Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/ba4c9292-c0ab-34be-aa20-dbabce3fd4bc.roa
File:                     ba4c9292-c0ab-34be-aa20-dbabce3fd4bc.roa (raw, json)
Hash identifier:          PkNmIN4BtLU0n2Ls+apL/IIkS8O8myoMeSP++EqMW9Q=
Subject key identifier:   47:E1:35:CE:4C:ED:56:69:21:10:A1:0D:6A:6C:4C:18:76:A1:3B:72
Certificate issuer:       /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
Certificate serial:       010D0C9F4328584DEC7B4A51BDAA49944DDA87C0
Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/ba4c9292-c0ab-34be-aa20-dbabce3fd4bc.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     53959
IP address blocks:        207.171.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:4a:51:bd:aa:49:94:4d:da:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=64d9e4e0-27b2-4c7c-b349-430fff97350e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fb:0d:ad:40:7b:72:5c:12:7a:7c:fc:a3:83:
                    a6:15:5f:55:13:8b:09:db:b6:d0:dd:1c:ac:5c:be:
                    78:e8:a0:41:10:25:9e:e9:69:cf:b2:d4:78:b8:4f:
                    07:02:37:16:12:36:c3:7b:33:6f:d8:b8:53:a2:ea:
                    48:a0:39:71:6b:a9:97:af:d0:e4:61:fc:bf:d1:30:
                    71:a9:8b:f2:c0:1b:1e:c8:bf:7d:00:54:ad:fc:5d:
                    a3:63:00:24:2e:dc:8d:4b:8a:0d:71:a0:d3:fe:6a:
                    03:89:18:4b:4b:be:28:51:8b:5f:74:ad:9a:94:1c:
                    50:50:87:8b:45:0e:19:ac:54:07:4a:76:41:a6:73:
                    a0:46:d4:49:c8:a4:94:97:19:9b:ce:fc:1f:52:74:
                    7a:3f:ae:3a:e6:36:d7:dd:22:be:2a:16:56:f4:e0:
                    d0:4d:39:32:74:be:aa:ba:06:e2:b3:4a:b8:65:7b:
                    ef:95:92:c5:fb:46:c6:67:0e:b5:10:4e:3f:5b:5d:
                    ec:76:c5:51:6c:21:b7:a1:38:c5:a7:f2:f0:99:f1:
                    7d:49:71:44:7c:8f:d8:89:fb:70:99:bd:65:5a:55:
                    1d:de:ab:b3:53:3a:cc:db:79:ad:9b:18:3a:f3:ed:
                    d1:ca:da:b4:9b:47:c8:8f:0a:4a:ad:ca:5b:09:d5:
                    ac:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E1:35:CE:4C:ED:56:69:21:10:A1:0D:6A:6C:4C:18:76:A1:3B:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/ba4c9292-c0ab-34be-aa20-dbabce3fd4bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl

            X509v3 Authority Key Identifier:
                keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.171.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:86:aa:cd:b3:c7:8b:01:b2:e8:d7:05:5f:06:4e:70:d8:3e:
         c6:74:4a:13:79:66:d2:ca:8a:05:0b:3e:da:f9:45:0c:14:3f:
         6c:32:c0:2b:7f:b3:04:e8:1a:40:32:b6:54:bb:0a:de:3a:08:
         bd:e7:f6:32:ec:99:fb:50:14:a9:6d:f5:be:cb:de:9d:59:46:
         15:6e:05:cf:9e:78:dc:ef:90:70:bd:15:d9:1b:27:3e:57:a2:
         b2:22:52:c3:e0:40:7c:db:78:7d:a4:27:56:85:1b:fb:c6:94:
         0c:f1:37:c4:e4:bb:be:b0:df:d9:76:62:a8:ea:bd:37:9a:19:
         e1:ad:e7:e7:e7:eb:eb:a9:25:9a:8f:26:d3:65:92:5b:42:d3:
         fa:2f:76:46:9c:ff:0b:fa:92:9a:2c:2d:de:49:85:e0:2f:ee:
         2b:3b:a2:15:c6:97:62:47:63:8f:0b:56:a3:72:60:6a:2a:f0:
         b3:6f:38:42:5a:93:c0:07:8f:00:48:34:9e:e4:7b:99:60:18:
         81:ba:71:85:eb:83:2b:05:9e:37:73:0c:5e:9b:ef:f8:5c:e2:
         6a:48:3f:8e:88:b7:1a:85:39:eb:e5:7c:7b:36:eb:59:05:a9:
         e6:34:12:41:3f:51:67:14:a4:28:88:66:88:e0:de:d0:f7:ef:
         b2:a1:1c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:10:43 2026 by rpki-client