Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bba4d47d-81d9-426f-989d-103f6cf490c9/3c33eafd-e892-3767-bf88-d8f7ab6e322c.roa
File:                     3c33eafd-e892-3767-bf88-d8f7ab6e322c.roa (raw, json)
Hash identifier:          XqvHsb5vgtT22y3kUJW3zpYGPNI6FbTN+AtjyLSwJiA=
Subject key identifier:   53:28:89:3A:95:00:F6:1D:F8:0C:C8:F2:B3:67:9B:3E:30:42:8E:CE
Certificate issuer:       /CN=bba4d47d-81d9-426f-989d-103f6cf490c9
Certificate serial:       010D0C9F4328584FB0BDE01EDDC99F8113774B60
Authority key identifier: 4F:5E:15:B9:F3:0C:6D:6C:E7:90:3C:19:17:99:6C:76:1A:F1:B9:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bba4d47d-81d9-426f-989d-103f6cf490c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bba4d47d-81d9-426f-989d-103f6cf490c9/3c33eafd-e892-3767-bf88-d8f7ab6e322c.roa
Signing time:             Sun 01 Nov 2026 01:00:13 +0000
ROA not before:           Sun 01 Nov 2026 01:00:13 +0000
ROA not after:            Sat 30 Jan 2027 02:00:13 +0000
asID:                     402979
IP address blocks:        209.177.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bba4d47d-81d9-426f-989d-103f6cf490c9/bba4d47d-81d9-426f-989d-103f6cf490c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bba4d47d-81d9-426f-989d-103f6cf490c9/bba4d47d-81d9-426f-989d-103f6cf490c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bba4d47d-81d9-426f-989d-103f6cf490c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b0:bd:e0:1e:dd:c9:9f:81:13:77:4b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bba4d47d-81d9-426f-989d-103f6cf490c9
        Validity
            Not Before: Nov  1 01:00:13 2026 GMT
            Not After : Jan 30 02:00:13 2027 GMT
        Subject: CN=14b0e94d-dc49-4ee2-ad34-dd818603a4a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bd:d6:d8:e2:29:85:03:98:ff:4d:5e:a8:42:
                    63:b2:55:2c:3b:fa:78:11:a2:71:25:eb:ea:33:70:
                    09:a7:d9:72:15:98:ca:b7:29:41:e4:c6:25:6f:0b:
                    89:63:e2:64:28:da:f4:5a:96:cb:ed:66:78:ab:66:
                    2b:55:d6:0a:1c:3d:cd:bd:13:94:63:02:a2:85:8a:
                    6c:00:91:b2:da:85:e5:05:14:eb:d1:2f:c5:07:9c:
                    ab:11:2b:b7:08:c3:f4:7e:6a:b2:99:40:88:1f:c0:
                    27:5c:54:ca:0c:c1:a5:65:b8:86:df:58:c6:96:a5:
                    aa:a0:89:17:06:84:ab:78:7b:a3:03:54:7b:a4:a3:
                    73:8d:44:d5:c8:fe:68:52:f1:4e:05:37:cc:de:c2:
                    6c:3f:08:45:91:59:24:72:0b:3a:7e:43:37:19:a6:
                    0e:26:a5:45:96:52:c6:cc:8f:dc:5c:7f:b4:45:98:
                    b0:8a:89:25:8d:a7:b1:7a:39:c1:05:c0:09:d1:5b:
                    56:2e:f7:30:41:8f:70:43:c7:17:4e:38:84:c3:47:
                    05:de:46:89:fd:cc:40:9d:9e:e7:b4:77:00:c6:28:
                    c2:4f:67:3f:35:04:1e:f4:cb:ce:00:b3:ee:8e:f5:
                    67:87:c6:80:a1:b2:d1:d0:b6:71:87:e1:46:2e:63:
                    9a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:28:89:3A:95:00:F6:1D:F8:0C:C8:F2:B3:67:9B:3E:30:42:8E:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bba4d47d-81d9-426f-989d-103f6cf490c9/3c33eafd-e892-3767-bf88-d8f7ab6e322c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bba4d47d-81d9-426f-989d-103f6cf490c9/bba4d47d-81d9-426f-989d-103f6cf490c9.crl

            X509v3 Authority Key Identifier:
                keyid:4F:5E:15:B9:F3:0C:6D:6C:E7:90:3C:19:17:99:6C:76:1A:F1:B9:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bba4d47d-81d9-426f-989d-103f6cf490c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.177.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:8c:96:54:e2:e4:cd:e9:52:f6:10:05:52:12:9c:0a:d3:b7:
         7d:28:a5:14:7d:cd:9e:14:3b:c2:b6:bc:17:f3:40:9b:a6:1a:
         3a:a2:5a:ee:72:d9:69:bb:50:2d:10:48:55:11:ac:fe:db:ee:
         52:80:f5:28:f7:b8:54:55:a2:4d:8d:2b:26:1b:da:7e:fd:3a:
         cd:3f:79:b2:fe:ca:1a:d2:39:02:a2:92:dc:45:28:74:31:1f:
         5d:51:3a:93:c1:a2:01:14:27:61:44:06:d3:6b:6a:23:65:b9:
         b4:44:38:9c:8d:a0:86:ec:f2:7d:f8:08:30:c6:63:1c:a5:7d:
         f6:cf:3c:54:66:b2:a5:ab:ce:e9:18:9a:0d:44:f4:f8:cf:ef:
         c7:08:6d:70:98:1e:57:a1:fc:f2:df:bb:b4:dd:0a:a6:2f:23:
         92:7a:e8:a1:48:c6:94:8d:c2:6e:74:ad:f6:37:32:1d:e8:bc:
         ba:05:fe:59:ba:09:17:5d:a9:77:9f:1b:c8:09:ad:33:8a:b2:
         ec:eb:5f:c0:c1:31:69:d6:be:51:0f:fa:4f:47:ae:b0:0b:64:
         28:c3:f4:e3:57:24:6f:1b:ba:40:c8:c4:1a:15:31:eb:89:7a:
         d8:23:66:f6:7a:42:83:34:0d:8f:c3:a5:b7:48:5b:9e:cc:64:
         d4:e3:4f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:09:56 2026 by rpki-client