Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/ba3881cb-2f10-3529-8a0a-02382642e417.roa
File:                     ba3881cb-2f10-3529-8a0a-02382642e417.roa (raw, json)
Hash identifier:          2fd603Ev3bFRKxbljbnbi6osk4Ef8wqkvt+7KUv723c=
Subject key identifier:   A9:CA:CF:27:F7:D6:E4:53:0E:28:C4:29:B4:6D:3E:DC:E5:76:30:18
Certificate issuer:       /CN=1f2c87d8-024d-4346-b284-d9791df623fe
Certificate serial:       010D0C9F4328584E6F3A3AEA9677D097305FD140
Authority key identifier: BA:74:4B:3C:63:17:17:CD:C7:38:71:9D:91:B6:85:59:BE:39:1D:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/ba3881cb-2f10-3529-8a0a-02382642e417.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        65.61.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/1f2c87d8-024d-4346-b284-d9791df623fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/1f2c87d8-024d-4346-b284-d9791df623fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:3a:ea:96:77:d0:97:30:5f:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f2c87d8-024d-4346-b284-d9791df623fe
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=052b3519-2d97-421e-a656-362ada1310fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a2:34:81:7b:9c:f6:3e:36:c4:d2:8e:9f:40:
                    8b:b1:53:b1:1b:28:e0:2f:d0:fa:b0:42:ea:da:bc:
                    92:db:ef:ab:1a:60:7d:d8:2a:f6:7a:c4:d6:a9:a2:
                    6f:e1:1f:75:2b:e4:85:2f:d6:b0:43:48:c9:45:bd:
                    e5:23:dd:0c:e7:cd:bb:82:1d:d2:78:bf:68:00:dc:
                    34:08:60:e2:27:a4:c5:f2:9a:d7:f9:88:94:2a:d5:
                    ad:89:74:fc:5b:64:39:2a:b4:9e:22:61:a9:c2:be:
                    ea:d9:cb:fd:f2:1b:09:51:b5:53:b6:4f:d8:e9:3a:
                    25:8b:a3:72:30:f6:c0:ba:3f:99:d3:29:8f:5d:36:
                    55:de:2c:94:48:ff:cf:90:1c:06:e2:ff:a6:bc:b3:
                    94:28:75:9c:92:b8:08:c6:e6:32:80:bd:95:3c:f2:
                    11:67:dc:65:be:0f:2c:eb:5d:24:be:f9:9c:db:0f:
                    2d:4d:f7:b5:a6:4c:0f:91:2b:3b:4e:c8:30:0c:de:
                    a2:df:0a:e4:19:a3:d2:db:1e:ad:dd:ac:0d:e8:71:
                    43:13:bf:56:6a:af:48:e2:b9:39:20:07:76:7c:73:
                    43:29:d9:a7:24:0d:8f:f9:3e:55:be:04:1f:84:82:
                    62:91:99:08:3c:a8:ca:37:56:c8:39:6f:ff:ee:79:
                    aa:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CA:CF:27:F7:D6:E4:53:0E:28:C4:29:B4:6D:3E:DC:E5:76:30:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/ba3881cb-2f10-3529-8a0a-02382642e417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/1f2c87d8-024d-4346-b284-d9791df623fe.crl

            X509v3 Authority Key Identifier:
                keyid:BA:74:4B:3C:63:17:17:CD:C7:38:71:9D:91:B6:85:59:BE:39:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.61.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:fd:25:79:43:81:53:28:cf:4d:df:27:f4:31:2b:96:a1:20:
         62:61:d0:1c:79:19:9b:a4:2c:7b:76:b6:36:a6:fe:6f:f2:f1:
         7c:a4:59:02:d1:32:65:29:fa:36:25:fa:67:57:87:a1:ba:82:
         04:60:1e:fa:bc:0a:f4:39:b9:95:d8:4c:f6:da:20:b1:49:e5:
         6a:89:5b:d2:bb:c6:81:17:37:d8:75:9e:e7:0f:fe:3c:6d:13:
         bb:10:db:e3:03:61:f1:f7:8c:f6:4d:36:d6:19:d3:13:ff:59:
         91:c9:16:47:e0:b6:25:77:3f:18:ad:75:24:e1:2c:89:60:5c:
         9e:42:c7:68:f1:1b:b7:16:1e:09:8c:a9:68:00:87:34:1b:ca:
         5c:f4:11:84:c5:1a:1e:df:e0:1d:53:2b:2c:97:75:08:e2:ab:
         88:e8:3a:d5:1e:19:37:59:61:28:b2:d2:cc:da:7d:aa:50:b1:
         b5:f1:43:bf:3c:14:a3:f2:82:22:59:75:8c:c1:fc:74:a7:f5:
         a1:aa:2c:7d:18:f9:5a:57:9c:71:6a:16:c3:30:42:d9:6f:df:
         bd:76:88:1d:dd:fd:49:76:d2:06:d3:f1:02:f4:b7:63:55:66:
         c2:78:54:86:b8:65:2a:10:49:3f:36:dc:5f:c1:40:f7:86:05:
         4a:f1:ef:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:33:49 2026 by rpki-client