Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/426fe59f-41f8-3a5b-a799-ac686dd0fec3.roa
File:                     426fe59f-41f8-3a5b-a799-ac686dd0fec3.roa (raw, json)
Hash identifier:          FQbsoxodczmL2IVoHfoOwNyha+jcXE6DKOFth9Y410o=
Subject key identifier:   B9:AD:E8:F5:21:DB:3D:B4:B2:42:CD:84:EA:00:0F:A9:2A:FF:75:C0
Certificate issuer:       /CN=ba461ed6-9748-4005-b669-8946003e1ae1
Certificate serial:       010D0C9F4328584D3DFFB5C8DFB1382CC0F07C80
Authority key identifier: 86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/426fe59f-41f8-3a5b-a799-ac686dd0fec3.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     4246
IP address blocks:        128.235.12.0/24 maxlen: 24
                          128.235.13.0/24 maxlen: 24
                          128.235.85.0/24 maxlen: 24
                          128.235.159.0/24 maxlen: 24
                          128.235.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:b5:c8:df:b1:38:2c:c0:f0:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba461ed6-9748-4005-b669-8946003e1ae1
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=4d1da8f5-38a8-47dd-a313-957ed8da6721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:40:2f:7c:ac:aa:b5:a1:43:31:ef:36:fd:43:
                    19:62:0e:89:cd:26:b7:c5:be:9a:c4:43:5c:a2:b1:
                    ba:12:e0:17:44:91:47:13:24:65:df:42:32:e3:b4:
                    37:16:84:bf:7c:4b:b0:ec:c0:ca:90:07:eb:e9:11:
                    3e:a7:45:1d:af:f8:0a:f4:99:5d:91:16:e2:7c:e4:
                    f6:82:c9:ca:3b:87:4c:d9:f0:8b:29:60:15:38:88:
                    26:c3:28:85:d5:b1:36:7a:1c:2f:97:ea:72:c3:2d:
                    bc:08:f1:55:bc:57:9d:fd:fd:43:61:15:29:2d:c1:
                    a5:8b:6f:b9:4e:1a:af:f8:2b:4d:cd:2f:8e:7b:c1:
                    66:d3:6f:a2:1b:b0:0f:5c:35:2c:0f:d9:2c:a1:d9:
                    69:e1:c4:1a:2a:d2:69:af:0b:cd:39:71:02:08:89:
                    f2:4d:f8:0e:85:b2:35:35:2c:29:6a:e6:29:69:94:
                    38:22:67:da:6e:66:77:00:82:ef:f6:fb:a9:f0:97:
                    bc:01:31:a1:a0:91:98:a6:a6:ad:2b:01:58:e2:0f:
                    44:15:cc:8a:e5:26:1b:74:7b:d6:d0:d8:28:06:37:
                    5b:d1:69:6d:bc:d3:53:8d:98:ee:ea:ae:b2:e5:2b:
                    f2:1a:07:bb:4d:38:ff:03:19:5b:dc:57:21:95:cd:
                    f3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AD:E8:F5:21:DB:3D:B4:B2:42:CD:84:EA:00:0F:A9:2A:FF:75:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/426fe59f-41f8-3a5b-a799-ac686dd0fec3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl

            X509v3 Authority Key Identifier:
                keyid:86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.235.12.0/23
                  128.235.85.0/24
                  128.235.159.0/24
                  128.235.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:bc:74:be:a2:d8:39:d6:a5:cc:06:48:22:0c:bd:70:7a:9c:
         fe:9d:21:47:9d:f5:0b:ba:d9:7c:62:02:6c:69:20:70:c3:ea:
         52:df:d4:92:d5:f4:41:b5:e2:6a:7b:c6:e1:cd:d2:95:e5:ac:
         cc:c1:00:14:7c:68:15:7d:02:3c:d8:39:66:e6:2c:3e:92:f4:
         5b:20:6d:e8:32:08:69:a2:0e:04:eb:eb:7b:7d:06:6e:6c:b4:
         a0:52:fd:d8:2b:05:89:15:e1:98:07:af:7f:65:75:f3:2e:16:
         df:ce:63:8c:e9:1e:71:a3:55:44:30:60:f8:fd:bb:3e:20:f1:
         ed:93:50:a7:07:ac:bf:3c:08:d2:ed:2f:12:e2:f4:f8:62:ce:
         fc:57:a2:b9:da:40:d3:55:68:15:7c:9b:84:8f:1f:36:14:ad:
         de:fd:95:2d:3f:dc:65:01:09:54:5d:6f:db:df:17:e9:f8:3f:
         10:b1:5c:bd:6c:95:9d:27:88:cd:e7:7d:2e:24:2c:fa:4c:99:
         66:ef:c7:14:03:d7:51:ce:cb:d9:03:74:4b:77:da:d9:06:ae:
         26:77:5b:10:0f:03:d0:4f:59:7a:4c:7d:94:06:ad:5c:e2:77:
         8c:8b:ef:46:f9:d7:26:cd:e3:1d:d3:67:e3:f4:6c:4e:40:5e:
         c6:a0:8e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:03:16 2026 by rpki-client