Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/779efa3a-6b39-38b8-8ba7-7d7fda6c7ca8.roa
File:                     779efa3a-6b39-38b8-8ba7-7d7fda6c7ca8.roa (raw, json)
Hash identifier:          nVYSlm3w80jX6/kAPvm3z37NstOJlQX9TBPduUQEYw8=
Subject key identifier:   76:25:CF:85:E1:72:8F:C2:06:76:1D:2C:58:3D:BD:AF:8E:55:16:D5
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BABFD20DC8454C91AE00EFE80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/779efa3a-6b39-38b8-8ba7-7d7fda6c7ca8.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     13335
IP address blocks:        172.69.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:20:dc:84:54:c9:1a:e0:0e:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=88cdc9c3-9f61-4d34-b244-9084f9427522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:38:1b:4d:f2:86:03:2f:e3:b3:ef:2f:c3:17:
                    8f:c3:b3:74:e3:f1:0e:80:39:3e:0e:57:1d:f2:bb:
                    29:72:a1:42:a4:09:55:fe:87:ee:5f:31:40:02:1b:
                    4d:69:3d:92:dc:ee:a2:2a:b8:51:c7:f8:58:b6:f0:
                    ff:71:ee:91:87:c9:53:20:f2:e7:12:ea:bf:c8:71:
                    ee:92:47:81:ad:a2:45:ee:ac:53:40:28:e8:8a:f4:
                    5b:94:3f:2a:dd:4d:98:a3:71:01:c4:b3:6b:d5:f8:
                    d7:ed:1c:d7:90:27:ce:39:82:18:22:24:42:42:13:
                    b7:dd:97:71:59:c8:d4:25:73:eb:e8:70:4f:dd:ac:
                    85:26:8a:07:36:ee:7c:1c:eb:40:bd:39:fd:43:8a:
                    9c:12:e7:c8:08:72:d5:ba:11:a5:84:7e:2b:42:55:
                    f9:1b:c2:56:25:a7:95:08:fc:50:2a:40:25:a1:9c:
                    48:49:1e:6b:9d:8c:b0:96:c1:90:25:71:9f:78:27:
                    e8:ac:7e:88:42:fd:d8:69:a1:c8:9e:9c:4c:bb:60:
                    9c:3e:b8:15:2c:eb:b9:3c:99:b3:f8:a5:5d:68:54:
                    39:61:f0:68:ff:a5:a3:dd:83:46:5d:e1:3e:90:75:
                    20:a8:a3:ae:4a:e1:53:f1:59:05:38:87:77:3c:69:
                    81:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:25:CF:85:E1:72:8F:C2:06:76:1D:2C:58:3D:BD:AF:8E:55:16:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/779efa3a-6b39-38b8-8ba7-7d7fda6c7ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:dd:d5:2a:95:52:74:a6:65:0a:11:21:62:8e:d2:d2:00:80:
         9e:95:92:cc:b8:62:db:a3:50:bc:9a:92:b2:d1:ff:d0:0f:6b:
         bb:12:70:fb:9f:93:a9:55:89:5a:9f:de:19:27:0d:6a:82:96:
         44:97:69:98:06:64:7f:41:21:10:d0:8a:0d:39:5a:84:1e:d4:
         da:73:83:88:51:14:2d:17:65:a6:28:00:89:b7:9d:8c:31:21:
         e4:b0:ae:0e:af:16:b2:0f:2f:31:23:ed:57:a6:f0:fd:bf:e4:
         22:d5:78:a8:ae:cd:59:2a:b9:83:20:d3:08:11:5d:5f:d7:73:
         99:cd:48:dd:57:53:8b:00:8f:e2:b3:6c:47:f5:31:1d:f7:21:
         e4:ff:ee:0a:21:de:e3:e7:32:0b:e1:74:37:98:cd:f9:46:ee:
         62:d2:31:75:b9:4d:42:f6:20:3e:59:ab:98:2c:41:25:42:21:
         4c:53:19:6d:6b:e7:24:33:4e:81:2e:d9:6a:2f:69:5e:36:61:
         be:bf:7d:54:82:0d:b7:98:53:d6:b3:96:df:f2:ba:6b:6c:10:
         48:05:08:bb:a9:0a:35:6a:b3:c0:48:44:72:e4:8f:2e:32:cf:
         2b:79:8a:be:98:6a:0c:3e:c4:71:15:bb:52:1a:47:2e:7f:bd:
         2b:0a:91:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/SDchFTJGuAO/oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk
ODhjZGM5YzMtOWY2MS00ZDM0LWIyNDQtOTA4NGY5NDI3NTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzgbTfKGAy/js+8vwxePw7N04/EOgDk+Dlcd
8rspcqFCpAlV/ofuXzFAAhtNaT2S3O6iKrhRx/hYtvD/ce6Rh8lTIPLnEuq/yHHu
kkeBraJF7qxTQCjoivRblD8q3U2Yo3EBxLNr1fjX7RzXkCfOOYIYIiRCQhO33Zdx
WcjUJXPr6HBP3ayFJooHNu58HOtAvTn9Q4qcEufICHLVuhGlhH4rQlX5G8JWJaeV
CPxQKkAloZxISR5rnYywlsGQJXGfeCforH6IQv3YaaHInpxMu2CcPrgVLOu5PJmz
+KVdaFQ5YfBo/6Wj3YNGXeE+kHUgqKOuSuFT8VkFOId3PGmBrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHYlz4Xhco/CBnYdLFg9va+OVRbVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzc5ZWZhM2EtNmIzOS0z
OGI4LThiYTctN2Q3ZmRhNmM3Y2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEWIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMXd1SqVUnSmZQoRIWKO0tIAgJ6Vksy4YtujULyakrLR/9APa7sScPuf
k6lViVqf3hknDWqClkSXaZgGZH9BIRDQig05WoQe1Npzg4hRFC0XZaYoAIm3nYwx
IeSwrg6vFrIPLzEj7Vem8P2/5CLVeKiuzVkquYMg0wgRXV/Xc5nNSN1XU4sAj+Kz
bEf1MR33IeT/7goh3uPnMgvhdDeYzflG7mLSMXW5TUL2ID5Zq5gsQSVCIUxTGW1r
5yQzToEu2WovaV42Yb6/fVSCDbeYU9azlt/yumtsEEgFCLupCjVqs8BIRHLkjy4y
zyt5ir6Yagw+xHEVu1IaRy5/vSsKkSA=
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:55:40 2025 by rpki-client