Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/d9b3d2af-88b0-3b3b-a075-b21514d98bb4.roa
File:                     d9b3d2af-88b0-3b3b-a075-b21514d98bb4.roa (raw, json)
Hash identifier:          bz9LQlmJPykRMm3iX14vo8ibnMqDQ9pup78UarZOJmA=
Subject key identifier:   A4:70:4F:B9:3B:3E:42:BA:88:5E:AD:84:E3:CD:89:6B:E5:53:E6:79
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584E815F97A518FB0D0705C0C100
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/d9b3d2af-88b0-3b3b-a075-b21514d98bb4.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     33392
IP address blocks:        216.230.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:97:a5:18:fb:0d:07:05:c0:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=f8248a16-3b75-4a9e-9c55-b12081e3ab5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:11:c4:0c:f0:f5:66:6a:cf:58:35:2c:97:46:
                    b4:94:93:ef:b0:88:e7:7d:1d:2c:53:b3:c1:06:c3:
                    71:2a:51:af:9d:c0:09:e0:df:6f:ba:58:af:53:5d:
                    24:ca:78:ba:bc:ac:34:21:b8:63:54:e5:fc:83:67:
                    b9:3a:8a:1d:64:1e:56:0d:36:07:1a:1c:06:04:f9:
                    d2:f8:ba:d6:c8:ba:35:30:6f:a2:8f:d0:a3:38:76:
                    c0:a8:ef:21:33:7d:2c:76:ea:ae:ba:34:33:58:ec:
                    db:0f:77:e8:0b:f6:6f:55:fa:e7:b1:1d:a7:b4:4d:
                    ba:ad:6a:af:38:63:c8:29:a1:e3:ea:12:eb:20:50:
                    f7:f1:bc:ef:b4:81:40:d7:71:f9:55:c4:41:1a:73:
                    69:fc:75:c0:68:64:7f:d7:d8:e0:be:e9:ec:6c:32:
                    e1:fb:d5:b7:e0:c7:a2:79:7d:8c:76:bf:79:9c:56:
                    9e:e5:50:8c:67:80:9a:07:14:57:79:c9:91:d6:f6:
                    c2:fc:a3:19:4e:9e:ae:8b:23:6d:c3:5e:c5:d9:f3:
                    20:2f:fd:ba:9c:1c:f9:24:b1:60:7c:9e:21:c9:5b:
                    f3:03:bb:40:2e:fd:19:64:ef:c5:86:50:d8:a1:d2:
                    5b:e6:04:f5:a0:ae:67:54:d4:13:f1:e1:c5:91:44:
                    6e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:70:4F:B9:3B:3E:42:BA:88:5E:AD:84:E3:CD:89:6B:E5:53:E6:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/d9b3d2af-88b0-3b3b-a075-b21514d98bb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:8e:16:3d:bd:c2:35:70:d7:5d:61:09:41:60:44:8f:7f:cd:
         2a:53:49:08:07:33:5e:c8:26:cc:50:70:39:3e:a9:2d:e9:52:
         34:dc:a4:f5:7d:c8:b4:48:35:70:28:dc:1b:16:99:6d:65:06:
         68:cc:55:c2:15:44:29:71:d8:09:dd:73:ca:df:6b:19:81:36:
         84:b8:5b:57:d0:c3:b7:e5:54:a5:43:b0:97:7e:2c:51:95:92:
         7e:12:0e:c0:20:70:f7:1e:83:2e:c1:3b:ff:07:01:5d:00:8b:
         10:ab:90:95:bc:29:9f:03:91:af:83:0a:3f:2d:6a:af:1c:0a:
         74:d6:4c:4b:13:96:84:60:30:cf:01:21:a7:23:2d:74:2e:be:
         e8:15:58:c1:56:e3:cc:d4:cc:f8:be:3c:9c:1e:4c:01:31:51:
         80:d5:12:ca:54:db:6b:aa:81:a4:61:c4:c7:b2:fc:19:b1:b1:
         75:31:c4:a1:4d:8d:d4:e7:7e:75:eb:4c:de:79:55:cc:4e:60:
         57:03:66:e2:93:d0:d6:ba:f8:0d:5d:6c:b6:5d:12:3f:6c:63:
         db:ca:4c:cc:bb:e5:40:40:40:ee:89:51:71:e3:70:a9:20:6a:
         52:02:8d:cc:69:58:87:aa:db:0e:73:cb:04:cd:3e:01:c8:68:
         0a:25:c2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:05:20 2026 by rpki-client