Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/ba1f3747-9264-318a-a209-7cea98135a76.roa
File:                     ba1f3747-9264-318a-a209-7cea98135a76.roa (raw, json)
Hash identifier:          1lA6xuvIQRDYZ95kEPlRsavqU2vIuk15I1W/8W5Js90=
Subject key identifier:   1B:1B:35:C7:51:60:CB:42:88:33:21:34:0E:77:4B:DB:51:D0:B9:F1
Certificate issuer:       /CN=1b1fd062-f802-4363-ad37-7232f990c625
Certificate serial:       010D0C9F4328584EA2DFD0F2EF951273B7135D80
Authority key identifier: D1:C9:01:FA:B8:1E:C7:B3:77:02:B9:4F:41:BC:05:A5:ED:94:7B:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/ba1f3747-9264-318a-a209-7cea98135a76.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     397593
IP address blocks:        158.51.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/1b1fd062-f802-4363-ad37-7232f990c625.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/1b1fd062-f802-4363-ad37-7232f990c625.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:d0:f2:ef:95:12:73:b7:13:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1fd062-f802-4363-ad37-7232f990c625
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=b604bdb6-7d20-4c62-9ece-3466b4aaa526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:47:0d:74:4b:d7:9e:03:13:59:e0:8d:72:7b:
                    22:b4:fc:a0:19:66:f7:59:2d:ae:f5:09:ac:cc:2f:
                    3c:91:da:8b:4a:e3:a4:83:04:10:99:39:90:4f:f0:
                    80:7a:be:e6:69:41:a4:72:1f:d9:70:7b:a9:3f:40:
                    01:47:5e:f7:f7:da:07:5a:00:04:91:56:14:4e:42:
                    5b:e5:62:fc:0b:c2:8d:1f:77:1c:22:89:28:69:a9:
                    74:16:fe:c7:08:80:bd:da:ce:f8:bb:83:26:39:e9:
                    5e:bd:f4:e4:bb:eb:d0:77:58:5a:4e:c8:96:7b:0a:
                    28:58:f5:e9:b5:a6:b7:90:c4:c3:7e:79:d0:f6:39:
                    fa:b9:6b:cd:88:4c:34:60:6d:80:35:39:a6:43:d0:
                    b8:f9:02:b2:f8:fc:aa:c7:ef:01:08:59:2c:19:db:
                    c7:2a:b1:1b:11:10:d3:3b:11:10:7b:9f:71:8a:5d:
                    59:7f:f5:f5:6a:40:89:7c:2c:bf:ce:b3:8e:75:8e:
                    94:37:0e:31:ca:8b:1e:fb:1b:dd:e2:b6:b3:fd:a6:
                    15:e0:e0:26:12:b1:07:38:9c:1c:19:23:6e:e9:97:
                    91:da:32:04:bc:fc:c8:36:f0:64:7b:5d:96:8b:7e:
                    e4:f6:23:bf:65:bb:0c:4b:b3:f0:a8:a3:af:67:0c:
                    dc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1B:35:C7:51:60:CB:42:88:33:21:34:0E:77:4B:DB:51:D0:B9:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/ba1f3747-9264-318a-a209-7cea98135a76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/1b1fd062-f802-4363-ad37-7232f990c625.crl

            X509v3 Authority Key Identifier:
                keyid:D1:C9:01:FA:B8:1E:C7:B3:77:02:B9:4F:41:BC:05:A5:ED:94:7B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:bb:25:43:76:59:53:25:3d:7a:97:58:72:7a:18:3f:f7:bd:
         a2:34:1d:5f:76:07:5f:10:0b:58:52:8e:2b:10:29:85:5d:52:
         2d:a6:85:e8:9f:dc:9a:55:de:35:6d:79:82:8f:53:78:91:e8:
         df:e8:01:63:7a:8e:87:f1:9f:12:99:4e:d4:60:fe:4b:23:22:
         b1:7c:e9:f5:bc:5a:07:93:37:7b:ea:4f:47:1f:7b:e1:20:70:
         06:38:fa:0e:f6:44:20:75:29:51:25:c8:b9:92:06:fd:81:ab:
         8d:6f:12:80:3d:02:f4:b3:38:64:3e:72:7e:6d:24:37:12:85:
         35:c9:90:bd:da:f2:2b:d0:35:e0:8b:16:5a:df:f8:97:96:c1:
         f0:c6:1b:9a:bf:47:81:8a:78:56:49:7d:2f:2e:fc:34:f2:c1:
         2b:5d:4b:74:23:d2:e2:37:52:8b:50:0c:3b:08:42:cc:38:ca:
         db:9d:3d:e7:a2:56:fa:61:d0:51:64:c6:d0:34:54:1e:a8:c7:
         a0:02:c6:84:13:9e:d5:c8:ba:3e:7a:94:62:8e:dd:92:2e:28:
         7f:f2:b0:8f:4b:3a:55:5a:ec:81:50:dd:0b:3e:d7:72:c4:ed:
         33:99:fc:05:19:ce:6a:c0:bd:83:81:b3:cc:7b:45:87:0d:cb:
         d0:27:d1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:35:24 2026 by rpki-client