Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/09ba236f-45b4-4929-abea-f48ac8e4703a/b9448f06-127d-3a62-b55f-f6258ae6bbaa.roa
File:                     b9448f06-127d-3a62-b55f-f6258ae6bbaa.roa (raw, json)
Hash identifier:          ybUjWbe8+Pw2hMIEoRLjvXVhQbpBgiYGMetr2AwmKoY=
Subject key identifier:   F8:1D:80:DF:DD:5B:02:68:C4:F2:E1:8A:FE:07:0B:67:0A:FC:3A:7B
Certificate issuer:       /CN=09ba236f-45b4-4929-abea-f48ac8e4703a
Certificate serial:       010D0C9F4328584E683F5F1A8B58B762B68C4F00
Authority key identifier: 16:E1:69:30:3F:82:29:6B:53:4C:31:63:EC:C9:A5:FD:26:5B:5A:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/09ba236f-45b4-4929-abea-f48ac8e4703a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/09ba236f-45b4-4929-abea-f48ac8e4703a/b9448f06-127d-3a62-b55f-f6258ae6bbaa.roa
Signing time:             Mon 06 Jul 2026 09:00:12 +0000
ROA not before:           Mon 06 Jul 2026 09:00:12 +0000
ROA not after:            Sun 04 Oct 2026 09:00:12 +0000
asID:                     25871
IP address blocks:        208.73.152.0/22 maxlen: 22
                          208.73.152.0/24 maxlen: 24
                          208.73.153.0/24 maxlen: 24
                          208.73.154.0/24 maxlen: 24
                          208.73.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/09ba236f-45b4-4929-abea-f48ac8e4703a/09ba236f-45b4-4929-abea-f48ac8e4703a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/09ba236f-45b4-4929-abea-f48ac8e4703a/09ba236f-45b4-4929-abea-f48ac8e4703a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/09ba236f-45b4-4929-abea-f48ac8e4703a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:68:3f:5f:1a:8b:58:b7:62:b6:8c:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ba236f-45b4-4929-abea-f48ac8e4703a
        Validity
            Not Before: Jul  6 09:00:12 2026 GMT
            Not After : Oct  4 09:00:12 2026 GMT
        Subject: CN=7d1eaee6-7bd6-437f-bfa5-a77259567da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fa:e5:84:3c:c1:56:d0:bb:f6:ef:00:fb:49:
                    21:9c:fc:c4:6a:e6:ff:50:78:a1:40:3e:2d:bf:17:
                    d2:3f:c9:c7:9d:a7:25:d9:6c:35:2e:ec:2b:1f:dc:
                    e2:63:99:74:0a:dd:09:9e:64:7d:1b:4a:77:28:61:
                    44:d0:43:22:66:bc:38:38:bf:dc:64:79:f1:c6:b3:
                    4c:35:16:98:c1:0d:05:54:55:f9:21:17:56:cc:ab:
                    1e:db:53:67:52:4a:ee:d6:20:a5:da:2c:e9:17:95:
                    16:23:bd:c4:44:6e:46:fb:49:23:c9:72:7a:be:0d:
                    09:03:27:56:ac:03:5d:24:14:2d:0b:61:03:27:71:
                    17:02:00:b2:80:0e:0e:84:90:6c:4b:df:4f:bc:d4:
                    41:2b:b4:4e:50:ce:83:60:2a:78:6c:d1:24:d1:8c:
                    56:c4:11:9f:b1:fb:02:b3:bc:80:53:9f:5e:47:1b:
                    8f:02:b4:b3:69:70:40:66:f9:d9:ff:f9:c6:ba:60:
                    32:3a:7c:78:2e:27:67:77:bf:a1:aa:99:3d:05:4c:
                    07:a9:97:7c:a2:28:c6:8e:f3:2a:83:3b:a7:fa:02:
                    f9:55:fe:81:86:72:b0:48:c1:88:52:b1:f4:fc:f3:
                    56:b1:d5:4a:88:80:45:d7:35:4e:20:36:de:67:76:
                    f9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1D:80:DF:DD:5B:02:68:C4:F2:E1:8A:FE:07:0B:67:0A:FC:3A:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/09ba236f-45b4-4929-abea-f48ac8e4703a/b9448f06-127d-3a62-b55f-f6258ae6bbaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/09ba236f-45b4-4929-abea-f48ac8e4703a/09ba236f-45b4-4929-abea-f48ac8e4703a.crl

            X509v3 Authority Key Identifier:
                keyid:16:E1:69:30:3F:82:29:6B:53:4C:31:63:EC:C9:A5:FD:26:5B:5A:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/09ba236f-45b4-4929-abea-f48ac8e4703a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.73.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:3f:9c:d9:72:cc:ec:24:ec:19:d3:01:6c:ff:88:ea:99:f6:
         7b:c9:11:c0:ee:62:aa:6b:e3:63:76:2f:b9:bf:51:b6:9d:ec:
         25:45:20:f3:0d:65:a4:43:5c:50:17:93:e2:ac:af:4b:03:15:
         98:5d:9b:ca:cf:d3:ad:33:80:70:c5:13:d1:e1:99:ad:e3:34:
         7c:d0:f6:58:ad:a7:9c:2f:2f:3d:7c:8d:04:a8:27:f4:77:aa:
         a1:14:08:4b:e9:cb:ec:57:89:c1:fc:75:c1:4e:4d:32:0b:c4:
         68:9d:18:11:85:5b:b9:d1:7b:1d:48:13:4d:04:aa:b5:b7:6a:
         ba:55:02:00:47:19:07:54:ba:01:88:c0:78:79:72:eb:70:a3:
         4d:37:c7:8e:7a:84:4c:c3:b5:0d:0b:0b:f7:77:ae:32:02:68:
         0e:c4:ee:fe:ff:fd:00:e3:5b:53:87:3a:5a:ff:a0:e4:c7:67:
         4a:31:8f:e6:40:3e:32:0c:bb:4b:5c:c6:4f:7b:3c:75:23:c3:
         80:09:53:5c:a4:1c:d7:45:8f:ef:cf:0c:dd:b0:c0:80:fe:25:
         d8:0f:b0:0a:61:fa:62:88:4f:bd:7a:05:00:98:15:51:c9:97:
         c1:42:71:11:90:fd:e4:10:23:1c:59:c8:8d:9c:28:da:29:ae:
         93:49:d2:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5oP18ai1i3YraMTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDliYTIzNmYtNDViNC00OTI5LWFiZWEtZjQ4YWM4ZTQ3
MDNhMB4XDTI2MDcwNjA5MDAxMloXDTI2MTAwNDA5MDAxMlowLzEtMCsGA1UEAxMk
N2QxZWFlZTYtN2JkNi00MzdmLWJmYTUtYTc3MjU5NTY3ZGEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PrlhDzBVtC79u8A+0khnPzEaub/UHihQD4t
vxfSP8nHnacl2Ww1LuwrH9ziY5l0Ct0JnmR9G0p3KGFE0EMiZrw4OL/cZHnxxrNM
NRaYwQ0FVFX5IRdWzKse21NnUkru1iCl2izpF5UWI73ERG5G+0kjyXJ6vg0JAydW
rANdJBQtC2EDJ3EXAgCygA4OhJBsS99PvNRBK7ROUM6DYCp4bNEk0YxWxBGfsfsC
s7yAU59eRxuPArSzaXBAZvnZ//nGumAyOnx4Lidnd7+hqpk9BUwHqZd8oijGjvMq
gzun+gL5Vf6BhnKwSMGIUrH0/PNWsdVKiIBF1zVOIDbeZ3b56wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPgdgN/dWwJoxPLhiv4HC2cK/Dp7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wOWJh
MjM2Zi00NWI0LTQ5MjktYWJlYS1mNDhhYzhlNDcwM2EvYjk0NDhmMDYtMTI3ZC0z
YTYyLWI1NWYtZjYyNThhZTZiYmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMDliYTIzNmYtNDViNC00OTI5LWFi
ZWEtZjQ4YWM4ZTQ3MDNhLzA5YmEyMzZmLTQ1YjQtNDkyOS1hYmVhLWY0OGFjOGU0
NzAzYS5jcmwwHwYDVR0jBBgwFoAUFuFpMD+CKWtTTDFj7Mml/SZbWrYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wOWJhMjM2Zi00NWI0LTQ5MjktYWJlYS1mNDhh
YzhlNDcwM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EmYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAA/nNlyzOwk7BnTAWz/iOqZ9nvJEcDuYqpr42N2L7m/Ubad7CVFIPMN
ZaRDXFAXk+Ksr0sDFZhdm8rP060zgHDFE9Hhma3jNHzQ9litp5wvLz18jQSoJ/R3
qqEUCEvpy+xXicH8dcFOTTILxGidGBGFW7nRex1IE00EqrW3arpVAgBHGQdUugGI
wHh5cutwo003x456hEzDtQ0LC/d3rjICaA7E7v7//QDjW1OHOlr/oOTHZ0oxj+ZA
PjIMu0tcxk97PHUjw4AJU1ykHNdFj+/PDN2wwID+JdgPsAph+mKIT716BQCYFVHJ
l8FCcRGQ/eQQIxxZyI2cKNoprpNJ0ns=
-----END CERTIFICATE-----
Generated at Fri Jul 17 05:26:44 2026 by rpki-client