Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/09ba236f-45b4-4929-abea-f48ac8e4703a/b9448f06-127d-3a62-b55f-f6258ae6bbaa.roa
File:                     b9448f06-127d-3a62-b55f-f6258ae6bbaa.roa (raw, json)
Hash identifier:          Z8qDEAdH442s4+ME0+RilMt8QcBz4F5bIQVcITc0Doc=
Subject key identifier:   00:36:11:10:1D:CE:44:4C:3A:0B:99:85:9E:B8:70:83:56:36:1C:57
Certificate issuer:       /CN=09ba236f-45b4-4929-abea-f48ac8e4703a
Certificate serial:       010D0C9F4328584F0AA227E84945506764559800
Authority key identifier: 16:E1:69:30:3F:82:29:6B:53:4C:31:63:EC:C9:A5:FD:26:5B:5A:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/09ba236f-45b4-4929-abea-f48ac8e4703a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/09ba236f-45b4-4929-abea-f48ac8e4703a/b9448f06-127d-3a62-b55f-f6258ae6bbaa.roa
Signing time:             Wed 02 Sep 2026 13:00:12 +0000
ROA not before:           Wed 02 Sep 2026 13:00:12 +0000
ROA not after:            Tue 01 Dec 2026 14:00:12 +0000
asID:                     25871
IP address blocks:        208.73.152.0/22 maxlen: 22
                          208.73.152.0/24 maxlen: 24
                          208.73.153.0/24 maxlen: 24
                          208.73.154.0/24 maxlen: 24
                          208.73.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/09ba236f-45b4-4929-abea-f48ac8e4703a/09ba236f-45b4-4929-abea-f48ac8e4703a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/09ba236f-45b4-4929-abea-f48ac8e4703a/09ba236f-45b4-4929-abea-f48ac8e4703a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/09ba236f-45b4-4929-abea-f48ac8e4703a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:a2:27:e8:49:45:50:67:64:55:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ba236f-45b4-4929-abea-f48ac8e4703a
        Validity
            Not Before: Sep  2 13:00:12 2026 GMT
            Not After : Dec  1 14:00:12 2026 GMT
        Subject: CN=3d51dba3-9bf8-4e51-9777-9b29b5282dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a2:e0:39:56:76:da:60:85:ec:b6:0b:e3:84:
                    91:90:9a:a0:1b:63:3f:20:d6:0f:1c:0c:bc:4c:19:
                    75:41:9e:eb:60:71:31:83:6f:dd:77:51:a9:ab:91:
                    46:77:53:f0:2e:4a:13:62:cf:8b:58:b9:ad:6a:cc:
                    a0:9f:ad:a9:7e:5a:35:fd:e7:00:ac:e2:61:57:a5:
                    aa:93:75:ea:1a:0b:6a:e9:63:80:9b:e4:f8:21:71:
                    01:9c:e7:8a:f2:a3:3f:76:7d:41:8c:5f:8e:1c:48:
                    98:aa:b2:15:98:8e:6e:8e:85:50:19:54:af:41:46:
                    19:b8:a9:a8:a2:41:10:2f:65:93:e3:82:43:c3:ad:
                    be:95:52:cc:37:52:10:81:f1:77:94:78:c9:9d:04:
                    1c:19:26:7d:be:80:41:fb:4b:05:57:39:48:52:71:
                    41:5d:e1:26:c2:a2:d1:20:84:36:c1:16:82:9b:3e:
                    7c:85:f6:a1:dc:36:0d:1f:cf:f5:d2:09:3b:4d:4f:
                    62:4b:5f:dc:fb:25:1d:0f:c9:92:16:62:49:05:f6:
                    40:a1:2d:c9:60:90:76:37:23:32:a7:c4:da:0a:e9:
                    2c:cc:ea:86:44:74:e2:f4:88:2f:b4:f0:22:80:6e:
                    ed:0a:9a:e8:83:21:40:a3:15:ba:a8:f5:d7:c0:73:
                    31:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:36:11:10:1D:CE:44:4C:3A:0B:99:85:9E:B8:70:83:56:36:1C:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/09ba236f-45b4-4929-abea-f48ac8e4703a/b9448f06-127d-3a62-b55f-f6258ae6bbaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/09ba236f-45b4-4929-abea-f48ac8e4703a/09ba236f-45b4-4929-abea-f48ac8e4703a.crl

            X509v3 Authority Key Identifier:
                keyid:16:E1:69:30:3F:82:29:6B:53:4C:31:63:EC:C9:A5:FD:26:5B:5A:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/09ba236f-45b4-4929-abea-f48ac8e4703a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.73.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:3a:a8:d1:71:53:ba:fe:6e:0d:6a:64:7a:3f:06:e7:e8:f9:
         a3:b8:bd:c2:3f:b0:05:51:67:93:a1:14:80:ee:14:64:5b:4f:
         70:58:19:e8:2a:c9:f3:77:36:81:00:6c:e2:45:84:44:ce:02:
         9e:b9:94:b8:70:41:59:bc:fb:16:64:14:54:c9:53:c8:fc:c4:
         a4:3c:6e:a7:5f:d1:ad:1b:84:99:56:95:5f:cb:99:69:a3:6b:
         2a:55:f8:51:a4:5e:92:d8:89:9e:a6:8e:0f:8c:02:4a:b8:5c:
         23:92:2e:59:10:56:d6:1b:0c:b1:6c:9b:97:c1:5a:72:42:05:
         88:00:e5:c9:84:24:83:c1:79:75:4c:07:95:52:15:20:ec:33:
         f6:1a:b2:ed:8d:5b:25:b0:50:ff:42:bc:f3:fc:06:63:d2:ce:
         00:35:37:b7:97:08:58:3e:b7:cf:f2:3e:ea:83:8b:c2:a8:07:
         20:54:8f:a8:10:4b:4c:4b:59:9d:ae:e2:3d:83:04:35:14:ce:
         02:84:bb:ca:96:b4:47:4e:2c:a7:a6:70:ab:60:ca:cc:8b:df:
         0d:f5:cf:3b:c2:77:69:f5:2c:89:ed:17:80:02:ee:b0:d4:79:
         65:6f:0a:cd:9a:47:38:78:31:a2:73:a9:f5:db:1e:5c:68:b8:
         ce:be:ea:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8KoifoSUVQZ2RVmAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDliYTIzNmYtNDViNC00OTI5LWFiZWEtZjQ4YWM4ZTQ3
MDNhMB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk
M2Q1MWRiYTMtOWJmOC00ZTUxLTk3NzctOWIyOWI1MjgyZGM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aLgOVZ22mCF7LYL44SRkJqgG2M/INYPHAy8
TBl1QZ7rYHExg2/dd1Gpq5FGd1PwLkoTYs+LWLmtasygn62pflo1/ecArOJhV6Wq
k3XqGgtq6WOAm+T4IXEBnOeK8qM/dn1BjF+OHEiYqrIVmI5ujoVQGVSvQUYZuKmo
okEQL2WT44JDw62+lVLMN1IQgfF3lHjJnQQcGSZ9voBB+0sFVzlIUnFBXeEmwqLR
IIQ2wRaCmz58hfah3DYNH8/10gk7TU9iS1/c+yUdD8mSFmJJBfZAoS3JYJB2NyMy
p8TaCukszOqGRHTi9IgvtPAigG7tCprogyFAoxW6qPXXwHMxdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAA2ERAdzkRMOguZhZ64cINWNhxXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wOWJh
MjM2Zi00NWI0LTQ5MjktYWJlYS1mNDhhYzhlNDcwM2EvYjk0NDhmMDYtMTI3ZC0z
YTYyLWI1NWYtZjYyNThhZTZiYmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMDliYTIzNmYtNDViNC00OTI5LWFi
ZWEtZjQ4YWM4ZTQ3MDNhLzA5YmEyMzZmLTQ1YjQtNDkyOS1hYmVhLWY0OGFjOGU0
NzAzYS5jcmwwHwYDVR0jBBgwFoAUFuFpMD+CKWtTTDFj7Mml/SZbWrYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wOWJhMjM2Zi00NWI0LTQ5MjktYWJlYS1mNDhh
YzhlNDcwM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EmYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHo6qNFxU7r+bg1qZHo/Bufo+aO4vcI/sAVRZ5OhFIDuFGRbT3BYGegq
yfN3NoEAbOJFhETOAp65lLhwQVm8+xZkFFTJU8j8xKQ8bqdf0a0bhJlWlV/LmWmj
aypV+FGkXpLYiZ6mjg+MAkq4XCOSLlkQVtYbDLFsm5fBWnJCBYgA5cmEJIPBeXVM
B5VSFSDsM/Yasu2NWyWwUP9CvPP8BmPSzgA1N7eXCFg+t8/yPuqDi8KoByBUj6gQ
S0xLWZ2u4j2DBDUUzgKEu8qWtEdOLKemcKtgysyL3w31zzvCd2n1LIntF4AC7rDU
eWVvCs2aRzh4MaJzqfXbHlxouM6+6qI=
-----END CERTIFICATE-----
Generated at Sun Oct 4 22:49:15 2026 by rpki-client