Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/5281dd47-455d-3bf6-a361-633265c578fd.roa
File:                     5281dd47-455d-3bf6-a361-633265c578fd.roa (raw, json)
Hash identifier:          YuEHva+VjK5qo4lPQeF88VULkOyUR0AYYsOjAU9PgCM=
Subject key identifier:   2C:4A:CF:4A:97:DA:74:27:30:4B:37:D1:D0:17:26:1F:9A:E8:01:D0
Certificate issuer:       /CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
Certificate serial:       010D0C9F4328584D40CA328F5EABF2D3EA9C1D80
Authority key identifier: 09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/5281dd47-455d-3bf6-a361-633265c578fd.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        69.52.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:32:8f:5e:ab:f2:d3:ea:9c:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=79085dac-35d3-4c5b-b733-c045949b7342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1b:05:56:4a:37:06:73:70:65:a9:8f:36:28:
                    80:95:3e:10:03:89:83:c5:99:4d:81:8c:51:4d:e0:
                    96:7c:37:93:16:af:2a:24:9a:d7:5b:ff:7d:67:40:
                    32:4c:b4:d7:3a:6a:01:ee:c6:11:18:5d:ff:e3:69:
                    40:88:0f:6b:ac:8b:ae:7e:f8:91:17:f2:d5:00:72:
                    f1:fc:69:4b:91:d9:55:60:d8:2f:36:8d:54:ca:11:
                    b9:6f:46:5a:2a:f0:c4:97:eb:dd:e6:e9:2b:e8:31:
                    e8:b3:47:76:65:ca:49:38:2a:ab:6d:51:d4:48:25:
                    cb:97:52:67:be:3a:d0:ea:fc:1f:7e:fa:bb:ec:2d:
                    5b:0c:d3:02:cc:4e:15:f6:46:f2:c6:bb:35:23:b6:
                    4a:03:87:67:79:60:dc:68:bf:da:da:71:2b:37:8d:
                    77:7c:6e:92:80:21:3a:bc:ad:34:fe:6a:50:33:81:
                    cb:a2:c6:66:50:56:a7:01:45:62:49:ca:1b:6a:8f:
                    2b:60:f6:bc:be:40:12:93:52:e7:1e:26:72:9c:c6:
                    3e:c3:5a:92:53:47:5e:82:e7:07:5a:2d:eb:a0:37:
                    be:37:2c:1f:15:e9:9a:46:a7:58:59:99:df:0b:ca:
                    25:24:b6:97:0c:38:8b:72:ff:bc:25:d5:67:a5:01:
                    d6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4A:CF:4A:97:DA:74:27:30:4B:37:D1:D0:17:26:1F:9A:E8:01:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/5281dd47-455d-3bf6-a361-633265c578fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl

            X509v3 Authority Key Identifier:
                keyid:09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.52.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:13:ee:27:4b:04:8b:9a:46:27:3a:db:d8:00:26:e1:2f:e6:
         77:b8:d6:3c:17:2f:12:01:27:d3:56:10:c6:07:c4:39:d6:d5:
         74:d9:07:7a:51:ca:62:32:23:a2:13:6b:20:66:0d:39:47:32:
         f5:a5:6d:83:2b:67:da:c0:11:4f:3e:ba:51:e6:fa:45:dc:0c:
         83:20:85:69:9e:aa:77:79:45:c9:c4:cf:71:d0:53:24:84:ef:
         91:6c:2e:e6:a9:d3:d8:53:16:42:b4:d6:42:86:d7:30:7a:d6:
         0b:13:15:e1:a9:0f:60:af:05:51:0e:6e:d4:4f:88:18:3a:a9:
         fe:9a:75:a9:4b:cc:8d:d7:00:78:1a:2b:8b:6f:87:6a:8e:65:
         cb:29:51:0c:64:9c:54:10:71:5b:d0:f7:3b:9f:50:70:db:fe:
         6f:e1:b2:de:8e:b9:93:fa:d5:9f:04:30:b4:00:89:5b:2b:0e:
         ac:6b:e9:e7:e8:a8:e0:58:4a:24:80:11:e9:37:38:83:e7:f8:
         eb:20:7b:37:b1:73:a0:5d:1d:80:5e:9b:04:16:1e:1c:ad:84:
         a0:6f:e1:b7:ac:c4:e8:a1:8d:9c:33:e1:11:a4:c7:56:26:21:
         e8:27:f8:97:82:a6:a3:ea:f4:34:3e:c0:15:b1:d9:1b:0f:ee:
         16:58:e4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:44 2026 by rpki-client