Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/a45d6659-ee2a-3393-ac97-cad7f1ea0bf4.roa
File:                     a45d6659-ee2a-3393-ac97-cad7f1ea0bf4.roa (raw, json)
Hash identifier:          QfbzglFtHd4Gu4s0uaEZ2aIyzmRsi8e4YpGpGzObJq4=
Subject key identifier:   D9:E9:52:E3:96:3A:78:64:AA:DA:90:3D:8C:20:2B:32:3F:C7:B1:15
Certificate issuer:       /CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
Certificate serial:       010D0C9F4328584D40CB9EF983F79D5A5E447340
Authority key identifier: 09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/a45d6659-ee2a-3393-ac97-cad7f1ea0bf4.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        69.52.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:9e:f9:83:f7:9d:5a:5e:44:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=b5510ff8-83d4-4484-a373-3ccc2d8218fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d8:57:be:0d:5b:87:fd:07:2c:b6:67:c3:0a:
                    25:2a:82:75:de:10:6a:77:38:05:92:da:75:d5:2b:
                    1c:88:15:c3:a2:b0:8c:78:67:d8:67:7a:69:91:5e:
                    13:db:35:af:a1:d2:f8:b2:bc:3d:91:9a:c3:c3:5e:
                    49:19:fb:9b:75:46:c5:65:8f:62:be:b5:6f:1b:d8:
                    2a:8b:aa:3c:d8:a5:b1:ad:59:74:0e:1a:ca:bb:5f:
                    20:0e:26:03:c9:bd:9c:1b:07:10:f1:9e:3e:3e:67:
                    50:99:c7:5d:b5:fc:f1:ab:ae:b2:cb:04:c0:bc:e4:
                    b4:12:9c:6f:2f:9f:f9:2c:73:e4:e8:04:bd:e2:b0:
                    ff:08:f5:ab:bd:31:c0:9c:24:0b:6c:51:3a:fa:ed:
                    fb:9b:12:67:6a:99:23:35:db:a8:4c:3b:df:c7:fb:
                    cf:95:09:1e:0d:0c:10:0f:98:20:c2:19:fe:15:44:
                    93:ff:59:83:af:c2:c0:45:95:e7:50:ff:61:29:dd:
                    65:c3:6f:12:a4:f6:64:51:c3:78:7e:ce:7f:77:7e:
                    3c:ed:bd:f3:bd:66:fe:56:e0:25:6d:05:f6:bd:80:
                    32:a7:fe:dc:bc:32:4d:aa:3d:f2:bc:6e:98:11:6d:
                    7b:6f:9f:0d:16:0b:9a:c4:b1:65:e8:1d:32:f1:eb:
                    6f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E9:52:E3:96:3A:78:64:AA:DA:90:3D:8C:20:2B:32:3F:C7:B1:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/a45d6659-ee2a-3393-ac97-cad7f1ea0bf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl

            X509v3 Authority Key Identifier:
                keyid:09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.52.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:f6:34:4d:9d:6c:e0:33:c6:a5:c6:fc:1d:aa:e3:44:2d:49:
         84:72:4d:d2:2d:f9:08:77:35:87:cb:5c:c5:0e:ae:ae:a4:c8:
         87:46:c4:89:74:32:01:9b:b1:5e:b0:e0:b8:24:54:ff:ad:6d:
         2d:cd:d2:ef:9c:27:3e:e8:e4:40:3d:cd:7b:8a:2c:99:49:78:
         4b:d7:ac:05:cf:78:47:47:71:fa:1b:86:6e:ff:c6:a4:22:77:
         f3:27:fc:ea:93:64:47:54:63:57:68:17:03:d4:72:87:7e:32:
         61:7e:9e:bf:f9:f1:b0:6d:c3:17:e6:cf:d3:94:93:5a:be:ad:
         33:24:ea:8f:95:1e:48:c7:8d:60:84:b5:34:ba:6e:3a:96:bb:
         df:4e:4c:cf:05:64:1a:78:b6:ed:ca:62:96:5b:71:b8:35:de:
         fb:99:ac:93:69:44:95:17:ae:04:9a:61:90:fd:2a:b4:9c:ee:
         12:b4:83:c1:76:a6:0d:21:fe:ae:22:a7:86:4a:fa:df:99:17:
         1d:2f:c7:76:f5:61:1f:2e:8d:e1:67:74:e2:0f:71:ee:41:8f:
         67:6d:22:e3:f4:83:be:d8:d1:2d:e6:4f:25:29:47:e1:8c:c1:
         cc:0d:9c:da:13:09:5e:97:10:d8:e1:14:ea:ad:0a:ba:95:ed:
         8f:6f:5f:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay575g/edWl5Ec0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk5N2IxZmItYzFjYy00NWRkLWE3ZWMtMzI3NWE1MjZi
MjYxMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
YjU1MTBmZjgtODNkNC00NDg0LWEzNzMtM2NjYzJkODIxOGZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNhXvg1bh/0HLLZnwwolKoJ13hBqdzgFktp1
1SsciBXDorCMeGfYZ3ppkV4T2zWvodL4srw9kZrDw15JGfubdUbFZY9ivrVvG9gq
i6o82KWxrVl0DhrKu18gDiYDyb2cGwcQ8Z4+PmdQmcddtfzxq66yywTAvOS0Epxv
L5/5LHPk6AS94rD/CPWrvTHAnCQLbFE6+u37mxJnapkjNduoTDvfx/vPlQkeDQwQ
D5ggwhn+FUST/1mDr8LARZXnUP9hKd1lw28SpPZkUcN4fs5/d3487b3zvWb+VuAl
bQX2vYAyp/7cvDJNqj3yvG6YEW17b58NFguaxLFl6B0y8etvgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNnpUuOWOnhkqtqQPYwgKzI/x7EVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lOTk3
YjFmYi1jMWNjLTQ1ZGQtYTdlYy0zMjc1YTUyNmIyNjEvYTQ1ZDY2NTktZWUyYS0z
MzkzLWFjOTctY2FkN2YxZWEwYmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTk5N2IxZmItYzFjYy00NWRkLWE3
ZWMtMzI3NWE1MjZiMjYxL2U5OTdiMWZiLWMxY2MtNDVkZC1hN2VjLTMyNzVhNTI2
YjI2MS5jcmwwHwYDVR0jBBgwFoAUCRmfFSCtJze3gSqlW6Hy7/s1W10wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9lOTk3YjFmYi1jMWNjLTQ1ZGQtYTdlYy0zMjc1
YTUyNmIyNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTTRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAr2NE2dbOAzxqXG/B2q40QtSYRyTdIt+Qh3NYfLXMUOrq6kyIdGxIl0
MgGbsV6w4LgkVP+tbS3N0u+cJz7o5EA9zXuKLJlJeEvXrAXPeEdHcfobhm7/xqQi
d/Mn/OqTZEdUY1doFwPUcod+MmF+nr/58bBtwxfmz9OUk1q+rTMk6o+VHkjHjWCE
tTS6bjqWu99OTM8FZBp4tu3KYpZbcbg13vuZrJNpRJUXrgSaYZD9KrSc7hK0g8F2
pg0h/q4ip4ZK+t+ZFx0vx3b1YR8ujeFndOIPce5Bj2dtIuP0g77Y0S3mTyUpR+GM
wcwNnNoTCV6XENjhFOqtCrqV7Y9vX4g=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:23 2026 by rpki-client