Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c02c0b70-f5dd-3b32-ae28-5c296fc72edf.roa
File:                     c02c0b70-f5dd-3b32-ae28-5c296fc72edf.roa (raw, json)
Hash identifier:          jHrojvPUeNfB0Ka+7O677oq8lm98AF5VgYfI4GNQ6Jc=
Subject key identifier:   9D:69:87:B4:4C:7E:FD:36:A4:90:F4:67:D1:49:EC:4B:50:9D:2D:4F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D6C0FC3675F6A9ABB47659C40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c02c0b70-f5dd-3b32-ae28-5c296fc72edf.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     13335
IP address blocks:        172.68.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:c3:67:5f:6a:9a:bb:47:65:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=a7d6167e-e5c0-4abc-9d71-caaf2d84aab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:50:6e:c6:7c:24:42:6b:f0:d9:77:76:e4:88:
                    17:71:f9:22:a2:2e:93:d6:8b:98:7e:12:14:ef:94:
                    86:56:a3:43:53:3a:49:dc:6c:0b:c4:a8:74:4e:84:
                    a5:0e:aa:e8:8a:2a:1e:5b:89:ac:c0:5b:d6:06:a6:
                    19:27:91:4c:12:92:7d:67:60:83:84:ae:2d:aa:fe:
                    3e:c7:fc:ec:b5:52:96:65:48:d3:f7:91:d1:2d:60:
                    f3:0e:53:ea:c3:6b:a9:36:22:60:a7:43:94:41:67:
                    cd:33:4a:42:1b:00:3c:79:7c:45:32:a3:1e:c8:a9:
                    78:85:e4:be:ff:2c:93:aa:46:ee:2d:e6:32:24:49:
                    17:9e:99:22:6b:68:7c:68:f4:6e:fa:22:2c:db:02:
                    9a:a8:65:6b:1c:0b:3d:a5:23:56:36:8e:77:c7:99:
                    64:bd:b5:9b:a1:7b:06:7c:3e:70:50:c0:f3:04:5f:
                    71:84:86:68:7a:c5:68:68:4b:fc:2e:b6:26:ed:17:
                    2e:05:8f:72:36:8a:b1:80:a5:21:f7:fd:0c:f3:07:
                    8f:ee:89:5c:bd:66:78:7f:c2:45:d1:8c:a0:d4:f5:
                    90:38:b9:fc:f6:10:98:a3:16:49:27:19:a7:8b:f8:
                    e7:7c:6a:af:6e:35:95:2b:1e:2e:df:c4:c0:f0:9d:
                    e7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:69:87:B4:4C:7E:FD:36:A4:90:F4:67:D1:49:EC:4B:50:9D:2D:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c02c0b70-f5dd-3b32-ae28-5c296fc72edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:7a:cf:d5:9a:63:09:01:49:d7:d3:42:39:37:aa:10:bf:91:
         ce:e3:f5:b4:09:27:1a:70:07:76:05:c6:4f:85:9a:59:5a:96:
         97:f7:ad:d8:31:7a:96:35:b0:da:44:57:4c:36:5e:2c:d0:d8:
         71:67:ea:c4:47:3f:c8:71:44:60:5b:56:98:31:47:64:26:11:
         bc:51:ff:9a:0b:6e:5d:1f:42:60:a6:fe:a3:25:c5:56:5f:46:
         25:e7:2c:52:6c:70:4f:b4:1b:82:de:d7:6b:b7:e6:02:84:86:
         f1:78:70:24:2f:62:b9:b3:db:e2:06:b2:82:9e:8a:40:ab:62:
         3d:a6:d9:83:3c:c3:59:ba:30:65:84:73:c3:a2:4c:7f:ec:cd:
         0c:81:4d:e4:3a:55:34:88:33:c3:bb:36:12:d7:bd:fb:9d:9c:
         91:c9:f0:15:a7:0f:60:ac:7a:42:04:d8:f1:0f:6c:4f:ad:fe:
         3c:fe:89:95:b6:a7:52:d1:43:21:29:cd:9a:19:aa:a0:e5:99:
         d0:8c:70:a2:95:6a:40:72:1a:68:bc:92:4f:44:db:eb:3d:50:
         7b:4c:94:15:62:a4:28:94:8b:ca:2f:1b:68:61:47:b3:ea:02:
         cf:fd:81:75:eb:ed:79:7e:4a:4a:e0:5a:69:0d:4f:4c:28:d8:
         6a:be:ce:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD8NnX2qau0dlnEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk
YTdkNjE2N2UtZTVjMC00YWJjLTlkNzEtY2FhZjJkODRhYWIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1BuxnwkQmvw2Xd25IgXcfkioi6T1ouYfhIU
75SGVqNDUzpJ3GwLxKh0ToSlDqroiioeW4mswFvWBqYZJ5FMEpJ9Z2CDhK4tqv4+
x/zstVKWZUjT95HRLWDzDlPqw2upNiJgp0OUQWfNM0pCGwA8eXxFMqMeyKl4heS+
/yyTqkbuLeYyJEkXnpkia2h8aPRu+iIs2wKaqGVrHAs9pSNWNo53x5lkvbWboXsG
fD5wUMDzBF9xhIZoesVoaEv8LrYm7RcuBY9yNoqxgKUh9/0M8weP7olcvWZ4f8JF
0Yyg1PWQOLn89hCYoxZJJxmni/jnfGqvbjWVKx4u38TA8J3nUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ1ph7RMfv02pJD0Z9FJ7EtQnS1PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzAyYzBiNzAtZjVkZC0z
YjMyLWFlMjgtNWMyOTZmYzcyZWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFN6z9WaYwkBSdfTQjk3qhC/kc7j9bQJJxpwB3YFxk+Fmllalpf3rdgx
epY1sNpEV0w2XizQ2HFn6sRHP8hxRGBbVpgxR2QmEbxR/5oLbl0fQmCm/qMlxVZf
RiXnLFJscE+0G4Le12u35gKEhvF4cCQvYrmz2+IGsoKeikCrYj2m2YM8w1m6MGWE
c8OiTH/szQyBTeQ6VTSIM8O7NhLXvfudnJHJ8BWnD2CsekIE2PEPbE+t/jz+iZW2
p1LRQyEpzZoZqqDlmdCMcKKVakByGmi8kk9E2+s9UHtMlBVipCiUi8ovG2hhR7Pq
As/9gXXr7Xl+SkrgWmkNT0wo2Gq+zmw=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:16 2026 by rpki-client