Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/696be498-e165-346f-bdfa-eba3ceb26950.roa
File:                     696be498-e165-346f-bdfa-eba3ceb26950.roa (raw, json)
Hash identifier:          nvEMbYG9dGDhVBEeIl9nCv3FnhfLlIoWxA3rWbLcUQk=
Subject key identifier:   3E:3E:EA:56:8A:38:40:A8:FA:05:7D:BE:88:E4:25:D4:49:A3:5C:47
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584E78FF7CB10D797292F9F1AE78
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/696be498-e165-346f-bdfa-eba3ceb26950.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     36511
IP address blocks:        208.103.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:7c:b1:0d:79:72:92:f9:f1:ae:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=9030d115-253d-4c11-b61f-bfd3d1f7415c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:09:93:9e:55:f4:09:b8:da:0b:f4:6f:26:0e:
                    19:53:4e:2d:8c:96:56:ed:ef:eb:f0:d5:41:b8:a7:
                    98:2b:15:22:9a:4a:af:a2:26:02:57:06:cb:2f:ab:
                    71:66:89:5e:7e:55:b1:1b:b4:b7:10:c9:20:78:61:
                    5a:30:9d:91:3d:41:14:1c:e6:10:8d:70:dc:94:cb:
                    3b:1c:77:7b:78:9c:82:9d:d5:b7:ba:9e:59:70:1e:
                    67:54:a0:b0:30:f0:dc:09:e9:d1:0f:e2:58:62:d9:
                    e0:8a:5a:65:e8:46:5d:49:4b:e6:76:b4:04:86:c8:
                    07:2f:54:f3:2f:7e:c8:74:a8:09:a4:18:3f:e7:f6:
                    77:38:d6:13:a1:25:72:6f:7f:73:90:cd:1a:e8:91:
                    fa:8f:b0:8d:ed:98:3f:b5:4c:54:b3:7b:e4:41:3e:
                    1d:e7:ed:76:a6:1a:c9:35:fe:96:ff:0e:2a:83:5f:
                    e1:c1:98:70:a4:95:d9:9a:c0:60:f1:e3:8e:01:b0:
                    82:50:9d:c1:7d:a5:60:aa:19:90:f5:6d:6c:4e:91:
                    e5:40:14:0a:8d:a3:ab:c5:08:ad:ec:06:e4:58:d8:
                    10:ff:9e:a9:fd:1b:51:e9:68:71:cb:27:85:c8:d6:
                    a3:cf:75:d0:62:85:a1:21:d1:d7:1a:ee:6c:77:1e:
                    70:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3E:EA:56:8A:38:40:A8:FA:05:7D:BE:88:E4:25:D4:49:A3:5C:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/696be498-e165-346f-bdfa-eba3ceb26950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.103.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:d1:23:e9:64:ac:74:57:53:19:92:f3:17:6a:d9:10:4e:d0:
         56:16:b5:bd:6e:25:13:dd:55:7a:9b:bd:33:b0:ea:bc:44:ce:
         f9:7f:8d:42:5f:0b:34:a7:c0:e7:19:9f:39:8f:46:23:73:16:
         d3:f0:f0:51:24:6b:59:2b:a4:48:cf:d5:1d:9c:94:79:64:e9:
         e5:95:35:01:c4:40:7d:eb:97:cc:24:65:60:36:62:d5:70:1e:
         53:72:0b:ed:88:8d:72:12:a5:8d:3f:7f:61:fd:e1:da:4f:7c:
         fa:72:cf:0d:4e:0f:7c:de:1a:ed:8e:74:83:d4:e6:37:ce:5c:
         6b:e4:6e:54:a2:80:8d:29:ef:11:84:70:fc:4d:42:46:69:4a:
         da:1c:d9:e0:7c:90:c5:71:bd:ec:0c:7a:be:db:d5:1c:42:b4:
         0c:d1:1c:cb:5a:22:82:f9:70:55:b8:bc:6a:58:5e:d6:ad:31:
         03:84:e1:15:35:1e:a4:ab:b0:0f:a6:0f:66:21:51:14:11:40:
         71:dd:78:8f:d0:5e:ab:20:5e:d7:ff:59:9a:f6:b4:ce:9f:4a:
         cf:8f:ac:a4:53:3e:ff:70:14:bf:b5:d7:a0:62:95:7d:f8:99:
         19:e6:7f:29:50:1d:b0:84:6e:a6:77:4f:ef:35:60:10:b9:c2:
         55:44:47:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:04:40 2026 by rpki-client