Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/ba5248ae-4a33-3fab-8df7-45862103195e.roa
File:                     ba5248ae-4a33-3fab-8df7-45862103195e.roa (raw, json)
Hash identifier:          TxkZ6t1fYatWGNr2qNyyLeolnszKnm8q50Lp3V8W5Bc=
Subject key identifier:   69:C0:6B:6F:86:DA:D4:FD:6F:48:DA:C0:80:A8:E5:44:08:14:07:0E
Certificate issuer:       /CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
Certificate serial:       010D0C9F4328584DBBA043586522E90AB17D8E00
Authority key identifier: 4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/ba5248ae-4a33-3fab-8df7-45862103195e.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     7057
IP address blocks:        216.174.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:43:58:65:22:e9:0a:b1:7d:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=2fb44faf-eac2-4d14-938e-535c4dc54302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fe:78:35:8d:93:f9:dd:22:b0:ba:f5:9e:68:
                    0b:1e:66:d1:4a:b8:f8:31:2e:d7:44:f0:17:a1:0e:
                    4d:e8:89:9a:81:83:f3:e2:0d:3d:67:d4:19:71:57:
                    59:97:e7:8f:15:ec:c8:ec:63:03:71:83:37:5a:9b:
                    29:bd:ca:f3:7d:2f:af:82:8b:3c:95:82:36:27:b2:
                    5c:a8:ae:8b:67:9e:e4:2c:56:f9:fe:92:9a:6b:a0:
                    43:27:e8:98:d7:43:7b:59:00:a8:cf:12:07:7b:db:
                    a6:4c:0d:47:66:d9:11:68:e6:41:05:39:4b:79:e9:
                    1c:af:34:41:58:86:a6:52:e7:9f:a6:4f:9f:aa:bb:
                    46:7b:38:b6:85:3d:2f:66:67:9c:c5:45:6c:a6:98:
                    cc:72:50:19:12:9e:ae:c7:e0:3d:6d:7d:68:8b:6e:
                    35:55:bd:98:d2:8b:d3:0c:9c:b8:94:8e:f0:95:cf:
                    fc:82:a8:f4:f5:3e:88:4b:43:50:6c:a2:f5:6c:7b:
                    07:e8:67:e9:ed:ab:40:a0:8b:50:66:5c:5b:5c:bc:
                    1c:f4:be:66:f6:30:bd:be:94:99:dc:4b:59:f8:05:
                    c9:d4:7c:0c:1e:6d:a7:e0:b0:5d:fe:1f:1e:ca:ad:
                    9d:d1:bc:7b:6a:d8:9a:3c:fe:48:e8:fa:6d:f0:72:
                    e8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C0:6B:6F:86:DA:D4:FD:6F:48:DA:C0:80:A8:E5:44:08:14:07:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/ba5248ae-4a33-3fab-8df7-45862103195e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl

            X509v3 Authority Key Identifier:
                keyid:4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.174.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:b8:1a:25:ab:5f:10:7f:66:d9:81:06:37:5c:1a:37:91:08:
         1d:d0:71:78:ec:30:af:e8:a1:c7:48:84:57:59:ab:ff:38:2a:
         e1:fc:05:b5:18:d6:bf:43:9c:3b:9e:6a:3f:12:6b:62:92:54:
         53:77:aa:a3:71:d7:74:6d:cc:d7:5f:62:35:6c:f4:75:8a:78:
         e2:a3:e7:78:54:5e:e4:fe:4b:c1:f6:66:29:be:4e:93:86:92:
         66:ce:6a:5d:bb:e5:34:3c:5e:a1:7f:80:ad:85:c4:2c:df:58:
         55:c1:bb:9e:3a:31:a2:6d:d2:17:3c:25:40:6a:44:98:70:7c:
         58:5f:69:9c:3e:06:1a:4f:23:f7:80:3f:1c:83:25:71:bf:f8:
         cb:57:30:dc:06:89:e4:57:31:c9:ec:e2:0f:36:91:d5:c9:5d:
         a9:ce:c1:d9:9d:a7:b3:24:c7:4b:93:ce:23:75:3c:aa:37:8d:
         4e:e0:14:8e:7b:96:d8:f9:82:03:91:3a:60:40:54:7b:90:f3:
         3f:20:37:ce:bf:ea:44:e8:f1:60:0a:71:ae:a1:54:e6:d0:fc:
         93:b6:31:d8:6e:88:c2:c8:49:d1:36:f6:cb:a3:b5:c7:ee:cb:
         92:85:d9:8e:54:47:57:ca:0e:79:28:bc:2f:2c:22:c7:f7:f5:
         f7:e7:72:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:04:39 2026 by rpki-client