Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/f4b77982-a527-36ff-ae39-20c8febccd87.roa
File:                     f4b77982-a527-36ff-ae39-20c8febccd87.roa (raw, json)
Hash identifier:          zyNYd5XOnooJRX6bFHHN4fPo64VDRB0VCLeZCLdYIqc=
Subject key identifier:   26:09:12:9F:9B:92:4A:4F:24:D5:E0:43:B3:0E:55:9D:48:C9:7F:6F
Certificate issuer:       /CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5
Certificate serial:       010D0C9F4328584E48249380E412A8D0FDE7BA80
Authority key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/f4b77982-a527-36ff-ae39-20c8febccd87.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     32762
IP address blocks:        198.96.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:93:80:e4:12:a8:d0:fd:e7:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=e130019a-817a-4fac-8e67-5b4f29e05275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bc:96:f7:64:53:3c:e8:0d:42:6f:94:34:08:
                    fc:2e:de:c4:43:34:bc:a8:ec:c8:e7:fe:62:f7:9a:
                    9b:c5:49:3b:3a:b8:ae:ce:c4:59:70:0c:cd:10:89:
                    8e:1d:44:f7:89:50:6b:ee:b3:58:f9:d1:21:73:f6:
                    23:ee:34:b0:50:db:b5:83:6c:7e:9e:48:08:c0:8a:
                    62:b7:4a:46:91:1a:2b:e1:f6:b4:3f:d9:04:d2:a1:
                    59:35:09:10:3b:a2:1d:b6:0a:b8:ca:89:94:6d:fe:
                    b0:80:f2:39:39:d3:aa:cf:18:4a:97:e4:54:53:9c:
                    5a:47:fa:2e:a5:b5:41:1b:72:4a:2c:60:1b:36:1c:
                    b1:aa:39:11:31:cc:be:a4:4e:3e:08:69:f9:ae:3a:
                    a1:5d:6c:ec:69:03:7e:70:26:39:19:31:13:c3:6e:
                    80:92:06:df:a9:57:78:70:7b:2d:df:fa:1e:a9:7a:
                    e6:86:ec:70:3d:a3:2b:d9:55:38:95:08:5c:80:11:
                    5a:30:9f:3b:7d:d4:45:8e:e7:7b:81:6c:39:85:7d:
                    05:e9:c1:a1:7b:19:2c:49:fe:ec:32:78:d2:ed:6f:
                    cc:20:d2:69:f2:1b:8f:6e:a7:e5:6a:47:c9:5b:dd:
                    61:a8:32:4d:da:03:ee:d8:3f:e3:fe:b9:c0:8e:87:
                    dd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:09:12:9F:9B:92:4A:4F:24:D5:E0:43:B3:0E:55:9D:48:C9:7F:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/f4b77982-a527-36ff-ae39-20c8febccd87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl

            X509v3 Authority Key Identifier:
                keyid:91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.96.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:c3:75:d3:34:60:6b:42:24:1b:12:f5:0e:11:e4:48:87:e9:
         cd:e3:a6:0e:b3:1f:1d:f2:26:e0:da:f7:df:9b:b2:63:71:64:
         bf:74:fa:07:43:aa:39:b8:7b:73:bb:5f:34:82:cd:64:1a:f4:
         28:1a:0c:34:70:7c:42:45:76:80:a8:77:65:ce:ec:09:11:c9:
         55:d3:6b:49:9c:82:55:ab:8f:aa:64:11:2f:20:9a:9f:5e:b0:
         fc:f4:47:4d:e8:c0:53:31:3e:2c:61:49:2a:3e:2a:88:4e:f9:
         a7:aa:4e:55:41:bf:61:36:9e:0f:4e:96:11:79:b0:31:9b:00:
         b9:36:fd:79:27:d7:92:83:c8:5d:7e:f7:eb:14:38:59:5c:8d:
         38:ce:8d:cc:52:7b:f1:41:4e:11:b9:b8:a2:24:18:e5:82:42:
         36:12:65:cc:70:05:aa:52:a6:66:60:d8:4f:95:b3:93:1b:a6:
         38:2c:cf:9a:53:44:92:8b:2b:58:97:70:f3:1a:a4:67:c8:13:
         1b:0d:e8:7f:0c:14:fe:89:b9:24:36:7d:41:0a:cf:b6:09:6e:
         2e:b8:39:d8:59:c8:cf:88:f6:b6:8b:a1:19:06:5b:dd:d1:a2:
         8a:77:c7:44:43:13:91:73:6b:c0:47:e0:e4:68:bb:41:ca:2e:
         a4:eb:64:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 20:06:35 2026 by rpki-client