Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/edd4aceb-46aa-3f4d-ad78-a2abaf603c79.roa
File:                     edd4aceb-46aa-3f4d-ad78-a2abaf603c79.roa (raw, json)
Hash identifier:          zR8WOFopo5b9oEI9pnAPozmCIJxE9qo32mHqWtvAab0=
Subject key identifier:   78:2B:11:2D:6A:93:0F:6D:71:70:43:70:38:17:F5:9E:12:F1:91:35
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584DEDE094A5123E7D9098A8CBA0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/edd4aceb-46aa-3f4d-ad78-a2abaf603c79.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     15247
IP address blocks:        209.53.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:94:a5:12:3e:7d:90:98:a8:cb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=785f5f79-ec00-4263-be2b-6a7ba27b19e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e6:4f:03:82:13:40:d1:0f:7a:64:d0:40:d9:
                    23:e1:fa:a3:23:2e:d5:d4:b7:8e:ed:1f:66:8d:e1:
                    47:52:34:1f:51:0e:b7:f2:3d:bd:f9:1b:9f:5a:07:
                    ca:59:04:3d:7a:d9:4f:eb:30:19:ad:8e:c2:4e:91:
                    ea:0f:33:d9:8f:76:32:ac:fe:b0:17:26:3e:12:7d:
                    7e:76:df:b0:ad:f7:8e:4f:12:85:2e:45:7f:7c:e8:
                    72:4c:69:f9:52:a2:9a:74:85:e0:22:92:c9:a3:02:
                    f0:57:77:7f:8c:15:fc:46:74:88:42:5e:41:bf:01:
                    5d:53:85:6e:d6:e0:63:a6:ac:b4:d4:8c:02:a3:50:
                    5e:fc:2c:52:be:f2:1a:b4:5c:df:1a:56:8a:5f:25:
                    c3:74:b3:e0:83:cd:bd:06:ed:9b:40:a5:17:42:5c:
                    f3:ca:c5:95:01:07:e0:da:81:6d:b0:fc:6a:57:3f:
                    33:2c:bd:ad:61:6e:f5:47:1d:46:f6:87:7d:a9:82:
                    41:0c:15:bb:94:9a:7e:f6:46:32:39:e4:e2:88:8e:
                    fb:22:ac:9d:42:c7:aa:ac:6f:26:5c:e4:f0:49:d6:
                    fb:ad:20:b0:fa:45:64:1b:68:87:bc:54:ca:72:3f:
                    6a:c2:d5:be:a3:40:0c:89:d5:93:61:6e:c3:9a:ad:
                    10:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2B:11:2D:6A:93:0F:6D:71:70:43:70:38:17:F5:9E:12:F1:91:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/edd4aceb-46aa-3f4d-ad78-a2abaf603c79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.53.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:06:54:6a:c9:e5:02:f2:45:06:5e:bd:10:1f:d6:eb:36:fd:
         1a:5d:75:55:d9:da:e3:1e:96:21:1b:0c:dc:43:d5:ca:89:21:
         ef:56:c6:82:3a:66:a0:10:44:21:3b:05:b4:bb:24:1e:2d:5f:
         ab:ac:7f:8b:a1:dd:0e:79:4c:44:8d:14:69:24:d2:4a:cc:55:
         5b:b5:ca:29:3b:78:52:35:b1:e8:84:c7:b6:68:b9:bc:2a:76:
         9e:01:10:1f:4a:08:ac:32:ce:a2:64:fa:83:8d:6f:cb:69:1d:
         98:56:e4:9d:a3:6b:cc:4d:f2:3f:f1:97:d4:a7:41:bf:62:cb:
         f8:5e:1f:c3:06:b8:02:80:02:ce:44:fc:e4:7b:0b:ce:51:b1:
         53:47:2b:99:19:6a:78:af:b4:36:34:dc:b2:5c:53:f3:60:c7:
         5c:a1:61:3c:9e:38:19:8a:27:c9:dd:62:74:3f:15:f5:d8:1b:
         30:07:bd:a9:ee:bf:2f:30:3a:27:bf:15:a3:75:18:e8:5d:83:
         78:98:24:31:3c:2e:8c:ea:0c:e4:71:6b:18:0b:a6:fd:3f:7d:
         13:ed:d0:77:cd:39:d8:27:fe:2a:ec:a9:cc:78:50:e5:f6:86:
         9d:da:49:4a:91:41:af:5a:1f:c4:17:a8:a2:ff:42:48:09:d2:
         9d:3f:65:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3t4JSlEj59kJioy6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk
Nzg1ZjVmNzktZWMwMC00MjYzLWJlMmItNmE3YmEyN2IxOWUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieZPA4ITQNEPemTQQNkj4fqjIy7V1LeO7R9m
jeFHUjQfUQ638j29+RufWgfKWQQ9etlP6zAZrY7CTpHqDzPZj3YyrP6wFyY+En1+
dt+wrfeOTxKFLkV/fOhyTGn5UqKadIXgIpLJowLwV3d/jBX8RnSIQl5BvwFdU4Vu
1uBjpqy01IwCo1Be/CxSvvIatFzfGlaKXyXDdLPgg829Bu2bQKUXQlzzysWVAQfg
2oFtsPxqVz8zLL2tYW71Rx1G9od9qYJBDBW7lJp+9kYyOeTiiI77IqydQseqrG8m
XOTwSdb7rSCw+kVkG2iHvFTKcj9qwtW+o0AMidWTYW7Dmq0QNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHgrES1qkw9tcXBDcDgX9Z4S8ZE1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZWRkNGFjZWItNDZhYS0z
ZjRkLWFkNzgtYTJhYmFmNjAzYzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TVsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANAGVGrJ5QLyRQZevRAf1us2/RpddVXZ2uMeliEbDNxD1cqJIe9WxoI6
ZqAQRCE7BbS7JB4tX6usf4uh3Q55TESNFGkk0krMVVu1yik7eFI1seiEx7Zoubwq
dp4BEB9KCKwyzqJk+oONb8tpHZhW5J2ja8xN8j/xl9SnQb9iy/heH8MGuAKAAs5E
/OR7C85RsVNHK5kZanivtDY03LJcU/Ngx1yhYTyeOBmKJ8ndYnQ/FfXYGzAHvanu
vy8wOie/FaN1GOhdg3iYJDE8LozqDORxaxgLpv0/fRPt0HfNOdgn/irsqcx4UOX2
hp3aSUqRQa9aH8QXqKL/QkgJ0p0/ZRo=
-----END CERTIFICATE-----
Generated at Fri Jun 12 22:52:17 2026 by rpki-client