Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13c009bf-1d64-4cb3-a803-ec59ff959975/b9b2c9bf-f9a6-3059-ad61-6fe63163bd6e.roa
File:                     b9b2c9bf-f9a6-3059-ad61-6fe63163bd6e.roa (raw, json)
Hash identifier:          eV8D3XK1WaNKayxNxIkQ399RKvV5XBfa5wC/YGVptmQ=
Subject key identifier:   14:83:32:6A:EB:81:60:0E:C7:C8:69:D2:B8:6C:75:D4:6B:52:AB:0D
Certificate issuer:       /CN=13c009bf-1d64-4cb3-a803-ec59ff959975
Certificate serial:       010D0C9F4328584CED278A5493A64158FA89EC00
Authority key identifier: AC:9C:07:CC:B1:D1:44:FE:41:C1:B9:9C:B8:BA:8F:96:0B:3C:3F:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13c009bf-1d64-4cb3-a803-ec59ff959975.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13c009bf-1d64-4cb3-a803-ec59ff959975/b9b2c9bf-f9a6-3059-ad61-6fe63163bd6e.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     215429
IP address blocks:        172.110.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13c009bf-1d64-4cb3-a803-ec59ff959975/13c009bf-1d64-4cb3-a803-ec59ff959975.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13c009bf-1d64-4cb3-a803-ec59ff959975/13c009bf-1d64-4cb3-a803-ec59ff959975.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13c009bf-1d64-4cb3-a803-ec59ff959975.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:8a:54:93:a6:41:58:fa:89:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13c009bf-1d64-4cb3-a803-ec59ff959975
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=25132cc4-b06e-4e5e-a45c-b0b2ff81e3ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:94:2b:cd:60:f3:ea:cc:2e:a5:49:72:b9:b5:
                    0c:53:8c:3e:c8:bd:8e:b8:ee:94:29:c4:0a:0e:d4:
                    f9:70:5a:4c:77:8b:85:ff:9b:f8:2c:22:20:4f:8c:
                    5e:a1:5d:76:14:f5:46:da:ac:fc:59:86:12:02:9a:
                    e0:c4:9c:ae:e2:80:91:fe:8f:e8:4b:b0:1b:57:3f:
                    99:b5:23:de:22:20:93:61:e2:68:83:3f:91:1b:dc:
                    bd:ee:7e:8f:47:98:26:d6:e7:bf:0f:4d:27:12:67:
                    27:08:63:fb:19:77:88:df:8e:d3:3b:d1:b4:9f:db:
                    da:25:d4:28:ad:6e:1e:1f:40:22:9f:22:d9:f6:10:
                    30:15:aa:ca:a5:b6:a7:ec:32:11:32:3c:4c:97:49:
                    ff:25:68:2e:dc:9f:60:b1:41:8d:40:ac:e8:0e:17:
                    58:ce:06:67:29:aa:19:90:0b:68:b7:52:10:46:22:
                    84:b7:9b:ef:4f:b8:f3:98:fa:66:00:69:91:7f:74:
                    45:fe:9d:4a:99:e3:87:a1:13:1f:f4:31:ac:5f:f4:
                    43:db:08:7a:a0:17:da:6f:04:72:9e:34:55:99:d0:
                    ec:9b:51:49:fc:e1:4b:54:f7:2d:af:f1:d4:0f:0e:
                    68:fa:63:43:d9:c6:aa:32:a6:e9:b6:c7:d1:3e:d1:
                    5c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:83:32:6A:EB:81:60:0E:C7:C8:69:D2:B8:6C:75:D4:6B:52:AB:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13c009bf-1d64-4cb3-a803-ec59ff959975/b9b2c9bf-f9a6-3059-ad61-6fe63163bd6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13c009bf-1d64-4cb3-a803-ec59ff959975/13c009bf-1d64-4cb3-a803-ec59ff959975.crl

            X509v3 Authority Key Identifier:
                keyid:AC:9C:07:CC:B1:D1:44:FE:41:C1:B9:9C:B8:BA:8F:96:0B:3C:3F:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13c009bf-1d64-4cb3-a803-ec59ff959975.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:fc:b1:a3:7e:f2:04:89:20:44:e2:aa:88:97:b9:f2:61:ee:
         b7:53:14:d2:57:d4:a6:73:d5:65:19:c7:d8:36:4e:31:a9:21:
         53:39:0d:c0:04:b0:0f:27:3f:5b:29:3b:b5:f7:da:35:4e:0d:
         89:2f:63:cb:a8:95:90:52:cb:b5:dd:39:66:ab:9f:0b:89:c0:
         5f:de:4e:f4:cf:4f:49:1d:5c:d1:7d:0f:1b:7c:a9:bd:a6:df:
         a5:5f:ba:d8:7d:13:fb:c1:70:5e:73:09:02:30:58:c8:5a:7d:
         32:b6:61:bb:5c:c6:f0:a5:be:ff:ce:ec:4e:1c:60:4d:9b:4f:
         5d:43:22:23:22:db:8e:2c:e2:3b:31:5f:ea:e9:6e:26:b9:b1:
         68:91:03:1d:96:88:3d:c7:82:0f:7a:6c:dc:06:cf:e6:ab:28:
         7d:aa:ef:36:67:f0:1e:e6:0a:8c:45:96:f2:a0:d4:d9:03:d1:
         85:6e:cf:2d:fe:94:41:b8:d8:01:1d:64:a5:2c:a5:fb:9a:b9:
         41:59:7a:76:8e:e4:b4:cf:4b:2a:1c:5b:11:ea:dd:27:4f:1c:
         f1:14:4f:ad:47:d9:20:d4:d9:da:e3:93:db:8f:35:f6:ca:b5:
         8e:be:04:1c:e1:55:05:46:e7:62:8c:bf:66:ac:7a:e8:d3:2a:
         6b:a6:b8:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztJ4pUk6ZBWPqJ7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTNjMDA5YmYtMWQ2NC00Y2IzLWE4MDMtZWM1OWZmOTU5
OTc1MB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk
MjUxMzJjYzQtYjA2ZS00ZTVlLWE0NWMtYjBiMmZmODFlM2FiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JQrzWDz6swupUlyubUMU4w+yL2OuO6UKcQK
DtT5cFpMd4uF/5v4LCIgT4xeoV12FPVG2qz8WYYSAprgxJyu4oCR/o/oS7AbVz+Z
tSPeIiCTYeJogz+RG9y97n6PR5gm1ue/D00nEmcnCGP7GXeI347TO9G0n9vaJdQo
rW4eH0AinyLZ9hAwFarKpban7DIRMjxMl0n/JWgu3J9gsUGNQKzoDhdYzgZnKaoZ
kAtot1IQRiKEt5vvT7jzmPpmAGmRf3RF/p1KmeOHoRMf9DGsX/RD2wh6oBfabwRy
njRVmdDsm1FJ/OFLVPctr/HUDw5o+mND2caqMqbptsfRPtFcjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBSDMmrrgWAOx8hp0rhsddRrUqsNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xM2Mw
MDliZi0xZDY0LTRjYjMtYTgwMy1lYzU5ZmY5NTk5NzUvYjliMmM5YmYtZjlhNi0z
MDU5LWFkNjEtNmZlNjMxNjNiZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTNjMDA5YmYtMWQ2NC00Y2IzLWE4
MDMtZWM1OWZmOTU5OTc1LzEzYzAwOWJmLTFkNjQtNGNiMy1hODAzLWVjNTlmZjk1
OTk3NS5jcmwwHwYDVR0jBBgwFoAUrJwHzLHRRP5BwbmcuLqPlgs8P3owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8xM2MwMDliZi0xZDY0LTRjYjMtYTgwMy1lYzU5
ZmY5NTk5NzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG40MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGL8saN+8gSJIETiqoiXufJh7rdTFNJX1KZz1WUZx9g2TjGpIVM5DcAE
sA8nP1spO7X32jVODYkvY8uolZBSy7XdOWarnwuJwF/eTvTPT0kdXNF9Dxt8qb2m
36Vfuth9E/vBcF5zCQIwWMhafTK2YbtcxvClvv/O7E4cYE2bT11DIiMi244s4jsx
X+rpbia5sWiRAx2WiD3Hgg96bNwGz+arKH2q7zZn8B7mCoxFlvKg1NkD0YVuzy3+
lEG42AEdZKUspfuauUFZenaO5LTPSyocWxHq3SdPHPEUT61H2SDU2drjk9uPNfbK
tY6+BBzhVQVG52KMv2aseujTKmumuIc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:46 2026 by rpki-client