Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/c3085ad5-7048-34fd-a7cd-47dea2c93fef.roa
File:                     c3085ad5-7048-34fd-a7cd-47dea2c93fef.roa (raw, json)
Hash identifier:          vyBc6cKJPeJC1FWdJ+f5OB5gjUg4GeFJiSqIwvsgiVo=
Subject key identifier:   E8:CD:49:DF:F5:B0:98:4A:40:25:9B:FD:4D:C9:54:7C:C5:CC:0D:D8
Certificate issuer:       /CN=ba5e814e-0ab8-4257-8c39-4091cb3be269
Certificate serial:       010D0C9F4328584F078CCC871B9F0280E2E6E200
Authority key identifier: 62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/c3085ad5-7048-34fd-a7cd-47dea2c93fef.roa
Signing time:             Tue 01 Sep 2026 10:29:48 +0000
ROA not before:           Tue 01 Sep 2026 10:29:48 +0000
ROA not after:            Mon 30 Nov 2026 11:29:48 +0000
asID:                     40021
IP address blocks:        207.244.224.0/20 maxlen: 20
                          207.244.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:07:8c:cc:87:1b:9f:02:80:e2:e6:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba5e814e-0ab8-4257-8c39-4091cb3be269
        Validity
            Not Before: Sep  1 10:29:48 2026 GMT
            Not After : Nov 30 11:29:48 2026 GMT
        Subject: CN=79bdc7f5-3e6d-4f6b-a28d-d50787be3d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5b:36:ad:c6:9d:cf:43:55:a6:57:a4:5f:6b:
                    b8:41:20:95:ef:09:b6:5f:23:a7:15:50:3b:67:26:
                    fc:36:c0:36:54:86:5b:ac:96:25:99:52:3f:e6:f9:
                    44:ad:7c:5d:db:00:6f:a5:76:a5:90:1e:bf:4d:25:
                    6b:38:25:f6:10:fb:33:88:03:67:7e:64:5c:7a:97:
                    ac:df:0a:6f:af:82:08:c1:5b:84:ef:44:88:cc:f1:
                    5b:92:7c:f8:6f:95:6f:1f:15:80:4c:ff:1a:e1:9a:
                    48:ad:33:50:cb:69:fc:14:5a:70:15:3a:cc:64:e5:
                    c2:b8:e8:46:a9:db:d3:47:d2:c4:f4:f6:86:b0:41:
                    09:39:47:14:32:e0:30:4c:81:f9:cd:4d:01:52:f1:
                    ca:10:e2:6c:0d:cc:c1:08:e8:49:1e:0a:c8:c2:9a:
                    fa:f4:30:7d:1e:23:88:41:31:3b:25:ef:64:77:4b:
                    0b:6c:d6:8b:3a:c3:9d:f7:ed:3d:ee:a6:cf:17:b0:
                    1b:41:8a:3c:cd:d2:43:62:bb:85:fc:92:a2:d3:a3:
                    94:34:d7:2a:7d:33:1a:54:13:02:c4:50:26:95:26:
                    cc:19:26:1c:55:dd:64:20:76:e1:a5:ec:34:8e:ce:
                    7f:ea:a2:74:81:c2:20:c6:29:2e:28:a7:af:8f:99:
                    2a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CD:49:DF:F5:B0:98:4A:40:25:9B:FD:4D:C9:54:7C:C5:CC:0D:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/c3085ad5-7048-34fd-a7cd-47dea2c93fef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl

            X509v3 Authority Key Identifier:
                keyid:62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.244.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:5f:df:00:62:cd:5d:87:65:74:39:6f:d7:60:a1:4c:04:c2:
         ca:80:4b:e2:33:68:ec:07:ad:12:1e:27:75:fa:b0:91:bd:ce:
         29:70:43:95:59:17:1d:d1:8c:88:43:e5:a6:36:ad:3a:8c:5c:
         42:78:0b:ae:eb:59:1a:58:db:9f:d4:aa:d4:8a:11:40:3e:fb:
         27:7d:15:c7:bf:d5:67:4e:0a:99:6c:0d:8f:75:37:bb:fc:ae:
         64:d9:c2:a9:04:7c:c5:50:3e:2b:51:8b:ae:67:81:16:4f:c9:
         12:26:e6:33:d6:50:31:4d:61:2d:d1:61:f5:47:2c:61:9e:4f:
         2d:b5:bf:e1:07:98:ea:b6:a9:51:38:f6:84:32:c0:bf:69:e9:
         cd:82:4c:88:b5:86:b4:e5:6a:ca:c3:2a:e2:89:35:ba:01:05:
         a9:79:d2:70:08:f7:73:5f:f0:a0:79:e9:db:63:5f:15:4a:3c:
         b6:66:19:42:cd:19:28:50:c0:6c:96:65:f9:44:9d:e4:a5:4f:
         16:5c:7b:09:ea:7b:bb:32:47:50:75:79:7a:7d:46:e4:07:dd:
         81:1c:de:22:68:05:1d:70:93:63:2a:01:04:d3:0b:c2:d1:97:
         bb:17:bf:2c:4f:07:24:63:8d:19:a6:b3:82:ae:ca:6a:cd:a6:
         dd:aa:25:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8HjMyHG58CgOLm4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmE1ZTgxNGUtMGFiOC00MjU3LThjMzktNDA5MWNiM2Jl
MjY5MB4XDTI2MDkwMTEwMjk0OFoXDTI2MTEzMDExMjk0OFowLzEtMCsGA1UEAxMk
NzliZGM3ZjUtM2U2ZC00ZjZiLWEyOGQtZDUwNzg3YmUzZDJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1s2rcadz0NVplekX2u4QSCV7wm2XyOnFVA7
Zyb8NsA2VIZbrJYlmVI/5vlErXxd2wBvpXalkB6/TSVrOCX2EPsziANnfmRcepes
3wpvr4IIwVuE70SIzPFbknz4b5VvHxWATP8a4ZpIrTNQy2n8FFpwFTrMZOXCuOhG
qdvTR9LE9PaGsEEJOUcUMuAwTIH5zU0BUvHKEOJsDczBCOhJHgrIwpr69DB9HiOI
QTE7Je9kd0sLbNaLOsOd9+097qbPF7AbQYo8zdJDYruF/JKi06OUNNcqfTMaVBMC
xFAmlSbMGSYcVd1kIHbhpew0js5/6qJ0gcIgxikuKKevj5kqYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOjNSd/1sJhKQCWb/U3JVHzFzA3YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVl
ODE0ZS0wYWI4LTQyNTctOGMzOS00MDkxY2IzYmUyNjkvYzMwODVhZDUtNzA0OC0z
NGZkLWE3Y2QtNDdkZWEyYzkzZmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmE1ZTgxNGUtMGFiOC00MjU3LThj
MzktNDA5MWNiM2JlMjY5L2JhNWU4MTRlLTBhYjgtNDI1Ny04YzM5LTQwOTFjYjNi
ZTI2OS5jcmwwHwYDVR0jBBgwFoAUYjmNy9I6HAZK1G+WyMwCOpPDFSYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVlODE0ZS0wYWI4LTQyNTctOGMzOS00MDkx
Y2IzYmUyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFz/TgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABpf3wBizV2HZXQ5b9dgoUwEwsqAS+IzaOwHrRIeJ3X6sJG9zilwQ5VZ
Fx3RjIhD5aY2rTqMXEJ4C67rWRpY25/UqtSKEUA++yd9Fce/1WdOCplsDY91N7v8
rmTZwqkEfMVQPitRi65ngRZPyRIm5jPWUDFNYS3RYfVHLGGeTy21v+EHmOq2qVE4
9oQywL9p6c2CTIi1hrTlasrDKuKJNboBBal50nAI93Nf8KB56dtjXxVKPLZmGULN
GShQwGyWZflEneSlTxZcewnqe7syR1B1eXp9RuQH3YEc3iJoBR1wk2MqAQTTC8LR
l7sXvyxPByRjjRmms4KuymrNpt2qJew=
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:48 2026 by rpki-client