Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/ba2a23ca-935e-30b5-b145-3d3bb372b2ae.roa
File:                     ba2a23ca-935e-30b5-b145-3d3bb372b2ae.roa (raw, json)
Hash identifier:          9FLroHW6DeUVf0yCihRyt7Nnvh/NB2k1ZgLf6nqIlXU=
Subject key identifier:   4D:5B:B1:AF:1E:F0:C3:69:56:31:54:12:B4:77:78:24:D9:E6:C2:7A
Certificate issuer:       /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial:       010D0C9F4328584D3F64D0E2CAA7CD2800E68800
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/ba2a23ca-935e-30b5-b145-3d3bb372b2ae.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     55081
IP address blocks:        192.119.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:d0:e2:ca:a7:cd:28:00:e6:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=a0e197a7-19a4-4da3-9016-43a4e8d01233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ba:cc:78:ca:17:78:b6:45:e4:c0:c2:ab:85:
                    f3:70:a9:60:52:99:b0:e5:c1:8b:c8:c8:ad:46:84:
                    9d:59:b9:94:d9:83:f7:2b:71:76:06:f4:25:f0:7f:
                    84:d0:f9:68:bc:9c:56:3d:0f:35:01:c1:c2:c4:3d:
                    d5:3d:e6:ba:2d:a4:02:50:08:c5:3b:88:27:60:59:
                    00:c7:87:2a:00:4b:68:c8:72:84:e4:ae:8a:61:99:
                    bc:26:07:8f:f0:42:30:91:ba:bf:b7:f1:61:6c:80:
                    80:6a:a2:a8:8d:49:bf:40:23:9a:28:d0:e6:e4:4b:
                    6b:38:47:3b:3a:20:66:a2:82:c5:b4:22:28:80:90:
                    7d:5a:6b:65:21:6c:ba:35:b0:c7:cb:61:84:f4:59:
                    11:8b:1b:af:bc:f6:6b:93:6b:e5:7e:d1:90:a9:1a:
                    5f:a1:07:7a:61:98:93:03:9e:0d:51:d9:9b:50:b5:
                    c3:93:d2:f5:85:de:7c:57:ca:ae:1f:46:02:24:50:
                    5a:18:33:ed:66:b3:55:47:b2:79:21:74:e4:18:d4:
                    08:3f:63:f4:d2:50:0d:60:00:33:75:1e:be:59:22:
                    f9:c9:3b:9e:31:ee:5b:c0:8f:36:00:21:07:a8:df:
                    78:00:7b:c8:46:78:14:2e:69:fa:ac:97:07:c8:c1:
                    ea:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5B:B1:AF:1E:F0:C3:69:56:31:54:12:B4:77:78:24:D9:E6:C2:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/ba2a23ca-935e-30b5-b145-3d3bb372b2ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl

            X509v3 Authority Key Identifier:
                keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:24:b8:eb:68:d3:0e:b9:6e:92:d7:97:03:a4:c6:53:ee:5f:
         15:7c:21:6a:31:48:4d:d4:c3:d6:eb:75:cf:72:e3:b9:c8:cd:
         67:67:fa:8a:1a:45:9b:1c:f1:73:b8:82:cf:3f:6b:66:e1:1c:
         7c:9e:e5:89:df:97:1f:57:e8:53:c8:4e:a6:bf:cc:77:17:60:
         79:f9:9c:84:24:40:1f:4f:21:03:d5:00:34:09:1e:5c:07:b9:
         d4:38:c2:c9:1e:16:38:3b:e7:fd:2b:31:8f:a3:db:b3:ad:ff:
         c5:6d:41:8e:5d:9e:b0:f6:f4:25:18:f2:27:3a:64:0a:7e:81:
         ad:2f:24:51:b4:0f:eb:85:c8:e0:1b:c0:4a:b2:bf:e2:d4:df:
         9f:5d:96:1a:d6:ef:92:e5:0f:7b:16:f9:07:05:af:ad:3d:c6:
         18:47:37:80:41:c3:fb:2e:3e:e3:ac:da:02:b5:06:73:99:28:
         d9:29:d7:ae:cd:80:e3:63:25:1a:ae:e9:21:c9:90:1c:9a:93:
         d9:16:7a:f3:72:c5:9e:80:15:56:30:f7:57:d5:91:25:21:bf:
         08:d8:6c:d6:18:9c:78:a6:6c:cd:76:36:40:1c:6f:32:d1:56:
         f6:b1:a0:b0:32:54:8d:c0:1c:51:09:28:45:38:b6:58:8a:5d:
         f7:85:12:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:54 2026 by rpki-client