Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/521f6719-a6d4-3f44-ac2c-aa963efbb005.roa
File:                     521f6719-a6d4-3f44-ac2c-aa963efbb005.roa (raw, json)
Hash identifier:          4aI8osbSyASsYZB4u6xCGILJkEiBzfRdyqCv7pJFDEk=
Subject key identifier:   67:A4:5C:EE:05:7C:F9:E0:4B:E4:EC:23:0F:E8:4D:32:C4:DE:27:3F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA82CD12E712B2FFC5A240
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/521f6719-a6d4-3f44-ac2c-aa963efbb005.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     394996
IP address blocks:        209.51.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:82:cd:12:e7:12:b2:ff:c5:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=d636c3af-e49c-4e8a-8a2c-67dc7441b439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8e:27:d8:de:28:a5:c2:6f:14:f9:48:33:20:
                    28:81:94:9c:85:13:1d:16:e8:4b:ac:23:17:40:bc:
                    89:43:dd:3d:68:8a:35:86:d1:fb:15:3e:80:fd:0d:
                    d8:c1:a5:43:aa:e1:a7:2c:0a:69:89:2f:4e:6c:7c:
                    b1:d8:5d:60:49:26:0b:50:46:93:1b:4c:5b:42:95:
                    03:e8:f5:21:4a:bd:3e:c3:98:b7:39:b3:4a:a2:5e:
                    74:ac:92:1a:fb:99:5f:fb:67:f9:9b:9c:3f:5f:76:
                    45:3c:1b:8c:26:8d:fb:30:53:cc:97:a1:98:bf:98:
                    98:9f:95:17:36:77:19:1b:e1:a6:b7:a5:ca:f8:f6:
                    15:6b:e7:66:20:06:8e:c6:7a:c7:a2:42:1c:4c:84:
                    06:f2:58:3a:12:fa:58:46:5e:4b:cf:5d:c4:c6:38:
                    0f:5b:11:cd:fd:0c:b4:b2:b9:d7:ed:d7:ce:f9:a9:
                    6a:82:95:a0:d7:f0:ea:0f:a0:68:9d:81:a2:34:77:
                    71:05:91:b8:23:60:10:f9:ba:71:86:c8:2d:8a:dd:
                    88:d7:3f:a4:51:1d:7f:6e:77:02:9e:d3:8b:95:ee:
                    b2:9e:9e:24:48:55:cc:0f:3e:e1:44:83:69:e3:27:
                    6c:9a:92:78:09:bf:ef:29:d2:ca:c1:1d:52:fd:34:
                    bc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A4:5C:EE:05:7C:F9:E0:4B:E4:EC:23:0F:E8:4D:32:C4:DE:27:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/521f6719-a6d4-3f44-ac2c-aa963efbb005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.51.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:e3:25:e1:76:5b:99:8f:9e:1d:ca:c9:fd:56:5e:9a:88:c3:
         95:a2:0f:46:b9:16:af:88:d0:2e:90:b3:c4:44:55:23:3a:93:
         d8:27:ec:60:c8:ad:b5:4c:91:a4:83:aa:f0:09:6c:a1:14:c1:
         83:c8:18:b8:36:b4:bc:3c:a9:c1:7a:3b:af:e5:d8:d6:0d:ee:
         ca:e7:1a:cd:e4:8b:da:97:bc:53:62:bd:76:1f:1b:34:c7:e6:
         32:b9:79:f3:21:db:f4:2d:a7:b8:02:82:c4:b7:ec:5d:4d:d6:
         38:8e:64:d6:85:23:4d:1d:97:e2:41:38:d0:7d:68:e2:f6:57:
         c6:c1:48:16:6b:19:8c:68:79:ef:f6:c3:4b:ce:9e:3a:ad:7c:
         5f:52:c8:6e:9b:c2:86:01:f3:03:cb:ab:28:07:30:8a:3f:1d:
         70:10:6a:ef:d4:a3:3a:55:d2:4d:11:ff:8d:91:e3:63:9d:cd:
         3f:cb:0d:0b:2b:ce:5f:14:34:83:ba:cd:d1:ec:09:fe:db:02:
         af:be:5d:a7:e9:c5:77:de:50:de:dd:dd:bd:0b:a2:74:15:09:
         ff:13:0e:4c:a1:94:fa:0f:3b:52:47:14:1c:17:c3:67:81:1e:
         30:9b:91:09:57:c5:0f:2d:92:c8:70:13:02:7b:26:f3:0b:5e:
         12:03:49:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6oLNEucSsv/FokAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
ZDYzNmMzYWYtZTQ5Yy00ZThhLThhMmMtNjdkYzc0NDFiNDM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7o4n2N4opcJvFPlIMyAogZSchRMdFuhLrCMX
QLyJQ909aIo1htH7FT6A/Q3YwaVDquGnLAppiS9ObHyx2F1gSSYLUEaTG0xbQpUD
6PUhSr0+w5i3ObNKol50rJIa+5lf+2f5m5w/X3ZFPBuMJo37MFPMl6GYv5iYn5UX
NncZG+Gmt6XK+PYVa+dmIAaOxnrHokIcTIQG8lg6EvpYRl5Lz13ExjgPWxHN/Qy0
srnX7dfO+alqgpWg1/DqD6BonYGiNHdxBZG4I2AQ+bpxhsgtit2I1z+kUR1/bncC
ntOLle6ynp4kSFXMDz7hRINp4ydsmpJ4Cb/vKdLKwR1S/TS8hwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGekXO4FfPngS+TsIw/oTTLE3ic/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTIxZjY3MTktYTZkNC0z
ZjQ0LWFjMmMtYWE5NjNlZmJiMDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TOqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEvjJeF2W5mPnh3Kyf1WXpqIw5WiD0a5Fq+I0C6Qs8REVSM6k9gn7GDI
rbVMkaSDqvAJbKEUwYPIGLg2tLw8qcF6O6/l2NYN7srnGs3ki9qXvFNivXYfGzTH
5jK5efMh2/Qtp7gCgsS37F1N1jiOZNaFI00dl+JBONB9aOL2V8bBSBZrGYxoee/2
w0vOnjqtfF9SyG6bwoYB8wPLqygHMIo/HXAQau/UozpV0k0R/42R42OdzT/LDQsr
zl8UNIO6zdHsCf7bAq++XafpxXfeUN7d3b0LonQVCf8TDkyhlPoPO1JHFBwXw2eB
HjCbkQlXxQ8tkshwEwJ7JvMLXhIDSV8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:44:17 2026 by rpki-client