Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efdf0fe6-7cec-3df1-aa40-01cd7e527044.roa
File:                     efdf0fe6-7cec-3df1-aa40-01cd7e527044.roa (raw, json)
Hash identifier:          aPWzgHdZq/3IrTbWsceRjXnxgYim2gPqXrEtvW3de58=
Subject key identifier:   25:58:B4:F2:CF:30:2D:27:ED:41:E9:20:43:2F:5F:10:75:27:18:FA
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D6C0FC2EDF2086B7348BA37A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efdf0fe6-7cec-3df1-aa40-01cd7e527044.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     13335
IP address blocks:        172.68.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:c2:ed:f2:08:6b:73:48:ba:37:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=67c774d3-f195-4c09-a482-7578655722f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ad:43:26:cf:07:0d:31:27:4a:60:78:c2:c9:
                    4b:41:f5:ff:7b:af:d9:71:ae:ee:0f:1a:2b:2f:51:
                    19:e9:d2:96:59:56:9a:a4:27:a8:87:3f:df:ea:30:
                    32:15:be:13:72:cb:bc:f4:9c:fd:8e:b9:01:fc:e9:
                    e6:4c:95:f3:6f:a7:37:fc:db:8a:18:a9:aa:dd:b8:
                    0c:1f:6c:1a:3f:f2:9c:84:26:c7:2f:d3:21:7b:8c:
                    cf:64:47:81:47:2f:66:99:ae:e0:eb:d7:76:cd:54:
                    8f:9b:fc:a6:5f:a8:2d:94:0b:95:40:7b:d1:dd:36:
                    9c:45:7e:3d:6a:ab:d4:12:b3:88:98:2c:ff:7a:87:
                    0f:e9:5e:89:be:18:cf:02:84:ad:26:5f:47:c7:58:
                    6b:7d:59:d2:dc:9e:a2:23:7d:f9:fc:4e:4b:02:da:
                    ee:5e:bb:5e:56:08:6c:19:13:77:a3:83:95:0e:ae:
                    ca:a2:39:e5:ea:d4:c4:19:74:52:cc:2a:54:6a:b6:
                    bf:d5:33:5f:e7:2d:15:d3:55:75:62:b5:9b:0a:18:
                    46:fe:d4:9a:d4:14:ec:37:10:da:59:80:43:43:5c:
                    9f:de:1f:cd:95:a1:af:b0:35:f5:35:10:81:44:62:
                    5d:44:28:20:0a:10:3f:d6:e4:6f:79:3f:c0:9a:b3:
                    45:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:58:B4:F2:CF:30:2D:27:ED:41:E9:20:43:2F:5F:10:75:27:18:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efdf0fe6-7cec-3df1-aa40-01cd7e527044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:29:b4:02:d9:6a:42:db:13:6c:13:5c:a4:3c:77:19:cb:4e:
         ab:7c:e3:ac:c2:32:d3:50:36:81:82:05:96:7c:ac:4a:74:97:
         bd:f4:89:0e:11:e6:a9:6e:03:ce:80:eb:15:f8:59:c3:a7:f7:
         60:1d:9c:8f:d2:8a:c7:d8:5e:8f:10:c6:89:bc:ce:d9:a0:a5:
         77:bb:e8:a4:8e:29:da:bd:0c:45:d2:19:0b:d5:2c:d3:f7:84:
         17:5c:4a:5e:14:2a:9b:fa:3f:5b:ec:6e:bd:52:69:6e:8a:dc:
         85:16:51:be:82:8f:f6:fd:12:64:2a:a2:e7:c3:2b:af:e3:89:
         80:af:07:fd:14:27:9a:f7:b1:ff:4d:3f:95:80:f5:d2:d0:2e:
         79:55:ea:3f:2c:15:8e:e2:f9:05:b7:68:66:dd:a6:73:09:91:
         9a:b6:6c:e3:a6:42:cb:ad:c1:86:d0:66:fe:13:53:da:a0:a4:
         0f:77:74:f1:af:0e:b3:ad:2c:7b:03:b9:60:8e:8d:a2:ef:1f:
         76:a9:bb:56:90:ca:bb:aa:a6:62:4d:23:05:33:8b:37:14:f8:
         c3:42:c3:56:0a:ef:0b:bb:07:4c:83:09:6e:03:5b:ca:d8:17:
         a8:b6:41:bc:14:a2:ca:32:59:a1:94:b4:6c:b2:2c:3e:db:99:
         7a:84:eb:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD8Lt8ghrc0i6N6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk
NjdjNzc0ZDMtZjE5NS00YzA5LWE0ODItNzU3ODY1NTcyMmYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq1DJs8HDTEnSmB4wslLQfX/e6/Zca7uDxor
L1EZ6dKWWVaapCeohz/f6jAyFb4Tcsu89Jz9jrkB/OnmTJXzb6c3/NuKGKmq3bgM
H2waP/KchCbHL9Mhe4zPZEeBRy9mma7g69d2zVSPm/ymX6gtlAuVQHvR3TacRX49
aqvUErOImCz/eocP6V6JvhjPAoStJl9Hx1hrfVnS3J6iI335/E5LAtruXrteVghs
GRN3o4OVDq7Kojnl6tTEGXRSzCpUara/1TNf5y0V01V1YrWbChhG/tSa1BTsNxDa
WYBDQ1yf3h/NlaGvsDX1NRCBRGJdRCggChA/1uRveT/AmrNF/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCVYtPLPMC0n7UHpIEMvXxB1Jxj6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWZkZjBmZTYtN2NlYy0z
ZGYxLWFhNDAtMDFjZDdlNTI3MDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArES+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACEptALZakLbE2wTXKQ8dxnLTqt846zCMtNQNoGCBZZ8rEp0l730iQ4R
5qluA86A6xX4WcOn92AdnI/SisfYXo8Qxom8ztmgpXe76KSOKdq9DEXSGQvVLNP3
hBdcSl4UKpv6P1vsbr1SaW6K3IUWUb6Cj/b9EmQqoufDK6/jiYCvB/0UJ5r3sf9N
P5WA9dLQLnlV6j8sFY7i+QW3aGbdpnMJkZq2bOOmQsutwYbQZv4TU9qgpA93dPGv
DrOtLHsDuWCOjaLvH3apu1aQyruqpmJNIwUzizcU+MNCw1YK7wu7B0yDCW4DW8rY
F6i2QbwUosoyWaGUtGyyLD7bmXqE63s=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:35:47 2026 by rpki-client