Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/2d3afa43-f35b-3856-907b-95bf0011d63c.roa
File:                     2d3afa43-f35b-3856-907b-95bf0011d63c.roa (raw, json)
Hash identifier:          laer8Sa2lnSUYWeAgr31fGY1e3glrGGnr9PnkULPoqI=
Subject key identifier:   D1:DD:1C:3F:E6:B2:C6:AF:49:67:A4:F2:50:85:9E:F8:EB:C3:6F:33
Certificate issuer:       /CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
Certificate serial:       010D0C9F4328584D7BA3E658AB47252238336740
Authority key identifier: 09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/2d3afa43-f35b-3856-907b-95bf0011d63c.roa
Signing time:             Sun 12 Apr 2026 14:56:14 +0000
ROA not before:           Sun 12 Apr 2026 14:56:14 +0000
ROA not after:            Sat 11 Jul 2026 14:56:14 +0000
asID:                     8075
IP address blocks:        69.52.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:a3:e6:58:ab:47:25:22:38:33:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
        Validity
            Not Before: Apr 12 14:56:14 2026 GMT
            Not After : Jul 11 14:56:14 2026 GMT
        Subject: CN=9687bfd1-2855-48eb-8fbc-892257936fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:23:36:f6:70:2c:71:3b:f8:93:02:0a:9f:95:
                    bc:77:36:20:6c:c4:7b:f7:7d:28:00:d1:b9:ac:7f:
                    f6:9e:0f:d2:10:1b:18:78:38:ee:13:de:86:53:2d:
                    97:f5:32:ec:b0:7a:f3:c0:4e:7c:71:fc:2a:8d:f7:
                    5c:60:53:fe:1f:58:c8:a9:93:b1:30:59:0e:41:a8:
                    17:b9:31:dd:a8:20:e6:a2:40:95:18:36:51:12:7d:
                    f9:73:b1:73:b2:8f:7d:98:b1:b4:91:58:6e:01:38:
                    aa:56:78:da:b2:8c:3d:1b:9a:16:3e:2f:78:dc:94:
                    bc:38:af:fa:3a:be:2c:6e:8e:a9:7c:70:bf:d7:54:
                    0a:71:c4:5d:f2:37:9f:ac:81:7c:61:12:d4:40:fd:
                    46:7f:30:78:4f:6b:b9:ed:4c:50:81:a8:d2:3f:49:
                    34:e1:c2:4b:a3:50:41:4f:74:f8:7a:c5:10:aa:2c:
                    b9:ab:63:e0:d1:db:52:45:17:7e:c2:e9:28:64:71:
                    8b:15:87:7c:5d:f9:af:81:13:15:7f:39:bd:5a:42:
                    23:a0:3a:d8:42:7c:07:b1:66:5b:45:59:93:df:b8:
                    f4:3a:2b:e4:29:8c:bb:a5:c7:a9:16:2b:60:56:13:
                    ea:e5:62:ad:18:6b:c2:0b:32:b2:a4:b1:1c:f1:7a:
                    da:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DD:1C:3F:E6:B2:C6:AF:49:67:A4:F2:50:85:9E:F8:EB:C3:6F:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/2d3afa43-f35b-3856-907b-95bf0011d63c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl

            X509v3 Authority Key Identifier:
                keyid:09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.52.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:44:16:78:40:d8:95:3e:ab:b2:33:2f:df:0a:c5:85:c7:45:
         f9:bc:54:9b:a3:71:b2:eb:02:6d:37:c3:fe:44:19:52:43:9f:
         ba:ea:d2:6b:31:2c:85:b4:66:08:37:14:d1:ca:01:02:bb:d3:
         15:0d:24:5d:72:3a:e5:ad:31:80:b8:b3:58:3b:61:1e:5b:b6:
         af:2b:23:c7:de:63:c3:6f:29:f6:b5:b1:86:fe:c4:9b:85:97:
         ab:b1:04:fd:07:d8:ae:32:e8:db:1b:5b:67:1d:48:6f:d2:cb:
         c3:35:2d:ea:e5:88:a2:a6:99:2d:e5:92:e8:53:2e:92:24:f9:
         16:8b:ad:e0:bb:8d:af:45:f4:37:42:5d:70:5a:11:e8:e1:df:
         ce:a2:a4:3a:28:a2:8b:88:2d:c8:f2:05:e5:39:e7:0c:e0:3f:
         78:ff:2e:97:e9:ee:12:87:48:33:9d:ff:1b:f4:ba:60:03:be:
         9e:f8:7b:e0:d4:ec:67:77:4c:7c:dc:35:a6:98:05:76:00:d2:
         04:84:fa:2b:23:9f:d4:1a:04:37:47:c4:10:20:7b:49:47:d0:
         5d:3b:4f:d1:91:59:74:d4:2b:90:8a:ec:dc:05:86:0a:61:4e:
         2b:f2:73:21:b2:9f:9a:52:f4:67:da:f0:85:14:1f:bb:1c:76:
         dd:54:c8:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17o+ZYq0clIjgzZ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk5N2IxZmItYzFjYy00NWRkLWE3ZWMtMzI3NWE1MjZi
MjYxMB4XDTI2MDQxMjE0NTYxNFoXDTI2MDcxMTE0NTYxNFowLzEtMCsGA1UEAxMk
OTY4N2JmZDEtMjg1NS00OGViLThmYmMtODkyMjU3OTM2ZmIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCM29nAscTv4kwIKn5W8dzYgbMR7930oANG5
rH/2ng/SEBsYeDjuE96GUy2X9TLssHrzwE58cfwqjfdcYFP+H1jIqZOxMFkOQagX
uTHdqCDmokCVGDZREn35c7Fzso99mLG0kVhuATiqVnjasow9G5oWPi943JS8OK/6
Or4sbo6pfHC/11QKccRd8jefrIF8YRLUQP1GfzB4T2u57UxQgajSP0k04cJLo1BB
T3T4esUQqiy5q2Pg0dtSRRd+wukoZHGLFYd8XfmvgRMVfzm9WkIjoDrYQnwHsWZb
RVmT37j0OivkKYy7pcepFitgVhPq5WKtGGvCCzKypLEc8XraYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNHdHD/mssavSWek8lCFnvjrw28zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lOTk3
YjFmYi1jMWNjLTQ1ZGQtYTdlYy0zMjc1YTUyNmIyNjEvMmQzYWZhNDMtZjM1Yi0z
ODU2LTkwN2ItOTViZjAwMTFkNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTk5N2IxZmItYzFjYy00NWRkLWE3
ZWMtMzI3NWE1MjZiMjYxL2U5OTdiMWZiLWMxY2MtNDVkZC1hN2VjLTMyNzVhNTI2
YjI2MS5jcmwwHwYDVR0jBBgwFoAUCRmfFSCtJze3gSqlW6Hy7/s1W10wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9lOTk3YjFmYi1jMWNjLTQ1ZGQtYTdlYy0zMjc1
YTUyNmIyNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTTgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABNEFnhA2JU+q7IzL98KxYXHRfm8VJujcbLrAm03w/5EGVJDn7rq0msx
LIW0Zgg3FNHKAQK70xUNJF1yOuWtMYC4s1g7YR5btq8rI8feY8NvKfa1sYb+xJuF
l6uxBP0H2K4y6NsbW2cdSG/Sy8M1LerliKKmmS3lkuhTLpIk+RaLreC7ja9F9DdC
XXBaEejh386ipDoooouILcjyBeU55wzgP3j/Lpfp7hKHSDOd/xv0umADvp74e+DU
7Gd3THzcNaaYBXYA0gSE+isjn9QaBDdHxBAge0lH0F07T9GRWXTUK5CK7NwFhgph
TivycyGyn5pS9Gfa8IUUH7scdt1UyBI=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:30:48 2026 by rpki-client