Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/d0193209-c102-33bd-94d8-acc37beb2999.roa
File:                     d0193209-c102-33bd-94d8-acc37beb2999.roa (raw, json)
Hash identifier:          bVFlkJU49RVbMsKvOfefVqxjN8RrmwyhwnjkagAUg3w=
Subject key identifier:   88:4E:A7:8C:73:B8:90:43:3D:B4:7A:C5:24:1E:2F:BA:E5:24:A0:51
Certificate issuer:       /CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
Certificate serial:       010D0C9F4328584D07ACFB905640E03C0C7C904D
Authority key identifier: 90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/d0193209-c102-33bd-94d8-acc37beb2999.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     209242
IP address blocks:        216.205.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:fb:90:56:40:e0:3c:0c:7c:90:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=5dd58983-be20-4b7c-8363-244a7edc47a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:01:73:7b:17:23:c5:c5:f6:4f:de:da:0c:dd:
                    4d:44:14:66:d3:16:7c:8f:ef:c5:ca:e0:70:ee:5e:
                    a1:f0:9b:a0:eb:b7:ed:93:6a:df:17:50:1f:d6:f5:
                    f3:a5:bc:e9:c1:b6:e5:41:d4:f5:dd:83:54:d1:ca:
                    47:66:8f:d6:76:e8:33:9e:a3:45:fa:d6:0e:20:5b:
                    58:da:de:65:40:96:cb:0b:d6:69:96:69:4c:c0:67:
                    c5:ff:84:bf:8f:08:5a:c3:fd:7e:7f:95:59:ff:43:
                    56:a7:8b:e7:06:7a:8d:36:82:21:c0:b2:8d:9d:e6:
                    a6:fa:6e:cc:4e:d0:93:34:83:7d:63:dc:30:3b:ed:
                    c5:f1:ce:ab:2b:c7:6a:d9:61:13:6a:d5:06:3f:08:
                    f0:ec:28:08:d9:ab:f0:16:39:47:98:d2:7c:ce:49:
                    9a:69:be:bd:be:1b:bd:d9:6a:eb:06:b7:12:06:74:
                    ef:2b:e1:2f:29:05:b8:da:e2:40:cc:61:13:30:20:
                    d6:cc:f8:48:e2:6e:4a:28:73:2e:b7:f7:ab:0c:a4:
                    30:98:34:46:63:07:5a:bd:59:22:97:21:1f:e2:b1:
                    70:0e:bf:17:58:5e:7e:96:0f:58:fd:23:7e:2c:3a:
                    74:24:93:e6:17:e2:d3:62:85:62:d6:02:04:fd:33:
                    8e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4E:A7:8C:73:B8:90:43:3D:B4:7A:C5:24:1E:2F:BA:E5:24:A0:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/d0193209-c102-33bd-94d8-acc37beb2999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl

            X509v3 Authority Key Identifier:
                keyid:90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.205.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:a3:1b:d0:90:52:30:e3:9b:27:0d:cf:7f:84:40:4e:32:7a:
         24:b7:7f:38:71:2a:ac:1e:b0:50:f9:a1:c8:3a:a6:fb:48:d6:
         99:af:45:84:ae:f8:7f:55:f8:a0:42:3d:b9:3d:7c:ea:e2:9d:
         bf:76:9b:a6:3f:c1:b1:df:ec:28:c3:78:57:0c:90:c9:1a:ca:
         63:e9:ee:68:6e:26:3b:50:b0:ec:b3:c4:eb:94:ee:28:42:51:
         3c:65:d3:6e:64:a7:6c:cc:65:e1:4e:a9:d2:66:34:4a:66:45:
         8f:1c:bb:d2:42:a6:9c:51:d2:5b:11:4e:5a:fb:ae:a4:d2:f2:
         3b:22:40:49:b6:22:29:9c:af:58:64:b1:dd:27:be:1e:bf:73:
         b2:bd:e0:ac:b1:1d:9f:f5:93:24:8c:25:a6:cb:ff:35:40:ed:
         4a:f3:08:0c:c0:dd:a0:13:22:48:f9:28:3e:fe:ea:8f:3b:c6:
         de:0f:61:74:08:a9:79:27:3d:1d:a1:f5:c4:d0:dc:f5:64:f0:
         a7:9d:bc:fd:a8:33:65:6a:33:bb:ad:d6:cb:09:84:74:d9:96:
         78:2c:13:af:50:02:a4:5f:c9:fb:cb:2a:38:02:9d:28:ca:6b:
         50:08:06:65:4a:cb:26:3f:74:2a:5e:a4:cc:42:b1:a8:07:98:
         17:52:65:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrPuQVkDgPAx8kE0wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTNiNjk0OGQtM2VlMS00MTUzLTljNDAtMWNkNzQ2NWJl
YTJiMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk
NWRkNTg5ODMtYmUyMC00YjdjLTgzNjMtMjQ0YTdlZGM0N2EzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAFzexcjxcX2T97aDN1NRBRm0xZ8j+/FyuBw
7l6h8Jug67ftk2rfF1Af1vXzpbzpwbblQdT13YNU0cpHZo/WdugznqNF+tYOIFtY
2t5lQJbLC9ZplmlMwGfF/4S/jwhaw/1+f5VZ/0NWp4vnBnqNNoIhwLKNneam+m7M
TtCTNIN9Y9wwO+3F8c6rK8dq2WETatUGPwjw7CgI2avwFjlHmNJ8zkmaab69vhu9
2WrrBrcSBnTvK+EvKQW42uJAzGETMCDWzPhI4m5KKHMut/erDKQwmDRGYwdavVki
lyEf4rFwDr8XWF5+lg9Y/SN+LDp0JJPmF+LTYoVi1gIE/TOOuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIhOp4xzuJBDPbR6xSQeL7rlJKBRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hM2I2
OTQ4ZC0zZWUxLTQxNTMtOWM0MC0xY2Q3NDY1YmVhMmIvZDAxOTMyMDktYzEwMi0z
M2JkLTk0ZDgtYWNjMzdiZWIyOTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTNiNjk0OGQtM2VlMS00MTUzLTlj
NDAtMWNkNzQ2NWJlYTJiL2EzYjY5NDhkLTNlZTEtNDE1My05YzQwLTFjZDc0NjVi
ZWEyYi5jcmwwHwYDVR0jBBgwFoAUkI1uPag85edr1T1okg9nW6bWPkowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hM2I2OTQ4ZC0zZWUxLTQxNTMtOWM0MC0xY2Q3
NDY1YmVhMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2M00MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJSjG9CQUjDjmycNz3+EQE4yeiS3fzhxKqwesFD5ocg6pvtI1pmvRYSu
+H9V+KBCPbk9fOrinb92m6Y/wbHf7CjDeFcMkMkaymPp7mhuJjtQsOyzxOuU7ihC
UTxl025kp2zMZeFOqdJmNEpmRY8cu9JCppxR0lsRTlr7rqTS8jsiQEm2Iimcr1hk
sd0nvh6/c7K94KyxHZ/1kySMJabL/zVA7UrzCAzA3aATIkj5KD7+6o87xt4PYXQI
qXknPR2h9cTQ3PVk8KedvP2oM2VqM7ut1ssJhHTZlngsE69QAqRfyfvLKjgCnSjK
a1AIBmVKyyY/dCpepMxCsagHmBdSZbo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:17:31 2026 by rpki-client