Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/ba0578d9-926a-35fa-a460-8eae2d199b7f.roa
File:                     ba0578d9-926a-35fa-a460-8eae2d199b7f.roa (raw, json)
Hash identifier:          upFylis1N0+2xWBACcLgtgPUE778s2Aze8Q0HWc2Q6c=
Subject key identifier:   8B:3F:8D:D1:9C:34:34:74:DF:EF:B7:A5:92:D6:C6:90:C5:D6:44:88
Certificate issuer:       /CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7
Certificate serial:       010D0C9F4328584EFE121D02F9B762C109B8EC80
Authority key identifier: F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/ba0578d9-926a-35fa-a460-8eae2d199b7f.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     53589
IP address blocks:        199.59.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:1d:02:f9:b7:62:c1:09:b8:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=5e1ca410-ddfa-4455-bfd5-5de7fd62b132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d5:a7:dc:12:4c:f0:d9:10:15:01:e1:3f:3c:
                    1c:0e:9d:2b:9b:a5:9a:30:5d:f2:62:d8:23:84:44:
                    dc:44:c3:8c:36:4c:fd:5e:a8:88:0c:ad:64:5e:64:
                    9d:df:cc:5f:d4:51:3a:28:b9:32:b9:a2:b2:3f:df:
                    f6:bd:aa:43:c6:69:53:82:8a:21:6e:59:fe:73:8d:
                    b4:e9:67:8d:52:a5:a6:5e:a6:48:30:66:b5:52:ad:
                    2a:1a:6a:93:58:0b:b1:be:9f:a8:f9:51:47:93:44:
                    be:77:cc:35:52:76:09:cd:bc:60:23:5a:84:f8:7e:
                    82:0d:e0:ad:99:03:92:95:96:47:2e:0e:49:1a:30:
                    72:01:51:62:dc:56:f0:17:b8:3f:17:a1:6f:2f:cb:
                    b3:69:4d:21:c1:65:75:5b:f9:f9:06:5d:7d:bd:86:
                    65:b3:5c:fd:7e:8d:7b:39:11:ba:4f:bf:7a:57:0d:
                    45:50:a8:bd:e5:42:bf:dd:47:1e:e0:22:bd:a1:ab:
                    da:a3:f9:87:59:53:b7:67:a5:87:e7:9c:8c:ee:59:
                    43:49:15:04:90:a9:c3:ab:d7:e5:79:fc:f3:9c:40:
                    06:4a:66:be:07:22:35:67:3a:e8:d6:a1:0d:10:11:
                    d1:42:5b:5a:62:c9:ad:58:af:92:22:db:f9:8f:37:
                    28:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3F:8D:D1:9C:34:34:74:DF:EF:B7:A5:92:D6:C6:90:C5:D6:44:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/ba0578d9-926a-35fa-a460-8eae2d199b7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl

            X509v3 Authority Key Identifier:
                keyid:F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.59.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:49:e4:2a:1b:6d:b0:f8:a3:5d:06:ed:6b:d5:e8:52:59:c2:
         4f:f3:fa:b7:13:63:6c:0a:47:51:15:fa:e3:29:31:df:fb:b5:
         c3:2b:87:45:69:12:dd:73:a8:62:2f:ac:1a:a2:42:00:5d:79:
         cd:07:00:55:1e:ad:de:7d:a6:12:5a:4d:b3:db:a9:19:7e:72:
         e4:91:8e:91:c4:e0:be:33:b5:54:b0:2d:98:dc:b7:52:a7:70:
         8c:d9:a4:8a:04:35:26:5f:d8:a2:96:3f:41:1d:fd:a2:00:fb:
         81:32:df:f0:61:f4:66:f7:05:3c:59:a2:42:31:a9:46:3e:f3:
         d2:6f:a1:de:ca:5e:29:18:a8:e2:b5:2a:aa:7d:b4:5c:72:2e:
         56:c8:e7:3a:b0:2d:34:c2:6b:03:b0:f2:e1:55:e6:3d:04:a5:
         d7:70:bd:63:14:b2:14:88:22:a9:d8:bd:7f:c1:f4:1b:44:46:
         55:95:a2:13:6f:8b:d3:8d:5c:15:d1:c5:af:d4:54:79:fd:13:
         cd:15:58:ce:86:05:c3:6d:a4:05:fe:83:63:6f:b0:24:dc:7f:
         29:f4:27:d3:6d:36:88:c7:e8:9f:bb:9e:9b:be:95:c8:6a:dc:
         b1:a9:51:4c:5f:b7:b4:0b:7f:2f:c0:50:98:1f:bb:7c:55:54:
         c0:10:c0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 12:33:59 2026 by rpki-client