Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/8949f20e-2961-3a20-b148-4ded15bb50a3.roa
File:                     8949f20e-2961-3a20-b148-4ded15bb50a3.roa (raw, json)
Hash identifier:          mHz9T5XRNmmrHEx1/wMy3pfgSyrdzyZL81LTHmV76XE=
Subject key identifier:   3B:D5:77:3F:49:D4:52:52:AD:F3:44:86:19:21:3D:32:7D:76:4B:B9
Certificate issuer:       /CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
Certificate serial:       010D0C9F4328584D40CB9D5BE59C6D80A07086C0
Authority key identifier: 09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/8949f20e-2961-3a20-b148-4ded15bb50a3.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        69.52.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:9d:5b:e5:9c:6d:80:a0:70:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=c9e5c12b-8a60-4061-9535-bc5647ec5e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1c:ab:6e:4b:9d:25:c0:2e:21:dd:b1:a6:2b:
                    37:e7:ad:96:61:a3:d2:ec:8c:87:b6:1b:30:4f:af:
                    8f:82:3d:14:00:87:c4:f1:7b:9b:e5:c6:f6:e2:bc:
                    66:a0:f8:df:fb:45:66:fe:1c:c2:ca:69:1a:70:12:
                    64:86:ea:18:4b:30:79:e8:83:e4:9d:f2:d7:cd:5c:
                    be:8b:8c:62:74:1b:c9:2e:4f:f5:e4:c4:dc:00:1f:
                    33:ba:10:73:41:7c:41:43:1b:4b:1f:13:41:cd:25:
                    0a:b5:db:09:c5:c2:c3:6a:f2:2b:ba:4a:ca:9b:94:
                    72:05:f5:89:81:27:27:2e:7a:67:5c:fe:ce:a4:17:
                    5b:12:b3:61:e2:8a:bc:7e:58:15:5c:bd:3a:33:03:
                    23:92:0e:cd:8e:14:5b:32:f6:17:11:5f:2c:ed:7b:
                    8c:f3:7d:8e:dd:5c:c9:d8:3b:a3:de:59:aa:cc:ad:
                    9e:86:eb:cf:42:0d:49:26:3c:c5:09:f1:91:48:30:
                    d2:eb:da:c8:44:df:fe:ad:25:b7:2b:a2:7f:67:56:
                    9f:f9:06:6e:55:e5:e2:d1:4c:e0:ff:4c:13:02:c3:
                    ec:25:b4:8d:9e:60:0b:af:35:43:46:57:1f:f3:54:
                    25:01:0c:f1:9e:29:95:f9:d6:31:55:eb:c0:9a:4c:
                    69:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D5:77:3F:49:D4:52:52:AD:F3:44:86:19:21:3D:32:7D:76:4B:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/8949f20e-2961-3a20-b148-4ded15bb50a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl

            X509v3 Authority Key Identifier:
                keyid:09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.52.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:9f:13:d8:80:58:59:8f:62:88:7e:fc:b7:15:b5:44:7e:4c:
         bb:59:85:36:ed:c2:c1:25:a6:05:dd:09:1a:2c:c8:7f:92:67:
         64:4c:e3:d9:dd:6b:d5:e4:df:33:a9:50:3c:eb:8d:85:6e:53:
         1d:a5:fe:f3:df:ac:6f:26:bd:56:c1:5b:23:ce:40:68:c0:96:
         d4:d7:a9:4d:f3:67:e4:0c:d2:ec:0d:3d:60:75:6b:40:d1:9d:
         26:67:7d:0d:7b:f4:a8:b9:7b:81:b2:79:58:8e:44:0e:1a:78:
         a7:c9:50:35:a1:71:ef:eb:1c:3f:a4:29:94:14:fc:80:6e:66:
         0c:73:6b:4e:be:4b:ef:e7:bb:b9:a3:4d:67:48:f7:69:e9:81:
         64:53:ca:df:d3:e9:85:59:81:49:1e:33:33:65:00:22:d9:57:
         4b:11:dc:b0:9a:40:71:1c:c8:f9:68:52:a1:e0:8f:8c:27:49:
         92:15:0d:52:b2:f8:0f:15:fd:57:c0:85:70:d7:ff:22:1b:66:
         3c:b1:9c:1b:79:06:f6:86:77:3a:38:91:62:55:c2:7a:9c:8f:
         fa:e3:37:4e:c0:b7:df:f7:27:e4:4a:e4:00:2e:6b:14:3e:22:
         a4:d1:21:bd:03:1c:fb:e2:3e:d9:48:a7:9f:46:05:33:54:ba:
         46:bb:df:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay51b5ZxtgKBwhsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk5N2IxZmItYzFjYy00NWRkLWE3ZWMtMzI3NWE1MjZi
MjYxMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
YzllNWMxMmItOGE2MC00MDYxLTk1MzUtYmM1NjQ3ZWM1ZTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxyrbkudJcAuId2xpis3562WYaPS7IyHthsw
T6+Pgj0UAIfE8Xub5cb24rxmoPjf+0Vm/hzCymkacBJkhuoYSzB56IPknfLXzVy+
i4xidBvJLk/15MTcAB8zuhBzQXxBQxtLHxNBzSUKtdsJxcLDavIrukrKm5RyBfWJ
gScnLnpnXP7OpBdbErNh4oq8flgVXL06MwMjkg7NjhRbMvYXEV8s7XuM832O3VzJ
2Duj3lmqzK2ehuvPQg1JJjzFCfGRSDDS69rIRN/+rSW3K6J/Z1af+QZuVeXi0Uzg
/0wTAsPsJbSNnmALrzVDRlcf81QlAQzxnimV+dYxVevAmkxplQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDvVdz9J1FJSrfNEhhkhPTJ9dku5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lOTk3
YjFmYi1jMWNjLTQ1ZGQtYTdlYy0zMjc1YTUyNmIyNjEvODk0OWYyMGUtMjk2MS0z
YTIwLWIxNDgtNGRlZDE1YmI1MGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTk5N2IxZmItYzFjYy00NWRkLWE3
ZWMtMzI3NWE1MjZiMjYxL2U5OTdiMWZiLWMxY2MtNDVkZC1hN2VjLTMyNzVhNTI2
YjI2MS5jcmwwHwYDVR0jBBgwFoAUCRmfFSCtJze3gSqlW6Hy7/s1W10wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9lOTk3YjFmYi1jMWNjLTQ1ZGQtYTdlYy0zMjc1
YTUyNmIyNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTTdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKKfE9iAWFmPYoh+/LcVtUR+TLtZhTbtwsElpgXdCRosyH+SZ2RM49nd
a9Xk3zOpUDzrjYVuUx2l/vPfrG8mvVbBWyPOQGjAltTXqU3zZ+QM0uwNPWB1a0DR
nSZnfQ179Ki5e4GyeViORA4aeKfJUDWhce/rHD+kKZQU/IBuZgxza06+S+/nu7mj
TWdI92npgWRTyt/T6YVZgUkeMzNlACLZV0sR3LCaQHEcyPloUqHgj4wnSZIVDVKy
+A8V/VfAhXDX/yIbZjyxnBt5BvaGdzo4kWJVwnqcj/rjN07At9/3J+RK5AAuaxQ+
IqTRIb0DHPviPtlIp59GBTNUuka735E=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:34 2026 by rpki-client