Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/0227bc2a-58f7-3d56-80ba-22ad20d7e9da.roa
File:                     0227bc2a-58f7-3d56-80ba-22ad20d7e9da.roa (raw, json)
Hash identifier:          f9gF0IJfP3ZKyRNT7xbZ3WrMBz6wUQGyseEIKJhAj+8=
Subject key identifier:   8D:9B:ED:B4:C6:EA:69:99:52:E5:19:67:D1:DD:B8:D0:AE:F6:9B:EF
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584D95F0041021725D5D72D34000
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/0227bc2a-58f7-3d56-80ba-22ad20d7e9da.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     33392
IP address blocks:        208.103.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:04:10:21:72:5d:5d:72:d3:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=0f1c394a-292c-45c2-9540-e9dc818d5027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3e:d9:d6:ea:18:6f:98:da:8b:2a:96:12:3c:
                    ff:af:45:cb:0a:5d:48:a0:de:fd:96:a2:9c:73:87:
                    09:e1:6e:90:98:b0:e5:3b:5b:1d:77:b5:75:48:4f:
                    d7:33:ed:c0:21:19:9c:6d:c2:96:8d:48:7d:3b:b7:
                    5a:0a:53:aa:c6:9d:59:ac:7d:97:30:74:b6:da:9c:
                    3a:2d:56:e4:23:d2:0b:27:84:78:c4:f2:13:63:bc:
                    e1:80:9e:3f:e0:96:ed:66:2c:7d:e4:81:79:8b:11:
                    a8:eb:63:5b:5b:93:ab:5b:4e:86:0a:4c:d6:a4:2a:
                    0a:00:d9:4e:14:f5:99:95:5f:7c:c4:68:ef:60:4f:
                    30:04:53:49:8f:46:45:25:09:68:a1:3f:6e:99:16:
                    45:ab:79:69:39:15:cd:37:38:a5:1f:ea:b5:bd:a9:
                    c4:c4:31:e1:5f:20:07:73:32:cc:dd:2a:7d:30:b9:
                    a3:11:1d:54:3e:91:55:ad:09:79:33:c4:fb:38:69:
                    d3:4c:cc:d0:2e:48:41:61:a5:3e:2c:96:84:4d:25:
                    1a:ba:f2:6f:36:99:9b:6d:1d:d8:fd:c5:9e:d4:7b:
                    ce:14:ac:6c:16:8a:1b:1e:d7:d0:6d:10:1e:0d:cb:
                    7a:54:83:f4:31:5d:8c:38:c7:60:dd:44:2d:5c:6f:
                    16:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9B:ED:B4:C6:EA:69:99:52:E5:19:67:D1:DD:B8:D0:AE:F6:9B:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/0227bc2a-58f7-3d56-80ba-22ad20d7e9da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.103.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:e7:2b:45:dd:94:63:e4:3e:b6:69:f9:97:d5:68:bd:47:8a:
         69:cf:c8:97:34:c6:75:82:e7:45:c8:53:58:d0:b0:d7:22:cc:
         a9:6d:f1:40:0e:61:e9:0b:13:4d:44:d7:72:44:3d:92:06:a9:
         31:90:1b:26:48:01:3d:05:c2:9c:08:6f:e2:28:c6:09:bc:f1:
         15:9a:0b:00:0c:51:b0:7f:46:e9:6b:b0:0b:0b:89:3e:89:d0:
         af:b5:27:de:a8:c1:75:e2:2c:e6:a6:7d:14:94:19:62:35:c1:
         54:7b:de:73:bb:4a:30:0a:2c:05:59:b5:56:e2:32:86:26:d2:
         72:43:2d:41:25:8d:16:02:78:9b:63:4e:f7:2b:46:35:2f:62:
         f8:f9:32:ac:72:f0:0f:98:6a:05:d8:00:44:d0:35:50:0f:eb:
         88:39:69:a4:6e:e4:21:d4:fc:f0:2c:ed:ba:30:1d:85:f3:51:
         ac:1d:d0:75:42:86:84:2f:58:f0:f4:1a:65:5d:35:5f:83:48:
         51:74:4e:a3:92:f8:50:64:d9:32:40:9a:4c:1c:0a:8d:8a:89:
         af:f6:34:79:89:d7:9b:da:75:a7:dc:c1:03:85:54:34:62:1a:
         b5:27:0b:41:1b:e3:e3:be:71:f0:63:db:30:20:ed:b7:72:a8:
         04:25:aa:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8AQQIXJdXXLTQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5
Y2ZjMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk
MGYxYzM5NGEtMjkyYy00NWMyLTk1NDAtZTlkYzgxOGQ1MDI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT7Z1uoYb5jaiyqWEjz/r0XLCl1IoN79lqKc
c4cJ4W6QmLDlO1sdd7V1SE/XM+3AIRmcbcKWjUh9O7daClOqxp1ZrH2XMHS22pw6
LVbkI9ILJ4R4xPITY7zhgJ4/4JbtZix95IF5ixGo62NbW5OrW06GCkzWpCoKANlO
FPWZlV98xGjvYE8wBFNJj0ZFJQlooT9umRZFq3lpORXNNzilH+q1vanExDHhXyAH
czLM3Sp9MLmjER1UPpFVrQl5M8T7OGnTTMzQLkhBYaU+LJaETSUauvJvNpmbbR3Y
/cWe1HvOFKxsFoobHtfQbRAeDct6VIP0MV2MOMdg3UQtXG8WYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI2b7bTG6mmZUuUZZ9HduNCu9pvvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl
ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMDIyN2JjMmEtNThmNy0z
ZDU2LTgwYmEtMjJhZDIwZDdlOWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl
MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk
OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1
ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GeVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI7nK0XdlGPkPrZp+ZfVaL1HimnPyJc0xnWC50XIU1jQsNcizKlt8UAO
YekLE01E13JEPZIGqTGQGyZIAT0FwpwIb+Ioxgm88RWaCwAMUbB/RulrsAsLiT6J
0K+1J96owXXiLOamfRSUGWI1wVR73nO7SjAKLAVZtVbiMoYm0nJDLUEljRYCeJtj
TvcrRjUvYvj5Mqxy8A+YagXYAETQNVAP64g5aaRu5CHU/PAs7bowHYXzUawd0HVC
hoQvWPD0GmVdNV+DSFF0TqOS+FBk2TJAmkwcCo2Kia/2NHmJ15vadafcwQOFVDRi
GrUnC0Eb4+O+cfBj2zAg7bdyqAQlqtc=
-----END CERTIFICATE-----
Generated at Wed May 13 04:59:11 2026 by rpki-client