Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/47e6af54-5f2a-376c-a385-f76fdc6f5b07.roa
File:                     47e6af54-5f2a-376c-a385-f76fdc6f5b07.roa (raw, json)
Hash identifier:          YXohtzlQ8MgdAuBes+g90Vune6vE33UcbKP472sCprI=
Subject key identifier:   68:3C:0A:76:98:A7:88:C6:1D:1E:5B:AE:29:9E:1F:46:D0:54:6C:5B
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584CCD0C95907FD67B1797D5EC00
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/47e6af54-5f2a-376c-a385-f76fdc6f5b07.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     271
IP address blocks:        209.87.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:95:90:7f:d6:7b:17:97:d5:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=2b82b78e-1976-4da8-b5e9-b44fe2dc4ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c8:47:b4:55:21:49:fb:74:a8:3d:fd:2f:38:
                    1c:6a:a9:a7:b8:81:13:14:ae:18:5e:81:4c:53:91:
                    a7:8e:9a:1b:82:71:04:34:02:ef:51:4b:a0:59:b0:
                    9e:19:cc:35:e6:44:8f:26:3e:fa:cf:02:a4:b4:37:
                    3f:05:f9:48:fd:67:1a:9c:fd:e2:d4:8b:5f:54:f1:
                    93:f8:d4:46:1d:09:7e:a5:61:c2:db:d6:3e:2b:45:
                    b1:e9:ab:f6:1f:c1:03:8a:e0:a0:3f:b7:d5:51:38:
                    92:d2:1b:83:ff:f0:87:4a:a2:b6:40:79:e7:2d:5f:
                    92:eb:29:50:77:02:0f:42:61:1f:53:60:61:8f:a5:
                    b4:d9:06:00:d1:63:d1:37:a7:41:22:47:86:c3:ed:
                    19:83:d1:84:66:4d:df:d3:a0:f9:da:89:1c:dc:52:
                    87:1e:17:67:ce:e5:7f:d7:9c:25:4c:12:3b:43:85:
                    ac:82:98:78:c7:f5:39:ec:63:99:79:db:9a:4e:a7:
                    2c:fc:d6:6d:00:e7:6f:f0:de:ac:6a:df:a9:a9:4d:
                    f9:96:02:f1:cd:fc:63:dd:e1:de:3b:38:10:f7:cb:
                    7b:43:6e:8c:6c:8c:f3:a7:cd:7b:28:ca:2f:fc:11:
                    6c:1a:b0:3b:3b:a9:a0:9f:68:fc:04:81:8c:37:a9:
                    f7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3C:0A:76:98:A7:88:C6:1D:1E:5B:AE:29:9E:1F:46:D0:54:6C:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/47e6af54-5f2a-376c-a385-f76fdc6f5b07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:dc:e6:d3:d5:e4:5c:73:b8:b3:d4:48:ec:9e:80:84:f1:0b:
         a6:02:5d:0d:08:c6:56:c7:c2:75:f1:e0:fa:a2:37:a1:a5:ac:
         9b:84:62:e7:46:b5:94:8e:3e:71:60:e6:9f:c1:8c:77:c2:bb:
         74:59:ae:8e:c7:dc:80:a2:62:50:a2:75:a3:d6:cd:d0:61:70:
         93:86:b7:dc:b6:c3:7c:da:fa:a9:12:76:83:0b:bb:fa:fe:5b:
         c9:42:81:42:ac:1d:5b:22:5b:7d:ba:e4:c5:29:b9:2b:ae:dc:
         84:ec:d5:55:04:25:b1:62:c9:2e:2a:7f:7b:7e:db:b0:16:c1:
         c6:ac:16:fd:0b:02:d1:82:be:82:56:97:23:b1:74:bd:ac:41:
         d6:d6:d2:aa:5a:36:37:6a:c0:60:33:05:c9:6a:d5:ab:4f:a9:
         b8:90:89:7f:d9:69:9a:59:26:77:71:43:ea:34:52:d6:3d:23:
         ed:87:23:b4:a3:d7:53:ff:ca:b7:ae:94:1e:1a:de:3e:45:a3:
         ad:71:6b:5f:05:cc:66:93:33:94:5d:fd:68:9a:d9:68:c0:93:
         1a:fc:6d:83:4c:ac:a6:1c:f5:85:fc:66:9c:e0:6d:27:d2:d8:
         d4:d6:0c:08:28:60:8a:54:e4:d0:92:a9:33:aa:66:6c:30:4e:
         b8:13:7a:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDJWQf9Z7F5fV7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk
MmI4MmI3OGUtMTk3Ni00ZGE4LWI1ZTktYjQ0ZmUyZGM0YWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8hHtFUhSft0qD39LzgcaqmnuIETFK4YXoFM
U5GnjpobgnEENALvUUugWbCeGcw15kSPJj76zwKktDc/BflI/WcanP3i1ItfVPGT
+NRGHQl+pWHC29Y+K0Wx6av2H8EDiuCgP7fVUTiS0huD//CHSqK2QHnnLV+S6ylQ
dwIPQmEfU2Bhj6W02QYA0WPRN6dBIkeGw+0Zg9GEZk3f06D52okc3FKHHhdnzuV/
15wlTBI7Q4Wsgph4x/U57GOZeduaTqcs/NZtAOdv8N6sat+pqU35lgLxzfxj3eHe
OzgQ98t7Q26MbIzzp817KMov/BFsGrA7O6mgn2j8BIGMN6n39wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGg8CnaYp4jGHR5brimeH0bQVGxbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNDdlNmFmNTQtNWYyYS0z
NzZjLWEzODUtZjc2ZmRjNmY1YjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VcAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIbc5tPV5FxzuLPUSOyegITxC6YCXQ0IxlbHwnXx4PqiN6GlrJuEYudG
tZSOPnFg5p/BjHfCu3RZro7H3ICiYlCidaPWzdBhcJOGt9y2w3za+qkSdoMLu/r+
W8lCgUKsHVsiW3265MUpuSuu3ITs1VUEJbFiyS4qf3t+27AWwcasFv0LAtGCvoJW
lyOxdL2sQdbW0qpaNjdqwGAzBclq1atPqbiQiX/ZaZpZJndxQ+o0UtY9I+2HI7Sj
11P/yreulB4a3j5Fo61xa18FzGaTM5Rd/Wia2WjAkxr8bYNMrKYc9YX8ZpzgbSfS
2NTWDAgoYIpU5NCSqTOqZmwwTrgTetI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:55:42 2026 by rpki-client