Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/c9d3c389-6eda-3690-91af-1eae10fa2492.roa
File:                     c9d3c389-6eda-3690-91af-1eae10fa2492.roa (raw, json)
Hash identifier:          2QrvTyn1MUBSdPyZZVZ4JnMvblTIwjFFaRh1zitEA+Q=
Subject key identifier:   1A:8E:F2:8B:56:5A:EB:3D:9D:B4:DF:FB:67:53:1E:29:9A:B2:E8:41
Certificate issuer:       /CN=ee5309a0-cc40-45fb-8638-b4960e7326cc
Certificate serial:       010D0C9F4328584F34827AB7569BD95B92D62780
Authority key identifier: A1:99:DB:68:6C:94:EF:BE:6C:88:1D:82:50:B2:AC:89:F7:F9:13:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/c9d3c389-6eda-3690-91af-1eae10fa2492.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     53764
IP address blocks:        72.249.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/ee5309a0-cc40-45fb-8638-b4960e7326cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/ee5309a0-cc40-45fb-8638-b4960e7326cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:7a:b7:56:9b:d9:5b:92:d6:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee5309a0-cc40-45fb-8638-b4960e7326cc
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=d31f7f8b-e6ac-4283-91f0-661b83511298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:da:5c:0d:b0:d3:b0:6c:63:ba:ac:0d:97:75:
                    b2:49:09:c8:57:a7:e7:17:9b:d2:1d:99:6a:a0:6c:
                    47:4f:44:aa:27:f8:63:cf:df:43:8e:2a:87:72:59:
                    47:4e:2b:90:b3:e5:04:ee:c7:1f:05:6d:79:37:53:
                    54:c0:56:94:ca:a4:d1:24:2e:5f:e8:94:b5:fc:c0:
                    7a:0b:a7:6b:8e:2d:bd:16:df:94:9d:a4:99:8e:2e:
                    9c:46:e1:1c:eb:4d:0d:c6:f5:1b:72:13:fe:e9:07:
                    da:73:53:e0:8c:e7:db:a5:3b:a3:fb:f3:27:23:9c:
                    86:56:9d:6a:40:ca:82:ec:eb:16:b7:23:b7:83:66:
                    08:b3:2b:90:30:8b:42:87:ee:46:39:b0:71:07:7f:
                    88:cd:be:33:9b:75:eb:15:d9:ca:61:2b:3a:2b:76:
                    56:7c:14:61:9f:7c:5d:1c:d7:de:e4:88:de:99:54:
                    a1:d5:48:21:16:e2:da:b6:73:d3:59:82:29:71:3f:
                    d8:01:d9:fb:d4:a2:de:90:6a:9e:92:74:2d:37:30:
                    6d:c5:c5:31:ad:d5:c3:58:32:c0:39:5c:9d:5d:14:
                    10:67:81:6a:f7:05:42:52:3c:fe:48:42:28:40:62:
                    d3:06:8b:57:c3:2c:b5:40:63:51:26:fd:a0:df:c0:
                    b9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8E:F2:8B:56:5A:EB:3D:9D:B4:DF:FB:67:53:1E:29:9A:B2:E8:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/c9d3c389-6eda-3690-91af-1eae10fa2492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/ee5309a0-cc40-45fb-8638-b4960e7326cc.crl

            X509v3 Authority Key Identifier:
                keyid:A1:99:DB:68:6C:94:EF:BE:6C:88:1D:82:50:B2:AC:89:F7:F9:13:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.249.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:12:a2:9b:f5:57:b0:dd:18:09:c4:e6:4b:3f:b6:dd:7c:15:
         99:b8:82:85:95:6c:7e:c0:a7:13:04:92:92:6b:a9:9f:16:5f:
         c4:e8:d2:05:63:b6:3a:d6:eb:d4:8c:4a:d7:d2:03:56:b9:2e:
         f4:4e:5c:43:dd:f8:88:e4:76:8a:5a:fa:bb:89:31:49:22:76:
         e9:82:50:d2:40:5b:c4:ba:16:de:9c:d4:02:e1:3a:ef:65:49:
         a7:80:66:13:60:b3:26:3f:cf:73:9e:99:63:cd:e7:b0:58:ba:
         dd:4a:0e:c6:1a:6a:58:e1:11:f4:7f:31:ec:4c:bb:0f:47:f5:
         4c:51:5b:2a:e2:ee:88:6a:10:5b:dc:c4:1d:8f:a2:e3:f0:7f:
         b4:7d:ba:80:f2:01:cb:11:12:cc:cc:a8:6f:20:98:ec:4e:c7:
         fa:ad:6b:64:83:7f:8f:59:66:cf:9b:48:12:5c:a6:0a:84:b4:
         fb:dc:c9:2b:97:43:6c:3d:68:a2:ae:31:80:96:2c:19:b7:72:
         93:bb:5d:07:f3:f7:a8:15:7c:03:83:2e:54:1f:9f:8b:b6:db:
         9e:16:13:13:2d:50:12:d2:f3:5e:3f:bd:49:76:07:5a:d6:f3:
         35:f6:e4:6c:b2:15:94:37:e7:4b:2b:fc:dc:91:52:f1:50:b4:
         a9:1a:9f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 20:55:48 2026 by rpki-client