Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75ab6e08-76ba-3923-8171-f1ff0de818f1.roa
File:                     75ab6e08-76ba-3923-8171-f1ff0de818f1.roa (raw, json)
Hash identifier:          Qgaov8PGeEEMHphg1WBO2p/RDsMUW/0NwTz5HAWqreY=
Subject key identifier:   F0:2A:CA:D1:F8:BD:44:A9:F0:33:06:BA:BC:FC:32:36:22:2B:65:43
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D703FED6CEBB7B969A9335C00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75ab6e08-76ba-3923-8171-f1ff0de818f1.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     13335
IP address blocks:        172.69.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:ed:6c:eb:b7:b9:69:a9:33:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=21e281f9-49d7-47fa-a1e7-e691af7ff532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:29:99:b4:cc:a5:00:b2:95:12:6e:ac:b7:1d:
                    19:40:25:80:a1:93:da:b9:a0:86:8d:b7:0a:df:e9:
                    73:01:5b:e4:30:1c:08:18:19:66:92:3f:e3:33:91:
                    30:40:41:c4:a4:84:f9:c0:3f:84:e5:8f:6c:99:cb:
                    eb:aa:02:94:fa:1f:3c:9a:19:e8:c0:11:00:90:d7:
                    4e:84:7d:ab:69:20:13:92:c3:7a:5e:1d:d0:fd:2e:
                    2e:ca:48:fb:17:90:df:c6:1f:a8:bc:9d:0d:c0:54:
                    b9:c7:a8:2f:bd:d1:44:a6:e5:c4:f0:45:40:c6:43:
                    6a:ee:54:ae:b0:41:2b:22:f7:81:80:da:bd:df:18:
                    56:9d:53:77:66:03:f5:c5:d8:3d:bf:8c:52:41:e7:
                    b4:0e:04:61:7f:7f:ae:f1:be:dd:d7:d7:b9:ed:02:
                    0c:e3:9e:dc:72:d1:24:24:36:cb:4e:8f:89:bb:43:
                    b8:fc:7f:9b:e8:e2:fe:27:b5:e7:e4:37:f9:e6:47:
                    32:3e:c7:c8:c4:cd:c1:7a:d8:b6:c6:7f:c6:b8:4d:
                    22:dd:e5:c4:e8:76:5a:c1:cb:f2:01:76:6a:19:ab:
                    b8:22:1a:6b:91:87:1d:7e:d3:da:9a:3d:cb:c8:de:
                    28:ae:3e:75:af:9c:5a:18:a5:cd:91:c9:52:f4:56:
                    05:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2A:CA:D1:F8:BD:44:A9:F0:33:06:BA:BC:FC:32:36:22:2B:65:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75ab6e08-76ba-3923-8171-f1ff0de818f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:f8:d1:a0:ab:59:c3:16:51:ee:e9:a1:32:39:d6:58:5c:7d:
         e4:0b:ad:50:a1:8e:04:01:7b:c9:8c:38:81:e8:80:ae:1e:e5:
         5c:42:53:85:7e:79:b3:59:ba:5a:ad:5a:94:9c:ca:50:a8:6c:
         5a:b7:62:7b:73:1a:5b:f2:ea:53:af:e4:29:d9:78:5f:27:f6:
         67:36:ab:cf:e6:a8:bd:d9:41:23:65:87:11:66:24:2d:7f:b5:
         85:ce:99:0d:74:75:45:01:47:4c:be:90:41:b5:4e:31:d0:96:
         92:49:8f:16:8f:01:d1:57:43:4e:60:39:02:27:ad:78:84:c3:
         4a:d2:ba:5e:02:84:77:2d:80:27:4b:d7:58:f7:3a:0b:8c:18:
         2e:7e:03:00:9c:de:a2:72:41:f3:d7:c5:83:36:e2:f3:71:94:
         f6:99:51:8f:83:80:8f:63:48:1b:ed:d0:2b:87:79:88:78:97:
         90:26:a1:d9:bf:98:b1:c7:7f:27:bd:28:f9:f3:94:86:62:6e:
         ef:28:9b:73:6d:31:fb:4c:11:d9:63:74:5b:3e:28:d0:50:84:
         fe:c4:8d:24:60:87:84:70:f9:48:03:31:0f:a7:c6:d1:7f:e0:
         c1:52:80:fd:46:00:88:51:78:02:2c:fb:71:94:98:47:c5:1a:
         64:08:43:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP+1s67e5aakzXAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk
MjFlMjgxZjktNDlkNy00N2ZhLWExZTctZTY5MWFmN2ZmNTMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSmZtMylALKVEm6stx0ZQCWAoZPauaCGjbcK
3+lzAVvkMBwIGBlmkj/jM5EwQEHEpIT5wD+E5Y9smcvrqgKU+h88mhnowBEAkNdO
hH2raSATksN6Xh3Q/S4uykj7F5Dfxh+ovJ0NwFS5x6gvvdFEpuXE8EVAxkNq7lSu
sEErIveBgNq93xhWnVN3ZgP1xdg9v4xSQee0DgRhf3+u8b7d19e57QIM457cctEk
JDbLTo+Ju0O4/H+b6OL+J7Xn5Df55kcyPsfIxM3Beti2xn/GuE0i3eXE6HZawcvy
AXZqGau4IhprkYcdftPamj3LyN4orj51r5xaGKXNkclS9FYFIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPAqytH4vUSp8DMGurz8MjYiK2VDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzVhYjZlMDgtNzZiYS0z
OTIzLTgxNzEtZjFmZjBkZTgxOGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEX4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALf40aCrWcMWUe7poTI51lhcfeQLrVChjgQBe8mMOIHogK4e5VxCU4V+
ebNZulqtWpScylCobFq3YntzGlvy6lOv5CnZeF8n9mc2q8/mqL3ZQSNlhxFmJC1/
tYXOmQ10dUUBR0y+kEG1TjHQlpJJjxaPAdFXQ05gOQInrXiEw0rSul4ChHctgCdL
11j3OguMGC5+AwCc3qJyQfPXxYM24vNxlPaZUY+DgI9jSBvt0CuHeYh4l5Amodm/
mLHHfye9KPnzlIZibu8om3NtMftMEdljdFs+KNBQhP7EjSRgh4Rw+UgDMQ+nxtF/
4MFSgP1GAIhReAIs+3GUmEfFGmQIQwo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 02:05:41 2026 by rpki-client