Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/325d9e04-b34c-3cd7-9f94-b8199d126500.roa
File:                     325d9e04-b34c-3cd7-9f94-b8199d126500.roa (raw, json)
Hash identifier:          fwaSe/MIkqYh5qyYlj9NI0JQrb59OOCL2Yl79xSaE44=
Subject key identifier:   96:8F:F7:BA:D1:39:5F:A7:E3:D4:70:AE:4D:B2:19:56:3D:A7:7D:7D
Certificate issuer:       /CN=469597d0-a870-46e2-b0a1-04a71dad0b25
Certificate serial:       010D0C9F4328584EAF7CB90264D111F870CF0240
Authority key identifier: D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/325d9e04-b34c-3cd7-9f94-b8199d126500.roa
Signing time:             Fri 31 Jul 2026 21:26:16 +0000
ROA not before:           Fri 31 Jul 2026 21:26:16 +0000
ROA not after:            Thu 29 Oct 2026 21:26:16 +0000
asID:                     13652
IP address blocks:        108.179.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:7c:b9:02:64:d1:11:f8:70:cf:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469597d0-a870-46e2-b0a1-04a71dad0b25
        Validity
            Not Before: Jul 31 21:26:16 2026 GMT
            Not After : Oct 29 21:26:16 2026 GMT
        Subject: CN=45a9646d-19b6-42fb-8a37-d5e40443e966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f5:a3:2f:8d:b8:6f:da:3b:f7:fe:83:33:62:
                    df:c5:43:bb:72:19:a6:51:0e:24:3e:e1:7c:5b:da:
                    b3:cd:a2:85:9b:09:d5:f2:87:66:51:fe:cf:7c:cd:
                    b4:73:96:4c:10:59:98:44:3c:f7:4b:e4:7a:ac:98:
                    4d:31:4d:a4:33:45:99:9a:67:3e:c5:a2:ab:bc:2e:
                    bd:bc:fd:45:35:df:2e:90:0e:f7:46:5b:5a:a0:c2:
                    c0:38:4b:1c:88:f1:b9:4e:f2:7e:2e:f3:54:c1:8d:
                    b0:19:3c:bd:b1:0e:e2:57:af:96:48:3d:90:45:3a:
                    38:fb:bb:7a:dd:a4:d3:59:34:4d:60:16:4d:7d:00:
                    78:67:4b:cc:01:9f:47:cc:ae:49:14:03:a1:77:63:
                    f4:31:c0:b8:42:a3:2d:45:ca:da:6d:5a:3c:d1:4b:
                    68:83:83:e0:ba:36:81:93:3c:a6:5c:3d:1c:49:db:
                    2b:9d:31:66:43:9e:d7:31:80:62:65:c3:d0:c2:46:
                    4a:78:2f:84:a0:b4:2f:17:23:76:d4:31:5e:dd:8c:
                    9b:c9:f1:3b:45:9e:64:c7:23:6b:1b:34:79:97:7d:
                    02:ff:aa:40:e0:4f:28:27:28:92:85:5a:76:1e:18:
                    bf:15:20:cd:bc:45:95:69:1f:f1:2e:e5:8f:70:22:
                    11:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8F:F7:BA:D1:39:5F:A7:E3:D4:70:AE:4D:B2:19:56:3D:A7:7D:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/325d9e04-b34c-3cd7-9f94-b8199d126500.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl

            X509v3 Authority Key Identifier:
                keyid:D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.179.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:a1:d4:91:51:06:3b:e7:0f:40:fb:b8:82:bb:33:fc:43:e6:
         1c:2f:e0:02:f6:11:1b:19:99:91:92:5c:15:b8:ac:53:1a:da:
         9b:fd:31:42:7d:cf:e9:5f:1e:1f:4b:7b:e0:da:42:47:17:1d:
         04:db:b2:62:cd:26:f2:0f:11:24:85:ca:7b:6b:9e:f9:d6:33:
         fd:93:a7:cf:e0:92:20:83:5f:d6:27:5a:93:df:1c:77:b3:f3:
         d2:2a:db:fe:2b:cc:75:0d:be:cc:f0:de:fa:af:ed:dc:c7:65:
         17:93:66:a9:f7:3d:cf:38:73:c9:79:52:f7:30:3f:a4:2a:e7:
         b6:70:52:9d:b9:46:b0:bd:95:d2:b1:01:6f:6f:fa:7c:c1:36:
         52:04:b9:c9:4b:b1:80:d6:06:3e:77:80:6c:c4:62:55:32:81:
         e5:2e:4a:82:4d:7e:60:70:ea:46:be:c5:5f:87:b1:ef:1a:a3:
         59:c8:76:60:a4:c5:f2:9a:18:e9:04:ee:9a:ab:55:62:e5:57:
         5d:67:22:91:1c:61:5a:25:82:c9:94:a0:aa:0a:65:31:53:4c:
         94:cc:3a:fd:0a:57:a2:a2:de:d8:ed:ac:54:2e:7e:44:78:f6:
         9e:ee:83:fd:04:fc:cf:56:54:73:ca:4e:48:f8:f7:e7:3d:68:
         1a:47:03:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6vfLkCZNER+HDPAkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY5NTk3ZDAtYTg3MC00NmUyLWIwYTEtMDRhNzFkYWQw
YjI1MB4XDTI2MDczMTIxMjYxNloXDTI2MTAyOTIxMjYxNlowLzEtMCsGA1UEAxMk
NDVhOTY0NmQtMTliNi00MmZiLThhMzctZDVlNDA0NDNlOTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/WjL424b9o79/6DM2LfxUO7chmmUQ4kPuF8
W9qzzaKFmwnV8odmUf7PfM20c5ZMEFmYRDz3S+R6rJhNMU2kM0WZmmc+xaKrvC69
vP1FNd8ukA73RltaoMLAOEsciPG5TvJ+LvNUwY2wGTy9sQ7iV6+WSD2QRTo4+7t6
3aTTWTRNYBZNfQB4Z0vMAZ9HzK5JFAOhd2P0McC4QqMtRcrabVo80Utog4PgujaB
kzymXD0cSdsrnTFmQ57XMYBiZcPQwkZKeC+EoLQvFyN21DFe3YybyfE7RZ5kxyNr
GzR5l30C/6pA4E8oJyiShVp2Hhi/FSDNvEWVaR/xLuWPcCIR5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJaP97rROV+n49Rwrk2yGVY9p319MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80Njk1
OTdkMC1hODcwLTQ2ZTItYjBhMS0wNGE3MWRhZDBiMjUvMzI1ZDllMDQtYjM0Yy0z
Y2Q3LTlmOTQtYjgxOTlkMTI2NTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNDY5NTk3ZDAtYTg3MC00NmUyLWIw
YTEtMDRhNzFkYWQwYjI1LzQ2OTU5N2QwLWE4NzAtNDZlMi1iMGExLTA0YTcxZGFk
MGIyNS5jcmwwHwYDVR0jBBgwFoAU2SL0wRQKf5Mk9glTOVzXFf12erQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS80Njk1OTdkMC1hODcwLTQ2ZTItYjBhMS0wNGE3
MWRhZDBiMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLMJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIah1JFRBjvnD0D7uIK7M/xD5hwv4AL2ERsZmZGSXBW4rFMa2pv9MUJ9
z+lfHh9Le+DaQkcXHQTbsmLNJvIPESSFyntrnvnWM/2Tp8/gkiCDX9YnWpPfHHez
89Iq2/4rzHUNvszw3vqv7dzHZReTZqn3Pc84c8l5UvcwP6Qq57ZwUp25RrC9ldKx
AW9v+nzBNlIEuclLsYDWBj53gGzEYlUygeUuSoJNfmBw6ka+xV+Hse8ao1nIdmCk
xfKaGOkE7pqrVWLlV11nIpEcYVolgsmUoKoKZTFTTJTMOv0KV6Ki3tjtrFQufkR4
9p7ug/0E/M9WVHPKTkj49+c9aBpHA4I=
-----END CERTIFICATE-----
Generated at Fri Aug 21 04:18:13 2026 by rpki-client