Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/02132026-a746-3526-b1b1-5913ac4b6ead.roa
File:                     02132026-a746-3526-b1b1-5913ac4b6ead.roa (raw, json)
Hash identifier:          BAdghtSw1Fnnmw3TRUfd/Q8IGiymtmQ48urgwSQHzU0=
Subject key identifier:   82:53:62:DF:B5:8F:DE:50:52:5E:CA:F7:C1:8D:95:00:F3:A1:B1:EF
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584E3B947F29CBC62487DFB61A80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/02132026-a746-3526-b1b1-5913ac4b6ead.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     62044
IP address blocks:        209.55.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:7f:29:cb:c6:24:87:df:b6:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=9bfdc716-d65d-4407-862a-0d8b38d936d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3f:ce:be:3a:74:96:56:7e:d8:9c:ee:07:f7:
                    a9:d8:24:42:24:e4:0b:45:40:09:1e:54:e7:76:f5:
                    77:72:f7:4f:ce:18:1a:78:21:f3:f4:ea:71:df:3e:
                    e6:dd:8f:e6:3b:20:57:b5:7e:e4:28:30:ec:ea:f0:
                    a2:53:4b:e6:47:d9:c1:3d:d3:ed:17:38:97:f0:d9:
                    98:c6:a4:2c:f0:79:97:53:e2:fa:8b:3d:cc:d7:61:
                    75:90:a1:5c:a3:93:5a:a9:34:60:3f:49:f2:fe:60:
                    55:7f:4d:dc:01:a3:73:7b:61:d3:b3:70:be:e0:31:
                    c6:3a:e9:79:34:e6:36:4d:54:3f:79:c6:89:69:23:
                    27:a4:1c:d1:a5:be:31:d2:05:32:37:cf:5b:7d:c4:
                    c2:6b:4b:7a:84:ef:3d:4d:39:f4:7b:e5:a9:22:df:
                    2c:56:df:1a:3f:8e:0a:a9:62:43:c4:85:0f:b7:99:
                    1b:cf:23:7f:b9:ca:dc:50:76:ec:50:cb:be:01:10:
                    f2:94:e4:dc:a3:dd:cc:6e:bc:c7:51:3f:f9:4a:4c:
                    9d:a2:6c:d6:73:36:53:0d:d6:3b:76:ed:85:20:0a:
                    50:d8:06:06:d6:1d:62:27:9c:33:9a:d3:37:50:c8:
                    15:13:7b:0f:b5:3a:60:f3:fe:49:db:f8:b5:22:bc:
                    5c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:53:62:DF:B5:8F:DE:50:52:5E:CA:F7:C1:8D:95:00:F3:A1:B1:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/02132026-a746-3526-b1b1-5913ac4b6ead.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.55.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:c7:63:80:d5:c6:78:11:7a:47:19:a1:4a:ce:87:38:21:2a:
         86:40:60:f7:d2:40:2c:38:67:fb:09:7f:74:e3:d1:b5:2a:8a:
         8a:e0:6c:b3:dd:2b:1b:1f:02:75:38:1b:0c:66:7a:ae:60:70:
         16:2e:65:70:c2:14:25:48:8b:b5:d0:80:56:01:8a:fb:c1:50:
         43:03:02:0d:59:4d:ac:25:58:ad:2c:55:76:cc:7e:c7:44:a2:
         e5:ae:01:1e:cc:bd:bf:cb:3e:24:3b:d2:8d:2d:22:2e:16:ef:
         4e:48:88:a5:e3:dd:4d:9f:45:35:d7:2d:84:86:ea:91:bb:f8:
         c2:5e:5c:f0:17:13:aa:62:29:e8:f9:80:71:79:c5:9d:38:33:
         39:ed:79:5b:04:6e:bf:b5:59:b7:1e:d9:29:de:0f:cb:ce:7f:
         a8:b6:77:ad:22:af:84:ed:77:20:2b:77:4f:75:f6:90:c1:a8:
         fc:09:fc:8e:d1:5c:d7:0f:66:d6:ee:31:76:0c:e5:ff:09:1b:
         8d:f0:13:b7:ef:9f:18:51:39:ef:70:fe:ad:cc:b5:74:71:3a:
         da:92:5e:b6:10:c1:95:97:1a:79:cd:60:33:eb:c8:ba:b1:4d:
         20:f3:3f:3c:bf:b5:17:4e:a9:33:66:0d:7d:bf:9d:53:60:d1:
         73:71:f8:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE47lH8py8Ykh9+2GoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI2MDYyMDA5MDAxM1oXDTI2MDkxODA5MDAxM1owLzEtMCsGA1UEAxMk
OWJmZGM3MTYtZDY1ZC00NDA3LTg2MmEtMGQ4YjM4ZDkzNmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD/Ovjp0llZ+2JzuB/ep2CRCJOQLRUAJHlTn
dvV3cvdPzhgaeCHz9Opx3z7m3Y/mOyBXtX7kKDDs6vCiU0vmR9nBPdPtFziX8NmY
xqQs8HmXU+L6iz3M12F1kKFco5NaqTRgP0ny/mBVf03cAaNze2HTs3C+4DHGOul5
NOY2TVQ/ecaJaSMnpBzRpb4x0gUyN89bfcTCa0t6hO89TTn0e+WpIt8sVt8aP44K
qWJDxIUPt5kbzyN/ucrcUHbsUMu+ARDylOTco93MbrzHUT/5SkydomzWczZTDdY7
du2FIApQ2AYG1h1iJ5wzmtM3UMgVE3sPtTpg8/5J2/i1Irxc2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIJTYt+1j95QUl7K98GNlQDzobHvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMDIxMzIwMjYtYTc0Ni0z
NTI2LWIxYjEtNTkxM2FjNGI2ZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TeYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHnHY4DVxngRekcZoUrOhzghKoZAYPfSQCw4Z/sJf3Tj0bUqiorgbLPd
KxsfAnU4Gwxmeq5gcBYuZXDCFCVIi7XQgFYBivvBUEMDAg1ZTawlWK0sVXbMfsdE
ouWuAR7Mvb/LPiQ70o0tIi4W705IiKXj3U2fRTXXLYSG6pG7+MJeXPAXE6piKej5
gHF5xZ04MznteVsEbr+1Wbce2SneD8vOf6i2d60ir4TtdyArd0919pDBqPwJ/I7R
XNcPZtbuMXYM5f8JG43wE7fvnxhROe9w/q3MtXRxOtqSXrYQwZWXGnnNYDPryLqx
TSDzPzy/tRdOqTNmDX2/nVNg0XNx+JY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:06:01 2026 by rpki-client