Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/52215577-a591-3e62-b438-ff08b1bba9ec.roa
File:                     52215577-a591-3e62-b438-ff08b1bba9ec.roa (raw, json)
Hash identifier:          VDOIM790WaxRu4/KnqRhpHF7bgBJ+CRC4Xp39LFezvc=
Subject key identifier:   78:B4:FC:64:D3:46:2E:7E:4C:11:05:A9:B0:CE:48:51:A7:40:58:E5
Certificate issuer:       /CN=209f0328-0af3-4de3-a043-8072346acdf7
Certificate serial:       010D0C9F4328584E2D9F187C08C9F2C62377A790
Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/52215577-a591-3e62-b438-ff08b1bba9ec.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     7782
IP address blocks:        209.193.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:18:7c:08:c9:f2:c6:23:77:a7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=f884ef0c-a3ce-49dd-94ba-8849141ec08c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:36:9e:99:52:08:49:1f:3a:41:1b:c9:f5:17:
                    01:96:fc:48:07:8a:06:cc:17:01:4f:11:af:b3:bf:
                    15:73:a0:e5:fb:53:92:ed:05:ec:03:a7:0d:f1:96:
                    b7:54:84:8c:99:e7:35:9f:54:d3:10:81:68:a6:4f:
                    69:63:49:17:7e:06:6d:fd:38:fe:e8:42:d0:11:df:
                    68:ed:d3:b2:61:3c:f9:6b:a4:6c:43:b0:6c:db:56:
                    7b:d5:38:dd:f9:03:66:ad:fa:2c:47:59:24:1e:eb:
                    9e:85:e0:b8:87:06:a7:fb:73:3c:a0:04:ee:b9:4f:
                    9e:bb:be:45:e4:76:84:85:99:10:a3:57:7d:41:c3:
                    bd:11:9a:98:b2:99:75:30:3c:b8:17:5f:8d:e6:11:
                    a9:36:1d:a8:fb:f3:d5:5c:02:98:ce:9e:eb:e6:01:
                    d1:30:c0:c5:72:9b:72:00:8b:8c:49:32:f8:fc:59:
                    5a:80:08:2f:2a:81:1e:58:83:5f:c4:62:28:66:1f:
                    3a:af:99:b5:10:66:8a:98:c8:b9:05:22:31:75:1d:
                    7f:16:8d:7a:84:fa:50:83:6b:32:0d:4d:78:de:69:
                    24:19:79:ca:d1:3b:fd:44:d8:f0:a8:ff:d4:db:71:
                    38:fa:6d:b3:45:bc:59:83:26:73:ee:2e:9b:ed:be:
                    42:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B4:FC:64:D3:46:2E:7E:4C:11:05:A9:B0:CE:48:51:A7:40:58:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/52215577-a591-3e62-b438-ff08b1bba9ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl

            X509v3 Authority Key Identifier:
                keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.193.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:08:fa:c8:5a:58:d9:6c:de:b2:b3:84:34:a1:99:c8:49:40:
         51:14:50:55:1b:e5:95:ca:c9:04:14:60:23:92:51:42:6e:d0:
         8d:23:38:75:05:8b:01:0d:1c:c0:a9:6d:52:10:c6:7b:d8:52:
         43:85:24:84:2f:3c:34:33:12:05:55:6b:d3:de:22:72:67:31:
         6e:94:66:64:bf:12:d4:7c:c0:ae:c4:8d:d8:e2:b1:d7:e4:85:
         fd:6c:57:ef:61:82:a2:e2:21:71:32:83:54:8b:e5:aa:7f:a3:
         bc:68:d0:a3:2c:65:07:2f:59:40:9a:4b:07:53:5d:ff:7f:fb:
         4c:44:c9:42:71:99:e7:d6:13:ba:ea:f2:d9:e1:26:b7:c4:02:
         00:2c:48:f0:ff:2b:5a:b2:40:34:26:d8:20:e6:db:a1:f2:1c:
         a1:a1:95:85:f8:f3:95:7c:1f:b1:c9:f3:5c:de:5d:7b:bd:57:
         54:3f:cf:68:48:4d:8b:7c:27:41:44:97:91:de:d6:1d:5e:c4:
         2b:06:69:32:93:a9:16:a3:58:1a:cf:33:ec:d5:b8:9f:50:8d:
         e0:21:22:42:18:6d:88:d1:57:83:24:38:87:64:70:81:36:04:
         d5:ed:9a:49:42:8d:03:03:eb:8e:b1:d3:41:5e:7f:0e:dd:9b:
         19:04:ed:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnxh8CMnyxiN3p5AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj
ZGY3MB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk
Zjg4NGVmMGMtYTNjZS00OWRkLTk0YmEtODg0OTE0MWVjMDhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TaemVIISR86QRvJ9RcBlvxIB4oGzBcBTxGv
s78Vc6Dl+1OS7QXsA6cN8Za3VISMmec1n1TTEIFopk9pY0kXfgZt/Tj+6ELQEd9o
7dOyYTz5a6RsQ7Bs21Z71Tjd+QNmrfosR1kkHuueheC4hwan+3M8oATuuU+eu75F
5HaEhZkQo1d9QcO9EZqYspl1MDy4F1+N5hGpNh2o+/PVXAKYzp7r5gHRMMDFcpty
AIuMSTL4/FlagAgvKoEeWINfxGIoZh86r5m1EGaKmMi5BSIxdR1/Fo16hPpQg2sy
DU143mkkGXnK0Tv9RNjwqP/U23E4+m2zRbxZgyZz7i6b7b5CeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHi0/GTTRi5+TBEFqbDOSFGnQFjlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm
MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvNTIyMTU1NzctYTU5MS0z
ZTYyLWI0MzgtZmYwOGIxYmJhOWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw
NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh
Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy
MzQ2YWNkZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0cEAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHwI+shaWNls3rKzhDShmchJQFEUUFUb5ZXKyQQUYCOSUUJu0I0jOHUF
iwENHMCpbVIQxnvYUkOFJIQvPDQzEgVVa9PeInJnMW6UZmS/EtR8wK7Ejdjisdfk
hf1sV+9hgqLiIXEyg1SL5ap/o7xo0KMsZQcvWUCaSwdTXf9/+0xEyUJxmefWE7rq
8tnhJrfEAgAsSPD/K1qyQDQm2CDm26HyHKGhlYX485V8H7HJ81zeXXu9V1Q/z2hI
TYt8J0FEl5He1h1exCsGaTKTqRajWBrPM+zVuJ9QjeAhIkIYbYjRV4MkOIdkcIE2
BNXtmklCjQMD646x00Fefw7dmxkE7bg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:54:35 2026 by rpki-client