Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/426fe59f-41f8-3a5b-a799-ac686dd0fec3.roa
File:                     426fe59f-41f8-3a5b-a799-ac686dd0fec3.roa (raw, json)
Hash identifier:          Oh52mlmLGG4d7j1A0x70lqiHhCna4yJAV32yqylRC4I=
Subject key identifier:   E7:86:ED:4B:3E:74:8E:C9:F0:7B:5A:B6:60:87:6E:8A:A1:76:1B:50
Certificate issuer:       /CN=ba461ed6-9748-4005-b669-8946003e1ae1
Certificate serial:       010D0C9F4328584B7F52157A924BEA9D08285AC0
Authority key identifier: 86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/426fe59f-41f8-3a5b-a799-ac686dd0fec3.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     4246
IP address blocks:        128.235.12.0/24 maxlen: 24
                          128.235.13.0/24 maxlen: 24
                          128.235.85.0/24 maxlen: 24
                          128.235.159.0/24 maxlen: 24
                          128.235.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:15:7a:92:4b:ea:9d:08:28:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba461ed6-9748-4005-b669-8946003e1ae1
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=9247d205-4856-4c72-ace4-b0dd4b407787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:93:84:b9:d5:a1:48:28:59:55:ae:87:ce:a5:
                    ee:1e:04:02:07:fb:e7:37:fc:c1:2b:7c:62:35:65:
                    38:93:c2:a1:01:3c:58:0d:a1:6f:6b:b0:3d:ce:2c:
                    04:2f:ea:4e:03:c8:89:b4:31:8a:a3:9f:72:00:20:
                    7f:cd:2a:b8:f6:43:dc:b9:6d:77:dc:13:18:95:97:
                    f2:e4:02:e9:78:10:06:1e:ca:12:6e:eb:3d:ff:50:
                    10:fa:e6:5a:75:66:34:5b:dc:cd:54:7b:49:57:50:
                    a8:31:79:c7:f9:4c:c7:ae:a0:45:57:0d:88:2d:86:
                    57:6f:13:10:c1:0a:d1:b5:d7:29:21:94:37:dc:ca:
                    71:15:23:96:6c:d4:0d:fe:50:55:20:0f:9f:3e:08:
                    a4:8c:0c:a2:69:75:10:fb:63:e8:5d:33:d6:13:03:
                    ce:e6:d1:52:bb:32:6f:ad:d9:aa:90:02:59:58:9f:
                    40:b8:ed:a1:8f:1f:5d:78:82:15:8f:3b:55:68:7c:
                    5f:c1:ec:4c:60:dd:1b:10:7a:80:68:ca:40:0e:22:
                    95:ab:83:bb:81:9a:e1:ba:79:f7:5b:14:3b:64:ed:
                    86:e2:8b:1b:d3:33:a1:9f:2f:ca:93:95:85:32:86:
                    f5:d7:d4:39:2f:76:8b:ce:1d:f8:25:b7:ce:c5:16:
                    05:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:86:ED:4B:3E:74:8E:C9:F0:7B:5A:B6:60:87:6E:8A:A1:76:1B:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/426fe59f-41f8-3a5b-a799-ac686dd0fec3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl

            X509v3 Authority Key Identifier:
                keyid:86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.235.12.0/23
                  128.235.85.0/24
                  128.235.159.0/24
                  128.235.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:8e:ce:41:50:ed:a5:91:14:56:e0:6a:74:72:ce:6f:81:b6:
         56:90:2c:ed:0e:b2:16:41:cd:5f:4c:5c:e3:28:97:67:03:3d:
         4a:d0:2a:26:1e:cb:41:fa:88:66:83:5f:d8:3b:2d:11:9b:55:
         5a:23:53:66:ae:63:04:54:ff:70:0b:31:36:4e:83:a6:5b:1a:
         72:e2:b5:3a:fd:1e:70:9a:f7:08:b8:86:20:58:cc:d9:f8:b5:
         29:06:a5:fa:a4:55:ca:7e:16:1b:9c:21:1f:2d:1f:fb:b2:06:
         e5:74:a0:15:a9:02:93:52:e4:85:8b:08:09:97:3e:4f:c5:6e:
         1e:d2:62:9b:ca:8b:8c:5b:e7:4e:ba:3f:55:14:f4:f3:60:ec:
         ce:f9:15:a1:72:dc:82:5f:dc:70:bb:a1:31:59:5a:6e:7b:18:
         3a:73:30:79:bf:a6:ed:9e:19:cf:6e:f5:c0:a6:6f:4d:20:0a:
         2f:97:59:4d:21:3b:08:c7:22:5d:81:b7:b4:9d:8e:dd:01:7b:
         d0:c0:60:c5:6e:e6:71:a5:98:bd:11:32:48:2b:87:b8:10:5f:
         18:1b:f7:89:b1:f9:89:37:d6:07:a8:41:61:8e:1d:d9:ee:52:
         0c:ff:f3:84:e7:81:5f:ab:c1:15:fe:3a:1c:cf:11:5e:9a:7b:
         26:cd:a3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:40:14 2025 by rpki-client