Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/397f8335-5fa7-3136-8047-047c74ac1a86.roa
File:                     397f8335-5fa7-3136-8047-047c74ac1a86.roa (raw, json)
Hash identifier:          vqVW05/UAqwbA3l3w2/COH+HNb78+50mlNO8XbUdHYU=
Subject key identifier:   ED:4F:15:AA:EF:21:24:D9:96:FE:07:9A:08:7F:56:E8:DE:1F:67:1C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E131994EA366D2757C51E1700
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/397f8335-5fa7-3136-8047-047c74ac1a86.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     14789
IP address blocks:        172.71.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:94:ea:36:6d:27:57:c5:1e:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=10af72be-cc52-4520-9c46-e641f50b56a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c0:ce:13:e6:be:b1:82:3d:50:82:86:ac:0a:
                    7e:7d:2b:35:f1:25:58:f4:83:c9:0a:cb:98:ca:b3:
                    36:d7:92:ea:50:6d:55:fc:bc:b3:82:29:7f:a2:5e:
                    87:9a:f8:03:5b:7e:eb:3b:b5:79:82:0e:9b:66:78:
                    8a:f0:75:89:18:e2:78:4b:e0:4a:77:7b:0b:8e:53:
                    8e:24:29:f2:37:2b:3e:1b:32:44:f2:a1:47:11:1b:
                    a1:6f:7e:97:bc:6a:d2:98:9b:00:a1:c4:c9:1d:0b:
                    bb:95:c5:3a:31:5d:20:84:ff:82:08:48:c3:4f:2a:
                    6a:1f:1a:48:a8:15:6b:aa:e7:59:00:33:d6:e8:e0:
                    2b:db:73:22:ec:ef:e7:b7:4d:e6:44:23:e0:d3:c7:
                    8e:83:5e:3d:5f:64:15:ac:11:a5:31:d7:5f:3f:9c:
                    e1:79:5b:c3:e5:1b:d2:e2:35:32:d8:dc:c0:2a:04:
                    d1:a4:8f:2f:ab:ff:d0:a0:88:7f:7a:af:f8:de:75:
                    40:06:b1:c8:5b:5c:75:7b:aa:98:79:3c:5a:ee:28:
                    1d:bc:8b:7c:75:e0:cb:cf:a6:91:a4:d4:34:c1:c2:
                    03:a5:a1:bb:74:85:3c:db:4d:1f:a4:06:7e:a2:b5:
                    1d:44:de:31:46:ba:30:09:d6:94:09:c7:cb:c7:37:
                    2e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4F:15:AA:EF:21:24:D9:96:FE:07:9A:08:7F:56:E8:DE:1F:67:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/397f8335-5fa7-3136-8047-047c74ac1a86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:03:11:1d:0a:86:88:fd:ed:66:f1:4e:e8:30:a9:bc:f5:4a:
         4f:84:1e:44:dd:07:20:53:d0:09:c7:d3:e0:51:2e:f3:be:21:
         70:d0:32:b2:85:ed:df:36:17:bb:a9:8c:77:90:e4:3f:62:0f:
         f9:7a:ac:3f:1f:5d:ab:63:d4:2c:bd:e2:80:38:33:44:33:d1:
         1a:52:f7:29:45:5c:73:5f:b7:31:a9:c7:62:cc:3b:a4:7c:d3:
         db:a6:d4:1c:d4:a8:d2:ba:3e:2c:5c:be:5c:c4:1c:46:af:7e:
         10:50:41:93:a8:de:43:7e:c0:68:c2:c0:c7:fd:be:a7:c7:42:
         d7:52:a7:8b:98:23:f8:ea:a4:28:44:80:f6:e0:b5:27:11:90:
         67:c8:89:6e:2c:31:7e:ee:6b:72:ca:c4:c5:e1:09:b1:3e:fa:
         a3:b7:99:82:a9:ef:19:f2:02:a7:7e:8c:17:31:f0:e0:ea:47:
         15:45:ed:e0:68:8d:e8:6b:59:42:c6:59:82:f4:2b:fc:97:93:
         d7:02:ca:24:df:53:bd:0f:b5:29:73:cd:49:f0:3a:c4:d6:07:
         52:b3:22:3c:42:fa:61:4f:3a:31:5a:c6:45:84:39:78:90:f3:
         82:a9:c9:9e:01:58:ed:55:1a:65:96:46:33:a0:33:9f:ab:2d:
         22:f0:4f:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4TGZTqNm0nV8UeFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDYwNTIxMDAxMloXDTI2MDkwMzIxMDAxMlowLzEtMCsGA1UEAxMk
MTBhZjcyYmUtY2M1Mi00NTIwLTljNDYtZTY0MWY1MGI1NmEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8sDOE+a+sYI9UIKGrAp+fSs18SVY9IPJCsuY
yrM215LqUG1V/Lyzgil/ol6HmvgDW37rO7V5gg6bZniK8HWJGOJ4S+BKd3sLjlOO
JCnyNys+GzJE8qFHERuhb36XvGrSmJsAocTJHQu7lcU6MV0ghP+CCEjDTypqHxpI
qBVrqudZADPW6OAr23Mi7O/nt03mRCPg08eOg149X2QVrBGlMddfP5zheVvD5RvS
4jUy2NzAKgTRpI8vq//QoIh/eq/43nVABrHIW1x1e6qYeTxa7igdvIt8deDLz6aR
pNQ0wcIDpaG7dIU8200fpAZ+orUdRN4xRrowCdaUCcfLxzcuvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO1PFarvISTZlv4Hmgh/VujeH2ccMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzk3ZjgzMzUtNWZhNy0z
MTM2LTgwNDctMDQ3Yzc0YWMxYTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGEDER0Khoj97WbxTugwqbz1Sk+EHkTdByBT0AnH0+BRLvO+IXDQMrKF
7d82F7upjHeQ5D9iD/l6rD8fXatj1Cy94oA4M0Qz0RpS9ylFXHNftzGpx2LMO6R8
09um1BzUqNK6PixcvlzEHEavfhBQQZOo3kN+wGjCwMf9vqfHQtdSp4uYI/jqpChE
gPbgtScRkGfIiW4sMX7ua3LKxMXhCbE++qO3mYKp7xnyAqd+jBcx8ODqRxVF7eBo
jehrWULGWYL0K/yXk9cCyiTfU70PtSlzzUnwOsTWB1KzIjxC+mFPOjFaxkWEOXiQ
84KpyZ4BWO1VGmWWRjOgM5+rLSLwT18=
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:15:44 2026 by rpki-client