Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/48351c25-8c04-3be2-9d0c-45dc5703d206.roa
File:                     48351c25-8c04-3be2-9d0c-45dc5703d206.roa (raw, json)
Hash identifier:          I/bXtST61muIMVTHeOltj/7nlNCXcznAm/jLLbI+3Hc=
Subject key identifier:   9A:B2:20:0A:B7:5A:BE:4B:3C:EC:05:D7:AE:5A:C8:44:33:A3:9C:53
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584CCD0C928D0C68160656C80740
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/48351c25-8c04-3be2-9d0c-45dc5703d206.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     13414
IP address blocks:        209.237.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:92:8d:0c:68:16:06:56:c8:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=82e193ac-5e3a-450b-8b15-46bd082f933b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a1:6f:de:8d:84:75:be:f3:68:1e:f8:bc:24:
                    b1:ad:80:7a:68:ae:d6:35:09:5f:4e:12:d3:42:1f:
                    9f:f5:fb:9c:98:88:ed:81:b8:89:72:7a:a4:ba:d7:
                    2a:67:69:f7:ee:1e:c1:04:95:84:32:73:76:02:60:
                    5d:3c:c6:71:f4:42:7b:a9:b0:d3:7b:2a:e6:3c:fa:
                    ff:b6:18:a9:17:3a:94:78:3e:c2:3b:e1:91:fe:91:
                    8c:f4:9c:09:02:d1:d2:7d:11:a6:d4:4f:62:ed:60:
                    37:29:4b:f7:9b:13:04:d1:f7:ab:93:8e:d8:26:9b:
                    47:3e:95:41:8f:a9:1d:a7:5d:63:4d:6b:5d:e9:5d:
                    d9:c5:97:87:32:16:8e:c4:47:01:32:22:3b:b0:0d:
                    11:c6:a8:dc:4a:bc:bf:b3:3a:b9:d9:29:da:35:9a:
                    70:fe:80:86:b3:e2:48:19:44:c3:3b:7c:6a:94:56:
                    11:e7:73:f0:06:86:12:34:8a:ee:86:44:9b:a3:66:
                    09:62:bd:7f:f5:8b:b3:e9:17:37:94:38:16:bf:6c:
                    4b:c7:1f:35:df:96:3b:96:87:76:a1:93:74:5d:29:
                    8f:6f:81:2a:0f:db:c0:a2:bf:78:c3:1d:c4:2f:80:
                    08:ee:09:5a:1c:86:61:c5:e7:7a:64:b1:9f:96:a4:
                    31:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B2:20:0A:B7:5A:BE:4B:3C:EC:05:D7:AE:5A:C8:44:33:A3:9C:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/48351c25-8c04-3be2-9d0c-45dc5703d206.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:35:fd:51:e5:e2:78:a4:eb:50:83:b8:e0:59:eb:dc:f3:fe:
         ff:9b:5e:d3:da:1a:a7:bb:d2:79:3d:13:37:c6:9a:60:77:b1:
         39:c6:1f:4f:14:12:61:74:5a:1f:1e:a0:50:dd:3a:5d:8d:4f:
         be:f0:5a:44:b6:6f:74:63:62:13:0a:6f:f9:f2:0d:e2:df:5c:
         a2:df:d5:90:01:58:23:97:17:8a:0c:e6:76:d0:4c:e1:ea:a0:
         84:9c:ec:0b:ae:c5:3d:1f:a0:6b:c0:e1:ac:d9:85:55:28:94:
         c6:4c:8c:da:e5:8e:72:09:67:6d:9d:55:6c:65:50:aa:df:53:
         be:7e:63:55:81:7b:7c:0f:25:f9:c3:32:30:fe:83:cc:79:73:
         b0:eb:b8:b7:02:ef:65:dd:12:2a:ed:58:81:5b:54:a4:07:0c:
         04:f5:cb:81:07:ae:72:5b:43:a7:1b:59:82:c4:c8:41:9e:5b:
         e5:2f:72:86:f2:50:10:a9:43:fb:ce:d9:4f:12:97:ba:e7:bc:
         04:7b:bd:69:22:25:00:aa:b2:bf:eb:77:e0:02:61:39:b5:8d:
         bc:e3:2d:9d:5a:48:9b:c3:a8:7e:96:60:16:c0:13:15:16:28:
         f7:90:29:ab:14:ec:44:dd:3c:95:2f:2c:f6:29:c3:26:d4:47:
         1b:e7:0a:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDJKNDGgWBlbIB0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy
NTc2MB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk
ODJlMTkzYWMtNWUzYS00NTBiLThiMTUtNDZiZDA4MmY5MzNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqFv3o2Edb7zaB74vCSxrYB6aK7WNQlfThLT
Qh+f9fucmIjtgbiJcnqkutcqZ2n37h7BBJWEMnN2AmBdPMZx9EJ7qbDTeyrmPPr/
thipFzqUeD7CO+GR/pGM9JwJAtHSfRGm1E9i7WA3KUv3mxME0ferk47YJptHPpVB
j6kdp11jTWtd6V3ZxZeHMhaOxEcBMiI7sA0RxqjcSry/szq52SnaNZpw/oCGs+JI
GUTDO3xqlFYR53PwBoYSNIruhkSbo2YJYr1/9Yuz6Rc3lDgWv2xLxx8135Y7lod2
oZN0XSmPb4EqD9vAor94wx3EL4AI7glaHIZhxed6ZLGflqQxAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJqyIAq3Wr5LPOwF165ayEQzo5xTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3
YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvNDgzNTFjMjUtOGMwNC0z
YmUyLTlkMGMtNDVkYzU3MDNkMjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3
YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi
MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh
NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3TMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADM1/VHl4nik61CDuOBZ69zz/v+bXtPaGqe70nk9EzfGmmB3sTnGH08U
EmF0Wh8eoFDdOl2NT77wWkS2b3RjYhMKb/nyDeLfXKLf1ZABWCOXF4oM5nbQTOHq
oISc7AuuxT0foGvA4azZhVUolMZMjNrljnIJZ22dVWxlUKrfU75+Y1WBe3wPJfnD
MjD+g8x5c7DruLcC72XdEirtWIFbVKQHDAT1y4EHrnJbQ6cbWYLEyEGeW+Uvcoby
UBCpQ/vO2U8Sl7rnvAR7vWkiJQCqsr/rd+ACYTm1jbzjLZ1aSJvDqH6WYBbAExUW
KPeQKasU7ETdPJUvLPYpwybURxvnCr4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:14:28 2026 by rpki-client