Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/9bba60d3-0bdd-3615-9dee-42f9533f7786.roa
File:                     9bba60d3-0bdd-3615-9dee-42f9533f7786.roa (raw, json)
Hash identifier:          DHKGg6tTTEUMdpnBaTtiMn0xCHY/tRNBTgz0xNA+Eqw=
Subject key identifier:   3A:6B:6A:35:68:2C:29:9C:66:01:D5:E2:56:67:6C:21:A4:1B:E7:6E
Certificate issuer:       /CN=ba2a1fed-6973-4607-a297-20f3f241a739
Certificate serial:       010D0C9F4328584DBD05938D276F0E579438FD00
Authority key identifier: 96:BA:9F:DC:AB:CD:D9:CC:C5:C8:ED:6F:0F:30:3D:71:C0:8D:21:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/9bba60d3-0bdd-3615-9dee-42f9533f7786.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        192.207.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:93:8d:27:6f:0e:57:94:38:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba2a1fed-6973-4607-a297-20f3f241a739
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=d44480e8-ea68-4c20-ab7a-1b52fd699b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b0:c3:3b:2f:19:57:c0:68:60:ea:cc:0b:48:
                    a3:b8:4b:89:d3:2c:00:ab:47:15:08:d1:f6:69:95:
                    5e:90:35:1f:0a:08:38:fe:68:44:9b:d6:5a:2c:58:
                    cf:a6:fa:55:be:e1:08:ba:71:11:83:e3:0c:6c:ee:
                    a3:3d:49:3a:2d:91:eb:1a:95:cc:75:37:d1:7c:6a:
                    12:c5:8c:91:39:14:0f:4b:2b:33:31:ab:1a:05:97:
                    e8:4c:40:07:7f:00:6a:29:be:97:ec:93:b8:4d:c9:
                    96:24:b8:f5:8f:2c:28:2c:7b:24:5e:43:e1:be:3c:
                    47:a5:44:0d:14:2d:3f:48:40:08:ad:f1:99:d8:99:
                    2a:bf:33:0b:05:9b:3c:8a:db:e1:84:e9:14:e0:8b:
                    a7:82:ef:f6:da:3b:76:4b:25:60:81:78:28:32:10:
                    39:9b:30:5c:cd:fd:17:1d:1c:7d:c4:7e:cc:3e:db:
                    b2:51:9c:ad:3c:fd:42:d1:39:9e:e7:ce:b5:cb:c5:
                    b2:f8:ec:44:2c:ac:19:e6:30:c6:b0:cb:3c:b2:39:
                    95:71:11:57:ad:b8:4d:16:7c:e0:1c:22:e8:98:bc:
                    f9:f5:9b:37:b4:04:b5:84:eb:2b:b6:7e:c6:5f:88:
                    11:30:80:70:94:c9:06:bc:25:3e:59:72:bb:4c:d0:
                    4d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6B:6A:35:68:2C:29:9C:66:01:D5:E2:56:67:6C:21:A4:1B:E7:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/9bba60d3-0bdd-3615-9dee-42f9533f7786.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.crl

            X509v3 Authority Key Identifier:
                keyid:96:BA:9F:DC:AB:CD:D9:CC:C5:C8:ED:6F:0F:30:3D:71:C0:8D:21:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:9a:75:9b:66:b5:c5:84:93:17:5d:d6:74:e3:dd:59:32:e4:
         41:0c:67:f9:1e:67:f4:ea:cf:e0:12:d5:16:ed:3d:50:d7:8f:
         94:a4:8b:de:7b:b1:aa:45:4a:ef:92:06:da:2b:30:df:00:91:
         bd:18:6b:4b:d6:3d:9e:49:c1:5e:8b:1d:8a:99:1b:ff:e5:13:
         01:48:b4:e4:99:c1:36:a7:33:f8:c5:29:c9:4d:59:b3:7b:3c:
         a5:4a:3d:ae:e1:a3:3b:60:08:54:ec:ce:5e:1e:fd:a2:b8:c3:
         6a:5a:44:9e:a2:ee:7b:0b:bd:64:97:43:48:95:52:9e:cf:f5:
         05:7e:0f:6f:9f:11:1a:0a:78:ba:28:5e:c7:e9:6f:e8:b1:5b:
         7b:57:1f:93:05:23:29:bc:45:3c:e2:16:58:a3:5a:bc:ae:c2:
         3a:d9:4d:91:9a:05:36:eb:74:ea:4e:82:39:cc:50:1e:c6:87:
         00:d2:b7:44:a4:d0:e0:01:3b:19:ff:0a:08:33:1b:a3:15:98:
         4a:a2:93:fb:63:b4:a7:19:da:5b:22:af:59:64:55:b4:a1:1c:
         65:1b:fd:35:e0:1e:52:4a:81:51:73:21:67:d9:5e:56:a0:5c:
         42:4e:c1:98:ca:0c:65:03:40:44:da:fc:b0:85:0e:b7:c7:bb:
         fa:fe:03:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BZONJ28OV5Q4/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmEyYTFmZWQtNjk3My00NjA3LWEyOTctMjBmM2YyNDFh
NzM5MB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk
ZDQ0NDgwZTgtZWE2OC00YzIwLWFiN2EtMWI1MmZkNjk5YjFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbDDOy8ZV8BoYOrMC0ijuEuJ0ywAq0cVCNH2
aZVekDUfCgg4/mhEm9ZaLFjPpvpVvuEIunERg+MMbO6jPUk6LZHrGpXMdTfRfGoS
xYyRORQPSyszMasaBZfoTEAHfwBqKb6X7JO4TcmWJLj1jywoLHskXkPhvjxHpUQN
FC0/SEAIrfGZ2JkqvzMLBZs8itvhhOkU4Iungu/22jt2SyVggXgoMhA5mzBczf0X
HRx9xH7MPtuyUZytPP1C0Tme5861y8Wy+OxELKwZ5jDGsMs8sjmVcRFXrbhNFnzg
HCLomLz59Zs3tAS1hOsrtn7GX4gRMIBwlMkGvCU+WXK7TNBNpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDprajVoLCmcZgHV4lZnbCGkG+duMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iYTJh
MWZlZC02OTczLTQ2MDctYTI5Ny0yMGYzZjI0MWE3MzkvOWJiYTYwZDMtMGJkZC0z
NjE1LTlkZWUtNDJmOTUzM2Y3Nzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmEyYTFmZWQtNjk3My00NjA3LWEy
OTctMjBmM2YyNDFhNzM5L2JhMmExZmVkLTY5NzMtNDYwNy1hMjk3LTIwZjNmMjQx
YTczOS5jcmwwHwYDVR0jBBgwFoAUlrqf3KvN2czFyO1vDzA9ccCNIbYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9iYTJhMWZlZC02OTczLTQ2MDctYTI5Ny0yMGYz
ZjI0MWE3MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwM/uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFqadZtmtcWEkxdd1nTj3Vky5EEMZ/keZ/Tqz+AS1RbtPVDXj5Ski957
sapFSu+SBtorMN8Akb0Ya0vWPZ5JwV6LHYqZG//lEwFItOSZwTanM/jFKclNWbN7
PKVKPa7hoztgCFTszl4e/aK4w2paRJ6i7nsLvWSXQ0iVUp7P9QV+D2+fERoKeLoo
Xsfpb+ixW3tXH5MFIym8RTziFlijWryuwjrZTZGaBTbrdOpOgjnMUB7GhwDSt0Sk
0OABOxn/CggzG6MVmEqik/tjtKcZ2lsir1lkVbShHGUb/TXgHlJKgVFzIWfZXlag
XEJOwZjKDGUDQETa/LCFDrfHu/r+AwY=
-----END CERTIFICATE-----
Generated at Wed May 13 14:51:54 2026 by rpki-client