Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/67e16ef1-e5b8-37e9-bfed-acce6e32d2d4.roa
File:                     67e16ef1-e5b8-37e9-bfed-acce6e32d2d4.roa (raw, json)
Hash identifier:          zm1f1Q68KHxIE9hH8PJ44FMpAMs170207YaftnIuTCY=
Subject key identifier:   BA:80:9F:15:1B:BD:0A:24:30:4D:57:9D:3F:02:6B:89:5A:83:3C:BF
Certificate issuer:       /CN=ba2f27f4-9270-4d20-9b84-034ca573f183
Certificate serial:       010D0C9F4328584DBBA053A9CD3D8C9CFB47B360
Authority key identifier: 67:B2:53:ED:68:85:C3:B6:CD:96:EE:83:4F:31:0C:4D:D6:BA:6C:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/67e16ef1-e5b8-37e9-bfed-acce6e32d2d4.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     397375
IP address blocks:        205.233.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/ba2f27f4-9270-4d20-9b84-034ca573f183.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/ba2f27f4-9270-4d20-9b84-034ca573f183.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:53:a9:cd:3d:8c:9c:fb:47:b3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba2f27f4-9270-4d20-9b84-034ca573f183
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=593bb9eb-82ab-4590-a585-0d96618dded3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:24:ca:fb:1b:f2:06:68:4a:6a:f3:09:ac:4a:
                    2f:78:d1:eb:39:65:14:97:77:be:5b:aa:60:c5:5d:
                    ad:17:91:9e:c1:dc:d6:02:49:7d:a7:b6:7a:7c:61:
                    2d:2b:47:02:86:03:4a:87:fe:e1:d4:b0:eb:b6:21:
                    e1:0e:a3:73:8b:0e:bc:92:1a:dd:a1:66:21:c6:40:
                    9d:0c:e0:67:b6:ed:3b:68:d0:d0:fb:36:a7:68:80:
                    af:34:14:76:2f:9b:f3:19:d2:2e:df:62:ed:30:6d:
                    c6:d6:24:b5:d3:c6:72:ab:4d:03:29:ca:fc:36:12:
                    47:b2:c8:a2:6d:38:4d:28:8d:85:12:26:34:63:fa:
                    52:fb:91:32:86:c2:ea:7a:a8:3b:73:ce:6d:2f:76:
                    26:01:37:68:ba:1f:74:4f:f9:56:3d:6f:e3:93:61:
                    ce:25:0a:05:fa:8a:ad:c7:6f:c7:39:fe:ca:b6:1a:
                    5a:74:ea:b1:a3:07:2a:b8:1b:9b:26:bd:7d:97:d6:
                    96:97:7d:c6:31:d5:b2:28:f1:e3:c0:e2:7a:9a:66:
                    c1:63:7f:95:d1:e9:09:9b:ad:fe:41:81:1a:65:82:
                    92:72:0d:53:dc:1c:cb:9f:4d:04:ba:b3:de:0a:f3:
                    7a:be:70:45:68:d4:55:39:10:d9:5a:4e:a1:ce:f4:
                    26:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:80:9F:15:1B:BD:0A:24:30:4D:57:9D:3F:02:6B:89:5A:83:3C:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/67e16ef1-e5b8-37e9-bfed-acce6e32d2d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/ba2f27f4-9270-4d20-9b84-034ca573f183.crl

            X509v3 Authority Key Identifier:
                keyid:67:B2:53:ED:68:85:C3:B6:CD:96:EE:83:4F:31:0C:4D:D6:BA:6C:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:1e:ea:e6:cb:6b:06:bf:0e:db:de:36:86:1c:9e:f8:8a:00:
         21:f2:9c:f2:25:fa:5c:4e:0f:84:c9:71:7f:f7:b7:a8:f4:21:
         78:3e:f1:bf:d9:59:17:be:e9:36:ed:77:a8:a9:b3:36:53:bd:
         b4:0b:ea:fe:38:e1:c1:ae:ec:d3:7a:bf:64:87:56:f6:3b:e8:
         f9:e2:2e:64:e4:45:84:e8:1e:c3:58:23:4b:56:2d:8a:3b:81:
         c3:d3:cd:65:2a:9c:31:e4:d5:0d:05:81:f0:0a:c1:33:9d:ee:
         5e:be:d9:68:8d:8b:c9:dc:a9:80:40:1e:2e:6c:5e:22:3b:bd:
         42:32:d6:75:18:0c:56:1d:e6:3a:ea:b3:7a:b8:53:4b:47:86:
         d3:e3:8e:d9:89:84:93:fc:4d:22:05:b3:c1:f5:9b:63:2f:2f:
         c9:ec:12:88:46:e0:44:e3:d5:69:a3:e0:cb:f5:22:e3:b1:96:
         7e:13:97:c1:39:90:b9:52:22:fe:cd:dd:19:c4:da:bb:99:fe:
         5c:37:bb:5e:6e:49:d5:1e:3c:92:d4:05:11:6f:f7:db:6c:4c:
         bd:50:d4:81:27:6c:48:ba:bc:8a:1c:9c:aa:61:3b:91:87:01:
         06:43:cc:03:ac:89:73:b2:ae:f8:81:d4:ba:3a:5f:77:09:c0:
         a6:81:dd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:09:47 2026 by rpki-client