Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/0987dcfd-f8fa-3254-8afc-0968ccd1701b.roa
File:                     0987dcfd-f8fa-3254-8afc-0968ccd1701b.roa (raw, json)
Hash identifier:          1lUG5lDdIO28nXJhWw5BFoq9eOniX5P4KD9TJu9V7j0=
Subject key identifier:   FA:67:A4:31:B5:19:BC:98:23:0C:0B:56:CF:D0:49:C6:A2:AF:CF:E6
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584D95F003F7BBCBA6E9E39B6B00
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/0987dcfd-f8fa-3254-8afc-0968ccd1701b.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     33392
IP address blocks:        208.103.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:03:f7:bb:cb:a6:e9:e3:9b:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=7b420d27-31bc-461e-af7d-5de7c25d7220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d2:cc:9a:51:61:41:de:c1:ff:74:8d:9c:2c:
                    c8:ab:fc:d6:28:76:86:68:84:fe:53:c4:8a:88:64:
                    bb:36:2a:51:2e:c9:1c:43:f1:b1:63:bf:49:83:1a:
                    9b:25:a2:fe:d9:65:09:99:b7:32:95:f3:d4:b6:da:
                    53:fd:f3:44:e3:3c:ec:51:01:6b:aa:90:f3:07:9a:
                    db:cb:86:ca:08:c3:b0:a2:93:57:2b:f9:9e:5f:30:
                    db:ed:39:eb:3d:c5:e7:bf:8d:f9:eb:de:de:f8:68:
                    0d:1a:2b:da:78:b9:00:8f:e1:e6:47:eb:8b:33:9d:
                    c6:0d:ba:2e:13:52:eb:c2:fa:ed:5a:95:a9:e1:a0:
                    77:17:45:80:61:b0:ec:34:df:d1:02:70:f8:7b:a1:
                    b9:ef:cf:c5:00:d6:35:4b:48:69:ef:70:4b:5e:08:
                    0d:b1:32:36:30:a2:16:7c:3b:f2:c5:b9:6f:b4:6f:
                    5c:b1:50:49:ff:ba:5a:fa:79:bc:68:fc:b6:03:d4:
                    61:eb:9a:e3:5a:0c:1a:79:a2:2f:89:a5:6f:15:c9:
                    b5:aa:cf:9b:ac:a1:da:6c:1c:b5:a9:7d:8f:db:eb:
                    89:3a:6e:ce:50:2b:ee:cc:74:fc:89:6e:fc:4e:2b:
                    7e:78:74:d7:7f:e1:b7:76:e7:48:78:3c:03:ae:5a:
                    05:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:67:A4:31:B5:19:BC:98:23:0C:0B:56:CF:D0:49:C6:A2:AF:CF:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/0987dcfd-f8fa-3254-8afc-0968ccd1701b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.103.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:e0:dd:c4:a6:4a:81:bc:39:7c:26:5b:b5:3c:d4:13:a3:80:
         3c:9f:be:29:c6:7c:52:5a:6b:cf:26:c8:3f:dc:17:14:49:cf:
         c3:fd:d0:45:79:1d:ed:77:89:74:2a:07:f9:68:c9:4d:8e:ca:
         a5:14:08:7d:1f:32:93:9f:65:2a:43:0f:a3:59:e6:b0:a3:3d:
         9c:30:51:f0:b0:37:f2:f5:99:ed:0d:25:0d:58:8b:b3:d2:bb:
         fc:4c:8c:a4:ef:86:d5:c7:f7:20:89:b8:aa:41:bc:d4:50:12:
         11:08:ea:e1:73:45:f5:4c:b1:78:ef:fa:6b:a9:aa:f2:52:30:
         2c:d2:9d:7c:5d:1e:02:d6:f8:d1:40:a5:17:e7:04:0d:89:b0:
         1c:31:cc:25:97:87:09:76:a1:25:22:a4:bb:a2:d7:df:8b:f7:
         2f:1d:f6:de:6a:1b:17:e4:e3:35:43:a3:32:6c:7b:70:aa:e3:
         e9:ca:28:4e:f1:3b:0d:e3:f1:3c:b1:ee:78:22:38:68:60:21:
         c8:4e:48:3c:15:e3:f6:83:77:7d:02:07:d6:bc:42:9d:80:1e:
         7f:21:22:d4:58:c7:c5:57:be:e1:23:f1:e6:55:4e:6c:93:c6:
         7e:3e:6e:fa:a1:cc:f2:59:7a:86:80:08:2c:d6:99:b7:33:c5:
         f7:93:a1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:46:15 2026 by rpki-client