Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/c32701a6-f0a7-36e2-b3aa-11fe44c77c49.roa
File:                     c32701a6-f0a7-36e2-b3aa-11fe44c77c49.roa (raw, json)
Hash identifier:          O8FZZD76ZnEuYernCjxCpjIinTQIYj3K7A7l4c42bME=
Subject key identifier:   A1:54:51:E1:AE:94:67:05:31:81:A8:B1:D3:16:C6:E9:70:AD:38:E2
Certificate issuer:       /CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
Certificate serial:       010D0C9F4328584F655E6CF650DFD13CA2816980
Authority key identifier: 09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/c32701a6-f0a7-36e2-b3aa-11fe44c77c49.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     16509
IP address blocks:        69.52.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:6c:f6:50:df:d1:3c:a2:81:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=d764f6c7-a9ac-4f88-b387-099e5ca21743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3c:2c:68:4e:9a:4d:e7:11:46:61:e6:23:2a:
                    2a:86:70:a2:e7:8a:21:c0:91:a4:fa:b0:10:0d:30:
                    b2:b0:29:d4:a4:df:31:9c:2c:eb:e1:36:e9:31:3e:
                    21:91:fe:6f:4f:05:31:0f:b4:a1:75:36:10:0f:85:
                    1d:f5:88:6d:83:96:11:cc:ab:21:16:9c:fc:9b:4b:
                    34:d9:82:f5:bf:0d:5f:13:cf:9a:79:7d:62:c7:6e:
                    cf:19:55:b5:cf:a2:8a:47:35:8c:9a:f2:ac:5f:df:
                    0d:90:3c:34:be:ea:68:26:85:6b:2c:89:43:f5:1f:
                    c8:e9:23:99:01:b0:70:55:a5:ee:b7:29:7b:08:4f:
                    7c:6a:6d:81:c8:bd:36:82:94:db:18:a5:f3:2c:94:
                    ba:b3:5a:19:e6:82:c5:5c:55:62:7c:b9:68:5a:16:
                    91:94:40:d1:de:46:1f:f1:7e:c7:53:a5:b0:d4:45:
                    1f:0f:a1:eb:8e:b0:63:53:ea:f2:42:7d:90:f1:30:
                    5b:34:3c:ac:56:6c:ca:34:41:2b:86:90:c4:11:4a:
                    23:e1:4a:51:d6:c7:62:48:37:64:e8:00:30:10:c8:
                    8e:bb:28:f1:9c:dc:86:ab:86:6a:75:5b:f9:e6:68:
                    eb:ab:94:91:fe:61:65:5e:6c:da:38:72:30:8c:e7:
                    82:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:54:51:E1:AE:94:67:05:31:81:A8:B1:D3:16:C6:E9:70:AD:38:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/c32701a6-f0a7-36e2-b3aa-11fe44c77c49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl

            X509v3 Authority Key Identifier:
                keyid:09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.52.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:de:c1:6f:c2:cf:ff:a7:c6:53:a7:6e:80:36:72:1f:47:9c:
         c5:8d:75:94:3f:0b:f8:14:13:07:ea:17:8e:4a:c5:50:1b:a9:
         59:ac:dc:e6:99:f1:82:9d:da:33:a8:72:38:e6:24:22:13:12:
         e9:91:6f:3d:1b:dc:4f:db:fa:bb:73:fe:a0:c9:cd:71:16:41:
         86:4b:91:6d:2b:a4:21:a3:85:45:19:0e:db:74:69:2c:e5:12:
         69:90:16:bf:dc:6c:f5:b9:da:7c:e0:94:2f:57:3d:f4:f5:76:
         97:b9:39:48:ca:52:1e:8b:bc:eb:9a:d3:8d:58:d9:23:25:24:
         0e:a2:ea:0d:16:45:95:eb:bf:68:6c:79:4a:61:db:c6:3d:78:
         ee:01:f3:82:13:91:b7:56:52:55:43:ea:2f:5d:cc:c9:32:7a:
         ad:dc:24:9e:0a:d9:5a:27:6e:da:e0:4b:57:01:fc:12:70:c1:
         cd:d1:2a:f2:fa:6d:e0:72:19:82:94:58:85:68:7b:0f:51:39:
         f9:87:4e:a4:8a:16:78:b9:25:e3:ec:4b:0e:34:92:5f:1d:dd:
         73:6d:79:c3:1e:5b:70:99:c8:fe:59:c2:14:9b:36:66:cf:7d:
         1f:c8:99:45:b5:ba:55:f7:13:72:36:f9:2f:11:01:c2:01:3c:
         24:12:8f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 20:14:13 2026 by rpki-client