Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/c9f84ebb-eb90-3b1e-a3a6-9d95540ce8df.roa
File:                     c9f84ebb-eb90-3b1e-a3a6-9d95540ce8df.roa (raw, json)
Hash identifier:          hMXkfYq0sY04UlI310i6mLi8wBq73yQ7jZFSQLTkiKk=
Subject key identifier:   22:27:72:D6:D2:FC:C9:E2:3C:51:1A:B6:B1:8B:A9:CC:34:B3:EF:E1
Certificate issuer:       /CN=ba2a1fed-6973-4607-a297-20f3f241a739
Certificate serial:       010D0C9F4328584DBD05939E7E0FC2305A78F600
Authority key identifier: 96:BA:9F:DC:AB:CD:D9:CC:C5:C8:ED:6F:0F:30:3D:71:C0:8D:21:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/c9f84ebb-eb90-3b1e-a3a6-9d95540ce8df.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        192.207.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:93:9e:7e:0f:c2:30:5a:78:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba2a1fed-6973-4607-a297-20f3f241a739
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=8e00b8fb-cd9b-4f7b-b054-8becc1e5f815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:68:0f:75:cf:c3:98:3d:fc:df:29:75:84:0f:
                    62:a8:dc:3f:d3:ee:7c:24:7a:01:51:a9:0b:6d:37:
                    5a:11:0a:39:a7:66:7a:18:4a:27:30:2a:5c:dd:1f:
                    9c:92:3f:a4:db:d0:01:41:8c:1b:fa:62:e4:c3:02:
                    25:16:34:14:5c:74:88:32:a3:ba:1e:9f:50:24:9e:
                    db:25:9b:3d:19:22:e6:8c:9b:9f:03:ed:5c:5c:ae:
                    7b:ea:7a:5e:e3:f6:81:58:df:ee:29:9a:91:fd:75:
                    0c:57:b6:4b:82:b2:ed:79:07:06:bf:7e:15:24:24:
                    03:0d:e8:01:0a:c2:5e:22:84:36:3f:4a:74:a0:99:
                    ac:7e:bb:c1:d9:02:16:89:55:81:fe:21:d2:b1:30:
                    3a:3b:12:92:06:62:a1:78:2f:4c:ac:7b:e8:10:72:
                    04:dc:2c:fd:1d:31:60:02:67:77:d3:a8:d0:ec:33:
                    ba:95:68:5a:bc:20:59:90:1b:78:92:99:f8:dd:3a:
                    a1:6b:db:63:93:8f:6f:cf:7d:ca:06:ca:6c:d7:ad:
                    dd:73:fc:64:89:1b:d7:9b:18:48:aa:e4:a5:fe:70:
                    73:e1:fc:9a:c4:69:d2:30:f6:34:37:b9:e5:ef:a6:
                    b1:71:3b:6b:71:59:ad:b5:7d:80:74:08:85:f4:f2:
                    88:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:27:72:D6:D2:FC:C9:E2:3C:51:1A:B6:B1:8B:A9:CC:34:B3:EF:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/c9f84ebb-eb90-3b1e-a3a6-9d95540ce8df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.crl

            X509v3 Authority Key Identifier:
                keyid:96:BA:9F:DC:AB:CD:D9:CC:C5:C8:ED:6F:0F:30:3D:71:C0:8D:21:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:85:8f:1f:15:30:ab:0b:b1:99:a9:ba:ef:dc:39:8d:b5:37:
         3b:2f:3f:4c:87:a9:7e:a1:9f:d9:d6:4a:6f:ed:f9:a8:79:02:
         7d:95:1d:65:39:f7:d0:3f:80:e6:2b:9f:38:b6:36:e6:9c:5f:
         1a:92:19:59:c6:94:ea:e0:9f:92:7b:a3:51:77:71:5d:a6:31:
         35:17:9b:51:22:f9:5b:f5:1b:6e:9d:62:dc:94:e7:d7:29:42:
         ab:0b:d1:05:4c:b5:78:6d:33:0b:03:4a:e2:d7:92:af:58:d6:
         3a:a0:c1:61:71:3b:d2:29:82:4a:39:50:95:1c:7e:6a:47:0e:
         c0:c9:39:20:b3:63:07:5e:f2:4f:f5:ef:39:e4:11:23:90:09:
         76:ff:55:73:1c:66:a8:14:3f:c8:30:32:c2:9c:28:fb:7d:c4:
         a2:26:02:4c:52:22:69:bd:ea:eb:00:e9:33:e2:5d:75:f3:4a:
         54:bf:65:1b:bd:68:5f:68:7e:cc:ca:1f:54:f8:79:d0:21:c4:
         0c:cd:8a:e3:64:bb:71:74:18:e6:e5:f7:91:87:0d:5f:f8:3c:
         62:5a:fa:60:aa:37:b2:14:a9:be:19:02:8b:27:81:11:ac:6b:
         34:6a:25:42:70:ef:80:49:32:55:a0:bf:b7:cb:fa:07:72:d3:
         d0:11:1f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:36:38 2026 by rpki-client