Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/c561dabb-9a89-3bf3-9fa1-2db7905fb5d2.roa
File:                     c561dabb-9a89-3bf3-9fa1-2db7905fb5d2.roa (raw, json)
Hash identifier:          3xYCMwjXvsaVY+CBXhA3sSjx747oyIfYHMbUbWImp0c=
Subject key identifier:   3F:3A:4F:CB:C2:FF:03:9E:CB:74:A3:5B:8D:EE:DE:7C:66:A0:FB:73
Certificate issuer:       /CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23
Certificate serial:       010D0C9F4328584E131995546CC9FC208728FAF0
Authority key identifier: CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/c561dabb-9a89-3bf3-9fa1-2db7905fb5d2.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     6079
IP address blocks:        209.251.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:95:54:6c:c9:fc:20:87:28:fa:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=48cfcb54-05a3-4b2b-93b0-ae17813b4750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4c:77:50:0c:84:05:17:ec:8f:59:6b:44:b0:
                    94:e6:7a:f7:c7:24:a9:bf:6d:a0:a5:47:7d:a3:29:
                    0f:7c:2f:16:3d:5d:2a:55:48:4c:d9:eb:1b:5e:bd:
                    47:72:9b:8c:64:31:8e:37:c0:9d:03:9b:55:78:2e:
                    f7:34:e6:be:eb:78:4a:7f:03:10:ec:52:98:38:50:
                    65:8b:a1:11:4e:a6:d2:6e:9e:46:54:64:34:d5:7b:
                    90:2a:dd:b9:ac:5c:b5:d1:72:86:2a:0f:05:1e:35:
                    ae:83:18:10:06:7f:31:98:e6:36:ca:be:fe:38:18:
                    88:e6:49:3f:51:63:19:38:68:13:3b:2b:53:61:47:
                    a2:15:51:45:ff:f6:7f:31:33:51:68:bf:27:ce:0c:
                    75:10:5b:e8:e8:6c:90:7a:9f:ac:20:2e:ea:74:72:
                    df:07:8e:1d:14:08:37:44:ba:3a:0d:c6:51:e8:f0:
                    f0:4d:ff:c8:8b:56:06:bc:06:ea:46:44:ec:44:09:
                    9d:df:0a:58:52:1c:34:46:c9:b5:af:7e:88:80:f6:
                    6d:bd:0d:01:01:25:d3:e9:56:15:90:89:8e:bf:c8:
                    f7:40:28:65:f9:2b:ab:36:5c:20:6e:2e:df:0f:e4:
                    98:bc:02:f1:4d:77:07:dd:50:3c:37:97:cc:3c:a7:
                    02:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3A:4F:CB:C2:FF:03:9E:CB:74:A3:5B:8D:EE:DE:7C:66:A0:FB:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/c561dabb-9a89-3bf3-9fa1-2db7905fb5d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl

            X509v3 Authority Key Identifier:
                keyid:CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.251.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:b3:59:df:2a:e1:99:bf:65:00:dd:8e:d6:dc:fe:c8:42:3d:
         bb:d7:8e:2a:7b:ec:33:af:63:62:fa:66:3c:60:43:67:85:64:
         76:2b:88:d4:8b:ff:e8:91:70:88:2f:e7:4d:0b:56:54:e5:4a:
         f8:5f:a3:73:2b:ba:70:62:e2:e6:6a:8f:be:4f:97:c7:43:82:
         04:70:df:69:a3:37:31:3a:6d:49:ef:8e:f3:de:c7:d3:3a:a6:
         3a:17:aa:8d:b0:74:c5:69:37:ce:c1:9d:c0:a4:96:3c:f3:39:
         4a:63:81:57:e4:22:0f:03:f0:3e:59:66:bd:7a:bb:a4:83:fe:
         0f:00:e8:c4:5d:5c:06:05:ae:80:0a:cb:9e:73:d4:ee:97:0f:
         28:11:0b:3c:b6:89:8e:62:16:8c:5f:59:d7:97:a3:11:44:41:
         5b:f3:1a:ec:d5:bf:30:82:9b:77:ca:5f:90:56:76:3b:60:15:
         a0:f5:bf:3e:5e:b8:f1:36:5f:8a:17:c1:0c:02:6c:87:1d:bd:
         8a:6e:fb:bb:af:cd:50:6c:bc:aa:b4:e4:1b:65:10:e0:f6:47:
         0f:fe:c9:e8:e6:01:c0:7f:69:37:05:94:5d:64:a8:48:8d:82:
         c0:24:6f:42:08:50:47:b7:ee:8b:37:01:41:99:c5:aa:8d:9c:
         c5:ff:96:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4TGZVUbMn8IIco+vAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmJiOTAzYTItNGM4My00YmZhLTk1NzItMzZmYmFmYjg0
YTIzMB4XDTI2MDYwNTIxMDAxMloXDTI2MDkwMzIxMDAxMlowLzEtMCsGA1UEAxMk
NDhjZmNiNTQtMDVhMy00YjJiLTkzYjAtYWUxNzgxM2I0NzUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUx3UAyEBRfsj1lrRLCU5nr3xySpv22gpUd9
oykPfC8WPV0qVUhM2esbXr1HcpuMZDGON8CdA5tVeC73NOa+63hKfwMQ7FKYOFBl
i6ERTqbSbp5GVGQ01XuQKt25rFy10XKGKg8FHjWugxgQBn8xmOY2yr7+OBiI5kk/
UWMZOGgTOytTYUeiFVFF//Z/MTNRaL8nzgx1EFvo6GyQep+sIC7qdHLfB44dFAg3
RLo6DcZR6PDwTf/Ii1YGvAbqRkTsRAmd3wpYUhw0Rsm1r36IgPZtvQ0BASXT6VYV
kImOv8j3QChl+SurNlwgbi7fD+SYvALxTXcH3VA8N5fMPKcCqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD86T8vC/wOey3SjW43u3nxmoPtzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5
MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZiYWZiODRhMjMvYzU2MWRhYmItOWE4OS0z
YmYzLTlmYTEtMmRiNzkwNWZiNWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZmJiOTAzYTItNGM4My00YmZhLTk1
NzItMzZmYmFmYjg0YTIzL2ZiYjkwM2EyLTRjODMtNGJmYS05NTcyLTM2ZmJhZmI4
NGEyMy5jcmwwHwYDVR0jBBgwFoAUzusqfornrD1acybne0mkRJaEkYowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZi
YWZiODRhMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0fv5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIyzWd8q4Zm/ZQDdjtbc/shCPbvXjip77DOvY2L6ZjxgQ2eFZHYriNSL
/+iRcIgv500LVlTlSvhfo3MrunBi4uZqj75Pl8dDggRw32mjNzE6bUnvjvPex9M6
pjoXqo2wdMVpN87BncCkljzzOUpjgVfkIg8D8D5ZZr16u6SD/g8A6MRdXAYFroAK
y55z1O6XDygRCzy2iY5iFoxfWdeXoxFEQVvzGuzVvzCCm3fKX5BWdjtgFaD1vz5e
uPE2X4oXwQwCbIcdvYpu+7uvzVBsvKq05BtlEOD2Rw/+yejmAcB/aTcFlF1kqEiN
gsAkb0IIUEe37os3AUGZxaqNnMX/ljM=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:55:33 2026 by rpki-client