Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/8949f20e-2961-3a20-b148-4ded15bb50a3.roa
File:                     8949f20e-2961-3a20-b148-4ded15bb50a3.roa (raw, json)
Hash identifier:          48aVERqcRViYBswwh8TKbcwIiaCDx99oUYr8n/PKOeM=
Subject key identifier:   9E:CA:51:C2:9C:EE:CE:88:F0:BD:0A:7B:75:D7:15:05:78:86:C3:0F
Certificate issuer:       /CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
Certificate serial:       010D0C9F4328584E210FDA2BAB759D060F743F00
Authority key identifier: 09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/8949f20e-2961-3a20-b148-4ded15bb50a3.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     16509
IP address blocks:        69.52.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:da:2b:ab:75:9d:06:0f:74:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=34c9bbf6-a0a4-4394-813d-d080dca97c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e6:cf:73:80:77:a5:b3:71:c2:d9:03:db:ac:
                    f1:c4:3b:5c:ab:b8:84:41:e9:23:1c:a8:ab:aa:95:
                    2d:52:dd:4f:c7:b4:4f:76:6a:3e:de:44:f0:cb:73:
                    a8:c8:e3:79:82:1b:b1:16:77:81:9f:42:c0:54:a5:
                    ff:1a:67:04:9a:96:cf:f9:fa:b1:d2:b1:23:f4:e3:
                    1c:f8:f0:15:6e:18:c6:43:e6:aa:ec:bf:28:4e:80:
                    29:e8:31:0d:54:db:58:c9:f5:40:cb:85:64:13:fa:
                    2e:1e:75:18:85:89:34:07:29:3d:36:18:7b:9e:7e:
                    c6:df:fb:fc:af:7b:c9:cd:66:83:59:72:d2:c5:22:
                    69:d1:a0:5f:4d:80:ce:d0:cc:18:fc:4e:fb:97:40:
                    17:21:a6:99:71:40:7c:9a:24:b3:b9:d4:c9:11:4f:
                    dd:06:f9:e5:96:ad:f3:af:f9:1e:6a:2d:5e:59:10:
                    6f:da:60:f3:ce:9f:6e:77:24:02:e7:6c:74:f5:59:
                    e6:b9:6c:f7:34:5b:23:ef:b2:d7:9a:1f:8b:ae:38:
                    7d:a1:a6:da:1c:1e:28:ab:4f:76:f1:9c:48:34:70:
                    0c:e1:59:32:f3:d3:1f:ff:9f:e9:50:8f:f8:f2:53:
                    5a:2f:cc:05:8a:21:c3:ee:43:50:28:ab:81:55:e7:
                    8c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:CA:51:C2:9C:EE:CE:88:F0:BD:0A:7B:75:D7:15:05:78:86:C3:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/8949f20e-2961-3a20-b148-4ded15bb50a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl

            X509v3 Authority Key Identifier:
                keyid:09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.52.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:3c:80:b3:0b:52:70:52:c2:08:77:9c:ad:74:ab:b0:4e:e5:
         c3:41:fe:84:19:ca:34:c4:dc:53:a7:ff:ad:91:52:b6:9e:5f:
         f0:cd:69:11:32:77:d4:b8:ad:63:ee:d0:74:d8:83:72:5d:b6:
         20:09:32:21:56:c8:76:46:10:a6:11:83:93:69:25:fd:e7:46:
         7f:50:4e:f4:20:d3:1b:3a:a0:19:1b:31:aa:bf:7d:47:e4:4e:
         bd:88:95:02:e3:f8:24:f4:71:ad:f8:46:40:27:dd:9d:e6:4a:
         15:4e:c6:b6:2e:c0:11:5e:f4:a3:bf:fc:7e:be:72:9c:90:d7:
         9e:c9:37:f3:d7:7d:10:a8:26:61:b0:32:c9:1e:b7:15:3b:3f:
         8a:39:c4:bc:dd:06:44:2e:9c:ec:0a:a1:dd:18:d7:51:a5:a6:
         b8:7d:45:2a:8e:8a:95:fe:d3:43:f4:43:89:d6:66:0a:6c:82:
         9c:2a:8c:38:d6:9b:ac:77:4d:e6:43:ad:5f:66:c4:de:c3:ce:
         97:d0:d1:5a:64:b3:ea:c6:cd:fa:46:57:23:a5:a7:9f:aa:17:
         5d:d9:e0:3b:31:1d:f3:97:79:6d:fb:d4:7d:63:64:de:be:90:
         29:c8:45:86:85:7e:11:9a:94:41:00:04:ae:31:74:81:0b:b0:
         6e:a0:7f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:55:00 2026 by rpki-client