Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/5c9511ee-140a-3e15-aa57-d189e7ae07d5.roa
File:                     5c9511ee-140a-3e15-aa57-d189e7ae07d5.roa (raw, json)
Hash identifier:          yUqPXkSnFya/ASU56G0hgY/xJMaiPVwxNh/Lzn1Kt+8=
Subject key identifier:   79:06:C4:C0:01:C8:CB:04:31:0A:E8:EA:3E:FD:E4:EB:CD:B9:23:B6
Certificate issuer:       /CN=baff326b-1f24-468c-b9c6-fa089a461350
Certificate serial:       010D0C9F4328584D02179F86D64A0B3186954000
Authority key identifier: 05:2D:96:20:77:4E:FD:BC:47:2C:1C:A1:09:8E:5B:31:5D:1C:FC:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/5c9511ee-140a-3e15-aa57-d189e7ae07d5.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     395776
IP address blocks:        107.163.0.0/19 maxlen: 24
                          107.163.32.0/19 maxlen: 24
                          107.163.64.0/19 maxlen: 24
                          192.155.160.0/20 maxlen: 24
                          192.186.0.0/18 maxlen: 24
                          192.250.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:9f:86:d6:4a:0b:31:86:95:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baff326b-1f24-468c-b9c6-fa089a461350
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=dc497518-23c4-400e-91f7-90a84ae2719d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8d:07:7e:c6:4f:72:0b:06:ca:29:15:b2:7f:
                    bf:f4:1d:20:14:2a:e6:42:77:2c:42:23:ef:de:d0:
                    e4:70:c3:11:68:15:3e:47:41:b1:05:9f:57:1e:1e:
                    a4:0c:d0:c5:dd:fe:45:16:85:8b:d4:f5:ad:bc:d9:
                    f1:17:97:68:72:c6:48:8e:b9:e4:4a:7f:2e:19:4d:
                    f2:fc:38:eb:70:d9:c5:e5:7d:86:08:e0:78:94:a6:
                    79:4e:15:1d:aa:32:20:8e:d5:c0:f7:df:8d:6b:b1:
                    21:41:b6:41:b3:23:b0:98:54:a2:42:a0:2b:5c:5b:
                    3b:fd:e0:5c:9c:81:f2:77:da:7b:7c:49:70:60:4f:
                    cd:b6:0a:8b:0c:44:82:28:bb:fd:c0:b9:b1:1f:de:
                    2c:4c:ba:b8:2d:60:61:fd:be:6c:81:63:76:96:54:
                    62:fa:88:59:d1:8d:7e:02:79:68:96:68:50:e1:99:
                    bd:e6:0b:30:f1:9c:88:d2:3d:15:80:f0:ca:b7:80:
                    b6:39:63:8b:d0:89:a0:f8:ef:fd:38:ce:f7:72:ca:
                    d9:3f:3a:76:4f:1b:d3:16:ad:fc:0e:c8:d4:72:ee:
                    8c:10:45:5c:51:da:ff:20:be:ad:d2:eb:3a:e0:00:
                    2a:6d:6c:62:02:9d:de:1b:30:1b:2e:10:97:4a:e3:
                    c2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:06:C4:C0:01:C8:CB:04:31:0A:E8:EA:3E:FD:E4:EB:CD:B9:23:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/5c9511ee-140a-3e15-aa57-d189e7ae07d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.crl

            X509v3 Authority Key Identifier:
                keyid:05:2D:96:20:77:4E:FD:BC:47:2C:1C:A1:09:8E:5B:31:5D:1C:FC:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.163.0.0-107.163.95.255
                  192.155.160.0/20
                  192.186.0.0/18
                  192.250.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:57:f9:18:07:6a:ef:e0:cc:36:93:5f:27:05:1a:82:87:ee:
         81:e6:2d:de:97:bf:08:d3:0b:d8:30:10:d2:1e:37:08:7b:71:
         12:1e:32:20:10:c0:21:6a:01:e4:bf:ea:b5:94:db:c8:49:4c:
         0f:71:e0:22:a2:9e:81:28:cf:99:fa:74:92:af:ea:e2:89:de:
         fb:4e:ca:37:c3:7a:58:3d:4f:db:2b:8d:a3:ca:d5:da:08:bd:
         21:a3:8c:45:a6:ff:dd:52:1f:44:7a:64:32:ce:dc:a7:55:8d:
         e8:07:6c:b1:21:e3:33:d5:20:78:59:c8:09:a1:37:0d:f1:ef:
         4e:46:65:be:b2:47:d7:19:96:fa:8a:94:6d:ea:98:c8:37:a6:
         c1:86:5f:25:90:01:98:62:4e:3b:b1:ba:70:85:57:53:9a:57:
         94:b3:e5:1d:e1:8a:b0:f7:bd:63:b4:2f:16:fa:00:c3:23:d6:
         4c:cf:2d:39:cf:03:d1:3c:51:af:90:fb:c9:ad:e0:6d:67:ab:
         81:57:a8:6a:95:e5:1d:aa:d9:35:88:83:cd:a3:85:01:dd:fe:
         58:eb:44:2c:53:f4:22:ef:c2:f5:5d:11:d5:9a:97:a1:0b:b2:
         e1:ed:58:1e:30:eb:34:c8:63:00:57:10:95:27:01:7d:cf:4d:
         c0:f6:9e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:35:49 2026 by rpki-client