Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/a59b07bd-087c-3bd2-b8c2-4ce5bbd233f4.roa
File:                     a59b07bd-087c-3bd2-b8c2-4ce5bbd233f4.roa (raw, json)
Hash identifier:          1pyGHqddY926Kt5/g28WT/pzyWn8IUSQjqOUWvHGzBg=
Subject key identifier:   C2:AC:F3:33:D5:54:B5:BC:BB:76:77:26:C2:96:24:1C:38:A0:3B:C6
Certificate issuer:       /CN=ba34350e-8a32-444e-a9c3-3267735f96ea
Certificate serial:       010D0C9F4328584E4559ECBE32FB0763CECA4000
Authority key identifier: 95:CE:E8:CF:4D:E9:4C:D0:B3:22:3D:3C:68:D2:DD:A5:A0:52:B2:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/a59b07bd-087c-3bd2-b8c2-4ce5bbd233f4.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     46179
IP address blocks:        199.91.152.0/21 maxlen: 21
                          205.196.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/ba34350e-8a32-444e-a9c3-3267735f96ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/ba34350e-8a32-444e-a9c3-3267735f96ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:ec:be:32:fb:07:63:ce:ca:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba34350e-8a32-444e-a9c3-3267735f96ea
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=4077c36a-a54f-49d5-b16d-9dd45983b3c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f3:6a:0d:39:14:64:5e:db:e8:14:75:df:81:
                    da:9b:cc:06:b9:3a:c7:45:ae:1f:b7:55:60:34:c1:
                    89:a4:c6:e8:a4:ed:2c:ba:be:4f:21:7f:84:54:8e:
                    f3:eb:c4:b5:15:d9:61:cf:26:e6:a9:8d:48:c1:64:
                    e7:1c:81:1e:15:eb:10:29:cc:49:29:50:38:b7:08:
                    39:38:5d:f0:34:a7:ed:43:85:a2:ac:1e:0a:5a:5d:
                    ff:51:88:1b:a6:10:2d:0f:fc:a0:54:12:a5:e8:75:
                    72:96:ec:d9:46:ef:01:06:c1:da:57:1a:63:ea:2a:
                    6e:4c:be:0f:ff:e5:17:a4:3d:3c:0b:b1:18:f4:f5:
                    14:61:09:88:f6:0d:39:3b:6f:03:35:6f:4b:52:1d:
                    f8:3c:68:09:ed:a9:79:79:84:6e:38:e6:0c:cf:17:
                    bb:d4:7c:9f:f6:cb:dc:0a:37:cb:12:20:08:a0:41:
                    b1:43:a1:3a:77:e8:5d:cc:3c:ae:b8:70:4f:89:07:
                    04:8c:62:33:cc:d2:f3:83:9d:11:d3:8b:23:fa:da:
                    d6:e1:bf:93:23:f5:e2:2e:82:53:17:ad:74:48:31:
                    db:c5:ca:d2:f9:c4:49:01:bc:f1:a2:30:bb:a2:fd:
                    65:68:17:c9:e2:a4:a0:4d:81:48:a0:74:09:9a:11:
                    7f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AC:F3:33:D5:54:B5:BC:BB:76:77:26:C2:96:24:1C:38:A0:3B:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/a59b07bd-087c-3bd2-b8c2-4ce5bbd233f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/ba34350e-8a32-444e-a9c3-3267735f96ea.crl

            X509v3 Authority Key Identifier:
                keyid:95:CE:E8:CF:4D:E9:4C:D0:B3:22:3D:3C:68:D2:DD:A5:A0:52:B2:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.152.0/21
                  205.196.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:19:a2:50:db:e2:90:25:c9:4d:78:ab:46:2d:21:f1:61:09:
         34:0b:28:43:6f:ed:52:5d:19:4e:68:b8:4e:1e:e5:40:bf:23:
         b3:36:b3:41:33:93:fc:23:50:07:bf:0b:34:46:f8:13:94:0a:
         f4:a1:f1:8a:e6:12:50:f9:8e:87:2d:7a:90:85:8b:35:68:1b:
         a3:26:d0:b4:d2:61:4f:46:85:95:b7:ec:ba:4f:20:8d:e9:2d:
         07:03:68:00:ed:c7:1f:3f:c7:59:9c:c1:29:f8:d7:53:2f:5b:
         c8:1b:20:52:50:ae:fa:96:bd:ae:69:b2:22:60:52:4b:9a:b3:
         48:11:ea:0d:b1:b3:cf:a1:43:8d:69:a1:1a:e7:c9:08:64:32:
         3d:b7:0f:9a:5b:7b:14:1b:ff:a2:9f:3d:63:b0:9f:33:91:4f:
         d5:f8:91:81:25:00:05:0d:3f:37:87:2d:79:2e:44:a5:c5:47:
         46:be:85:ba:ed:8e:e1:66:48:1e:94:ac:79:6d:5c:15:bd:90:
         1e:d7:27:0c:c6:30:18:d1:05:47:e0:a5:d4:d4:aa:7f:e2:8a:
         75:ee:a6:1e:66:de:69:4a:e2:fe:b4:15:cb:50:0d:b5:73:4d:
         f4:51:29:66:46:bc:52:b6:32:41:4e:5b:fe:69:74:82:32:c3:
         67:c7:1b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:03:11 2026 by rpki-client