Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/d8e20a75-f8f3-3af1-9786-f5ac800a4f94.roa
File:                     d8e20a75-f8f3-3af1-9786-f5ac800a4f94.roa (raw, json)
Hash identifier:          ooh+qt0FD7Djb3hDgyoTInPZElCKhSLnJ4FpSHpH7y4=
Subject key identifier:   0B:2B:63:6B:7C:B8:E2:1C:96:4C:6D:A9:9F:B7:23:82:F6:A7:52:C2
Certificate issuer:       /CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
Certificate serial:       010D0C9F4328584D624A5CF4CFCB2C219965D580
Authority key identifier: 09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/d8e20a75-f8f3-3af1-9786-f5ac800a4f94.roa
Signing time:             Fri 03 Apr 2026 13:00:30 +0000
ROA not before:           Fri 03 Apr 2026 13:00:30 +0000
ROA not after:            Thu 02 Jul 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        69.52.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:4a:5c:f4:cf:cb:2c:21:99:65:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
        Validity
            Not Before: Apr  3 13:00:30 2026 GMT
            Not After : Jul  2 13:00:30 2026 GMT
        Subject: CN=3419a8b7-9780-49a8-ae9a-588ea8f98013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:da:80:ea:9f:3a:93:5e:d5:64:51:28:80:0e:
                    6a:0d:bb:86:57:75:39:7b:31:db:9b:ea:af:83:f8:
                    67:1b:7c:6c:24:49:6d:79:d0:16:0a:7b:e3:9e:b7:
                    89:96:45:73:ff:37:be:35:7a:d3:db:41:c5:a2:0d:
                    c6:50:f9:b7:8b:fd:ff:0f:7c:a3:40:0e:6b:f1:c1:
                    31:8e:d2:ac:66:6f:25:23:ed:93:f9:c2:dc:fa:49:
                    9c:3f:52:30:41:ce:55:2d:c2:18:eb:e1:10:a4:14:
                    9c:19:f2:4d:51:cc:c9:ac:de:f9:ac:ea:b1:da:db:
                    8e:d7:87:3d:82:1a:ad:f1:28:f4:06:57:d5:63:02:
                    72:23:2f:7a:ae:bb:60:14:04:0e:27:45:63:0b:db:
                    63:cb:48:01:5f:2a:32:e3:5f:3d:59:bf:a3:1a:c5:
                    a2:b1:0e:60:2b:45:d8:bc:00:3f:35:30:e3:3d:c3:
                    8d:6e:64:36:d6:15:58:05:f0:7d:f1:da:a9:2f:73:
                    28:9e:88:0a:b7:77:32:0d:4f:02:95:07:2f:12:fb:
                    59:c0:7c:41:ab:9d:65:e1:96:ba:f9:2f:ec:bc:97:
                    84:84:b8:3e:47:a7:8e:19:4a:d0:a8:05:07:80:0f:
                    2f:66:fa:bf:11:ff:9f:68:cc:fc:7e:73:02:e1:2d:
                    83:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2B:63:6B:7C:B8:E2:1C:96:4C:6D:A9:9F:B7:23:82:F6:A7:52:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/d8e20a75-f8f3-3af1-9786-f5ac800a4f94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl

            X509v3 Authority Key Identifier:
                keyid:09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.52.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:ba:83:73:5e:33:ac:f7:98:f2:76:fd:19:ec:f2:4d:1b:37:
         93:a6:67:f3:4a:fc:22:4d:8c:2f:85:37:73:a2:89:72:36:e4:
         fa:9f:ef:43:a5:19:44:b4:4a:db:33:89:0c:07:e3:74:db:c5:
         f2:e4:e0:13:ee:4a:f4:f0:19:dd:b6:e1:16:1a:0f:40:a6:94:
         9e:81:8e:16:e1:47:78:bb:f2:6b:d6:53:bb:71:84:15:e9:32:
         37:46:f0:25:6c:d6:3c:3e:04:98:1a:b9:75:da:a3:b5:f8:bc:
         ce:f4:e7:73:95:d3:a9:68:79:e5:3e:77:a1:22:b2:cc:eb:7f:
         43:be:00:a4:27:90:cf:5d:fb:cd:f4:c3:92:d1:c6:38:d1:6c:
         91:28:ed:8a:f1:ce:fb:96:b7:7d:23:06:18:da:3b:a4:b2:85:
         91:5f:d1:82:37:43:06:53:a9:6e:0c:bb:d8:34:c3:06:ae:1c:
         93:d4:d1:ac:3d:25:c5:04:c4:5b:00:5a:85:d6:f6:84:26:0b:
         2f:37:29:45:93:74:d3:7e:bd:0b:8e:fd:c8:d2:e9:6a:02:45:
         86:e6:51:e9:97:d3:49:b7:b3:a9:8a:20:9f:a4:28:c3:a4:67:
         ea:ab:cc:66:98:74:d8:25:8f:c1:ec:9f:e9:07:be:8b:ae:46:
         fd:15:ac:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1iSlz0z8ssIZll1YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk5N2IxZmItYzFjYy00NWRkLWE3ZWMtMzI3NWE1MjZi
MjYxMB4XDTI2MDQwMzEzMDAzMFoXDTI2MDcwMjEzMDAzMFowLzEtMCsGA1UEAxMk
MzQxOWE4YjctOTc4MC00OWE4LWFlOWEtNTg4ZWE4Zjk4MDEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNqA6p86k17VZFEogA5qDbuGV3U5ezHbm+qv
g/hnG3xsJEltedAWCnvjnreJlkVz/ze+NXrT20HFog3GUPm3i/3/D3yjQA5r8cEx
jtKsZm8lI+2T+cLc+kmcP1IwQc5VLcIY6+EQpBScGfJNUczJrN75rOqx2tuO14c9
ghqt8Sj0BlfVYwJyIy96rrtgFAQOJ0VjC9tjy0gBXyoy4189Wb+jGsWisQ5gK0XY
vAA/NTDjPcONbmQ21hVYBfB98dqpL3MonogKt3cyDU8ClQcvEvtZwHxBq51l4Za6
+S/svJeEhLg+R6eOGUrQqAUHgA8vZvq/Ef+faMz8fnMC4S2D7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAsrY2t8uOIclkxtqZ+3I4L2p1LCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lOTk3
YjFmYi1jMWNjLTQ1ZGQtYTdlYy0zMjc1YTUyNmIyNjEvZDhlMjBhNzUtZjhmMy0z
YWYxLTk3ODYtZjVhYzgwMGE0Zjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTk5N2IxZmItYzFjYy00NWRkLWE3
ZWMtMzI3NWE1MjZiMjYxL2U5OTdiMWZiLWMxY2MtNDVkZC1hN2VjLTMyNzVhNTI2
YjI2MS5jcmwwHwYDVR0jBBgwFoAUCRmfFSCtJze3gSqlW6Hy7/s1W10wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9lOTk3YjFmYi1jMWNjLTQ1ZGQtYTdlYy0zMjc1
YTUyNmIyNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTTWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACS6g3NeM6z3mPJ2/Rns8k0bN5OmZ/NK/CJNjC+FN3OiiXI25Pqf70Ol
GUS0StsziQwH43TbxfLk4BPuSvTwGd224RYaD0CmlJ6BjhbhR3i78mvWU7txhBXp
MjdG8CVs1jw+BJgauXXao7X4vM7053OV06loeeU+d6Eisszrf0O+AKQnkM9d+830
w5LRxjjRbJEo7YrxzvuWt30jBhjaO6SyhZFf0YI3QwZTqW4Mu9g0wwauHJPU0aw9
JcUExFsAWoXW9oQmCy83KUWTdNN+vQuO/cjS6WoCRYbmUemX00m3s6mKIJ+kKMOk
Z+qrzGaYdNglj8Hsn+kHvouuRv0VrIY=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:21:11 2026 by rpki-client