Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ba507904-601f-3c1d-8158-f5c297c1052e.roa
File:                     ba507904-601f-3c1d-8158-f5c297c1052e.roa (raw, json)
Hash identifier:          G+OLcVObuS5tRuiIdj2+UU5XS1ENCHwxJkvhxbPaYNM=
Subject key identifier:   1C:78:D2:83:5F:0E:61:9C:D3:5C:D3:60:8A:38:4D:C7:1D:41:8E:41
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584C9967044101FD5502D97E96A0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ba507904-601f-3c1d-8158-f5c297c1052e.roa
Signing time:             Wed 21 Jan 2026 14:00:38 +0000
ROA not before:           Wed 21 Jan 2026 14:00:38 +0000
ROA not after:            Tue 21 Apr 2026 13:00:38 +0000
asID:                     1225
IP address blocks:        2001:418:7:4::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:99:67:04:41:01:fd:55:02:d9:7e:96:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jan 21 14:00:38 2026 GMT
            Not After : Apr 21 13:00:38 2026 GMT
        Subject: CN=d9c31bc1-75a4-41f9-a09e-f50b35fe50a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:df:b2:ca:9c:90:d2:f3:dc:75:80:7d:ca:1c:
                    33:80:b8:5b:70:12:44:7f:f7:1c:e4:86:74:a3:46:
                    1e:6b:6d:52:f6:de:3b:c5:3c:ca:0a:6a:e3:fd:5a:
                    38:60:a3:78:70:f5:59:97:d4:e3:49:0a:3e:85:d8:
                    d1:72:51:86:42:c6:0d:98:3d:39:31:08:19:74:fb:
                    f5:d9:1e:1a:a6:72:ae:88:51:63:13:29:38:69:e3:
                    62:70:1a:7b:28:cc:3c:c5:13:93:0b:66:ff:d6:12:
                    5a:e9:e0:4f:84:e1:42:cc:86:3c:eb:18:63:88:76:
                    aa:16:6d:a3:3c:d0:2a:7b:ba:dc:5f:11:2a:ca:13:
                    08:7c:8b:0c:dd:99:29:b8:5b:8c:0f:3c:ac:c7:ea:
                    61:cf:69:d8:98:6c:52:c3:00:cd:0b:a3:fb:44:83:
                    23:5a:4e:a0:64:6f:68:c5:6f:30:0e:1c:a6:d4:f9:
                    e1:97:02:9e:da:fc:c5:e9:eb:be:8c:14:f9:b6:74:
                    5c:e4:10:7d:ad:82:10:06:09:ed:93:2d:a1:d2:ac:
                    b3:eb:5d:fb:e5:db:06:c6:43:d5:3d:26:5d:9f:61:
                    6f:6a:60:60:ad:ff:77:c4:a8:8e:bc:c9:e3:a1:b9:
                    40:14:e8:a3:54:ee:f3:00:4f:60:72:25:f7:4b:fa:
                    8f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:78:D2:83:5F:0E:61:9C:D3:5C:D3:60:8A:38:4D:C7:1D:41:8E:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ba507904-601f-3c1d-8158-f5c297c1052e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:7:4::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:f3:19:d1:98:b1:60:ab:83:da:44:f7:b7:f3:c8:88:2b:90:
         f4:cb:09:0d:eb:92:1d:dc:7d:52:23:94:b1:56:12:70:7d:ae:
         51:6b:bd:37:f5:a4:18:fc:cd:e9:55:7a:9e:f2:5f:b3:cc:f2:
         88:26:e0:8f:6f:a7:6f:81:d9:f0:d7:3e:2d:6f:26:ea:64:83:
         68:7a:33:81:a2:a6:2b:84:5b:88:11:eb:7e:ae:4d:5d:55:32:
         5d:31:25:29:a2:3d:69:4d:86:9b:8a:62:d7:c4:3e:5b:7b:0b:
         5e:99:e8:17:62:40:a5:5a:62:b5:54:27:51:d7:01:a8:1a:ab:
         fe:e8:54:7f:5c:02:d8:d1:c0:f1:5d:2d:1e:f7:1c:e6:7c:64:
         db:55:60:f9:2f:cb:dc:d6:e5:9b:49:6e:d7:d1:21:48:18:1c:
         44:69:d3:e3:32:cd:71:f7:ca:7f:51:16:be:ee:f5:ce:35:75:
         e2:cc:a1:7d:ef:f0:58:4c:65:8b:1c:db:53:46:15:54:ed:e3:
         21:59:ba:16:b2:50:ae:83:32:12:cf:d4:40:f4:c6:5b:97:33:
         5f:9f:7a:79:2a:45:60:c9:e4:c1:14:55:93:39:b0:d8:66:95:
         8c:46:c5:48:98:49:d0:70:76:9c:21:05:ea:c8:0b:52:00:55:
         48:d3:81:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 11:54:39 2026 by rpki-client