Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d22862c1-8235-3834-9526-48805af391b1.roa
File:                     d22862c1-8235-3834-9526-48805af391b1.roa (raw, json)
Hash identifier:          Nzq2jHQg9uWbB5sDAQp7BKbFBiTUiUGNrafTeivgAY4=
Subject key identifier:   D9:2D:85:37:32:EA:A6:0C:81:93:C2:26:37:62:C0:09:FE:EB:E0:75
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D6AAA99A1C6CEEBF86B577D80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d22862c1-8235-3834-9526-48805af391b1.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     13335
IP address blocks:        172.68.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:99:a1:c6:ce:eb:f8:6b:57:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=593fd0ab-43af-46db-9efe-a0a4cd8950b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:72:ea:bd:6c:28:b7:f5:2d:b3:b6:86:cf:2c:
                    c0:15:8f:bb:76:45:56:e0:0c:7e:ba:0c:65:1b:bf:
                    03:61:cb:fe:ea:dd:44:40:2d:a7:21:44:b9:d9:fa:
                    2e:fe:29:f4:cf:cd:6f:b4:5c:37:4a:e6:fc:7c:f1:
                    64:ab:0a:40:04:3a:bb:ef:fe:f4:ce:30:ea:bc:d1:
                    43:09:ef:d3:a9:64:57:23:dc:fe:89:3c:35:08:7c:
                    c5:81:35:ab:56:ba:ca:f8:cf:0a:d3:10:ed:ef:70:
                    c5:49:22:ab:ef:3d:35:0a:cb:2f:13:b0:a1:b6:74:
                    ec:06:a1:b4:47:74:1f:7d:ad:b3:cc:c5:53:1e:af:
                    51:5f:2a:0f:88:ee:f5:58:9b:15:93:77:5d:37:56:
                    0d:3d:59:c9:7d:df:9b:f1:b8:ca:ab:fa:34:d8:ee:
                    55:d0:dc:f4:bd:51:8c:a8:52:e9:c5:de:6c:a2:8d:
                    09:a5:bd:b0:39:62:c9:bd:1c:17:e4:d7:b6:b8:45:
                    5b:d0:69:bf:17:d5:d2:f0:b2:74:82:80:61:fc:14:
                    95:4a:ac:9c:6f:fd:01:7f:c0:3f:32:45:60:a3:bb:
                    e8:fa:db:ee:04:30:1f:75:25:46:9c:b0:bb:b7:01:
                    58:75:85:20:a8:46:9c:4c:29:cb:d1:11:4e:bf:cb:
                    cb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2D:85:37:32:EA:A6:0C:81:93:C2:26:37:62:C0:09:FE:EB:E0:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d22862c1-8235-3834-9526-48805af391b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:c6:a9:66:3f:2b:c1:1e:95:bd:05:16:3a:6a:e4:43:80:5d:
         17:14:69:27:da:c3:b6:d2:dc:30:c2:63:94:63:7f:66:3c:6a:
         ff:d4:0d:28:32:11:26:e4:11:9d:f8:26:46:6c:82:45:83:9a:
         d2:6f:0b:6e:cf:bb:05:50:6c:5c:5b:05:51:ad:b9:0d:d5:b4:
         48:c6:c9:e5:20:ae:aa:6f:10:6b:7d:1f:6e:b5:11:e5:fb:7e:
         f0:91:c2:72:f9:80:b7:ed:00:80:66:f1:f6:ce:22:35:74:d5:
         df:70:31:09:f8:07:cd:b0:0e:4f:00:fe:1c:ae:b7:d1:99:70:
         3e:91:50:a2:f9:bd:31:f8:3e:72:c0:b3:16:3f:1b:ec:23:6d:
         84:dd:6c:0d:37:52:d1:57:9a:89:a2:74:44:f8:99:52:3a:ba:
         6f:a9:01:9e:1c:04:4d:b3:a8:a4:22:d7:15:24:a0:72:5e:ad:
         d3:8e:d8:eb:f8:f4:72:45:c0:dc:57:c0:13:19:37:90:4b:86:
         dd:57:a5:17:a0:20:63:6a:62:5e:e4:a9:10:6c:70:9c:f7:be:
         d2:43:70:96:54:40:cd:bc:04:3e:c9:59:b7:74:f1:45:39:56:
         ca:2f:37:92:75:66:00:ca:04:1d:41:02:21:7f:22:87:84:eb:
         66:2d:ab:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqpmhxs7r+GtXfYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk
NTkzZmQwYWItNDNhZi00NmRiLTllZmUtYTBhNGNkODk1MGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunLqvWwot/Uts7aGzyzAFY+7dkVW4Ax+ugxl
G78DYcv+6t1EQC2nIUS52fou/in0z81vtFw3Sub8fPFkqwpABDq77/70zjDqvNFD
Ce/TqWRXI9z+iTw1CHzFgTWrVrrK+M8K0xDt73DFSSKr7z01CssvE7ChtnTsBqG0
R3Qffa2zzMVTHq9RXyoPiO71WJsVk3ddN1YNPVnJfd+b8bjKq/o02O5V0Nz0vVGM
qFLpxd5soo0Jpb2wOWLJvRwX5Ne2uEVb0Gm/F9XS8LJ0goBh/BSVSqycb/0Bf8A/
MkVgo7vo+tvuBDAfdSVGnLC7twFYdYUgqEacTCnL0RFOv8vLewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNkthTcy6qYMgZPCJjdiwAn+6+B1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDIyODYyYzEtODIzNS0z
ODM0LTk1MjYtNDg4MDVhZjM5MWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGrGqWY/K8Eelb0FFjpq5EOAXRcUaSfaw7bS3DDCY5Rjf2Y8av/UDSgy
ESbkEZ34JkZsgkWDmtJvC27PuwVQbFxbBVGtuQ3VtEjGyeUgrqpvEGt9H261EeX7
fvCRwnL5gLftAIBm8fbOIjV01d9wMQn4B82wDk8A/hyut9GZcD6RUKL5vTH4PnLA
sxY/G+wjbYTdbA03UtFXmomidET4mVI6um+pAZ4cBE2zqKQi1xUkoHJerdOO2Ov4
9HJFwNxXwBMZN5BLht1XpRegIGNqYl7kqRBscJz3vtJDcJZUQM28BD7JWbd08UU5
VsovN5J1ZgDKBB1BAiF/IoeE62YtqxY=
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:27:00 2026 by rpki-client