:23:0a:ec:b9:ba:7a:
                    3b:7b:5a:57:5d:91:44:28:f7:0e:ee:f2:4f:e1:7b:
                    89:da:a7:f7:18:d7:b9:62:56:89:e4:50:8f:05:8f:
                    cb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:31:C1:71:84:2A:77:78:09:B9:13:31:77:34:51:F2:B0:EF:AE:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c6ac8cf-b7ac-3364-81bb-2666168000cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:ad:19:e2:94:77:94:28:fa:22:61:5a:9e:1d:90:88:40:b5:
         4e:2e:50:82:49:63:f0:60:4c:d9:20:03:b2:d7:71:d3:a4:7a:
         7b:54:bc:6e:17:6b:f9:06:eb:84:50:6b:bd:bf:0d:f8:26:66:
         21:92:4a:61:99:35:60:09:a8:b2:0f:f7:ea:16:9f:03:fd:e5:
         53:42:49:3a:cc:27:a3:a8:7d:07:9d:2e:45:81:67:f4:1d:be:
         3e:bd:26:40:0d:3d:31:86:88:e6:f0:f6:01:c2:9a:20:07:13:
         da:c8:71:49:2b:7d:44:f7:29:30:f4:4b:f1:02:46:ee:4e:58:
         3a:29:00:36:99:b1:55:1b:88:3e:0e:ac:4d:75:53:0d:22:e3:
         ca:43:58:97:12:8f:53:14:8b:cd:67:5c:f4:79:a3:da:65:c9:
         0e:3b:53:58:97:ad:5d:41:bc:bd:e6:0c:16:4b:37:a6:de:6f:
         8f:24:bc:29:1f:7b:b0:b3:7c:26:07:3f:7f:04:30:f5:4d:ea:
         be:12:8f:3d:a4:2e:10:5d:9f:13:b4:b9:0e:03:e7:5b:0a:09:
         76:4e:c0:94:85:1b:bb:e6:b0:a6:67:1f:dc:e0:e8:42:8a:fe:
         5b:68:9a:d2:ae:d8:70:a4:9e:48:25:e8:92:1e:65:a4:0e:b8:
         a2:76:f9:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6esBlywuWwKMDX1IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk
MzU1MGY0NjMtMjJlYy00MjlkLWJhYWUtZDc4YWQ4MGZhZDEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz314lyeRsy60q2BjZnpqhX0Lh5epk5/uF3L
jrEi+fg4v52tt7GKymSXPB2URSasruhCbRws16nsVUBAscxM+Oi5dWpOCENyDytf
SBsQj1/5sWeCvHKlKZQlBluLtOgDZsgkiNQZYRpwnKQqDjdOx0ixreApWerSGqTU
i0idCzYeEjm5+ZOGDDbjS1khrthXNq5hZkuw20vyzR7UUjQyWBZMkfQLoFpQw69O
ohcQMvrxSlHi7G60OAIONmpcNSdKZ3LgD7StPQveb1ggpYnqkyfTp91P83xKQAIj
Cuy5uno7e1pXXZFEKPcO7vJP4XuJ2qf3GNe5YlaJ5FCPBY/LgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD4xwXGEKnd4CbkTMXc0UfKw766RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWM2YWM4Y2YtYjdhYy0z
MzY0LTgxYmItMjY2NjE2ODAwMGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALStGeKUd5Qo+iJhWp4dkIhAtU4uUIJJY/BgTNkgA7LXcdOkentUvG4X
a/kG64RQa72/DfgmZiGSSmGZNWAJqLIP9+oWnwP95VNCSTrMJ6OofQedLkWBZ/Qd
vj69JkANPTGGiObw9gHCmiAHE9rIcUkrfUT3KTD0S/ECRu5OWDopADaZsVUbiD4O
rE11Uw0i48pDWJcSj1MUi81nXPR5o9plyQ47U1iXrV1BvL3mDBZLN6beb48kvCkf
e7CzfCYHP38EMPVN6r4Sjz2kLhBdnxO0uQ4D51sKCXZOwJSFG7vmsKZnH9zg6EKK
/ltomtKu2HCknkgl6JIeZaQOuKJ2+Q4=
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:58:22 2026 by rpki-client