Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ba3718d6-b79b-3161-a4a0-732b49a958d4.roa
File:                     ba3718d6-b79b-3161-a4a0-732b49a958d4.roa (raw, json)
Hash identifier:          PX/q1UgXI4hlDGy6L0sEB06pf7TMmnUazaC1PWVqLB8=
Subject key identifier:   0A:BA:51:0B:41:D4:8D:B1:02:36:CB:B7:3C:B2:D1:E9:41:78:66:E2
Certificate issuer:       /CN=2fd92816-1579-4d40-9111-f86331c3fd8f
Certificate serial:       010D0C9F4328584F6292D92AFD0C4B41EA517280
Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ba3718d6-b79b-3161-a4a0-732b49a958d4.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     14977
IP address blocks:        137.90.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:d9:2a:fd:0c:4b:41:ea:51:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=0684f013-4ea6-444e-a1d3-5bb9c86caa17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:42:d1:c1:33:95:90:5c:3a:3a:bb:18:fc:47:
                    1b:6a:0c:db:ab:ae:b9:44:e1:4f:4b:32:c2:38:09:
                    f1:dd:7f:ef:40:1a:56:89:13:a0:e1:6b:f1:8d:43:
                    36:11:c9:63:53:b3:5c:96:e0:72:71:1b:48:46:9b:
                    7f:71:8e:47:82:75:90:f1:91:8b:77:f7:b4:1b:d4:
                    0b:ec:48:f1:1c:ef:0f:b5:2d:0e:30:af:74:46:3e:
                    90:58:0a:4c:ba:da:6f:76:ad:c5:56:3e:28:ad:ed:
                    e2:67:19:f5:df:0c:a3:18:a6:48:6e:38:ab:e3:d7:
                    0a:40:84:e5:20:0b:3c:14:95:a8:fb:4f:ef:4f:60:
                    1d:c9:2a:f5:61:53:fd:79:06:ea:eb:1d:06:77:fe:
                    b4:b0:51:e5:ed:dd:2b:e7:e6:7c:89:78:ce:91:f2:
                    84:d6:aa:01:19:3a:85:85:ab:ce:67:16:14:de:1f:
                    2b:61:97:11:6b:a2:c1:d6:41:d2:d5:e6:cb:fe:9f:
                    c4:84:da:50:2e:7b:aa:3b:96:93:1a:58:42:68:56:
                    9d:03:c8:2c:38:a9:1e:15:c5:13:bb:47:90:c2:94:
                    2e:9c:63:49:c1:49:fc:a2:e5:ac:14:53:ec:1b:ed:
                    f3:73:f0:72:af:47:d8:e0:cc:5d:7a:dc:45:8d:9f:
                    dd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BA:51:0B:41:D4:8D:B1:02:36:CB:B7:3C:B2:D1:E9:41:78:66:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ba3718d6-b79b-3161-a4a0-732b49a958d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl

            X509v3 Authority Key Identifier:
                keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.90.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:bf:31:cd:0f:36:53:52:00:9b:8a:8e:3a:cf:6a:f8:23:ff:
         69:28:18:2e:2a:68:84:67:13:5e:55:ad:41:cf:4b:a1:4a:96:
         1c:41:43:25:5b:ad:cf:e6:00:47:68:84:2e:b3:f3:30:9b:9a:
         d7:14:03:6e:a9:56:91:a7:8c:ba:e5:ee:2e:fa:29:7b:40:9b:
         4f:f8:72:1a:a0:c0:8d:ce:50:af:31:81:9e:b2:8e:d4:ea:b4:
         c8:77:f7:ae:5e:10:8e:d2:16:4d:10:b7:b4:4d:f1:89:a3:05:
         a8:62:f5:84:b1:34:2e:33:1d:88:c4:d6:86:58:e6:49:e4:89:
         34:39:c0:e7:1c:93:5a:70:fa:46:91:ed:13:21:90:ff:00:b8:
         06:59:c1:0b:86:3a:74:e9:2f:3c:45:2c:8e:8e:a6:ca:15:99:
         4c:fa:6f:d0:11:38:9e:57:5b:a2:da:d3:13:78:66:73:4a:0d:
         4d:05:d3:58:fd:c9:b8:f7:c7:7a:28:5a:e8:80:1b:c9:11:20:
         1f:1b:a3:74:e2:22:c3:68:2c:eb:9d:45:42:02:95:d4:69:bb:
         f6:25:f4:e7:3c:e2:de:3d:78:9b:65:47:67:a2:2b:b2:9a:e6:
         9a:e3:a8:20:48:04:40:10:1f:82:37:3c:e8:58:bf:eb:17:b6:
         de:7e:a9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:23:45 2026 by rpki-client