Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/426fe59f-41f8-3a5b-a799-ac686dd0fec3.roa
File:                     426fe59f-41f8-3a5b-a799-ac686dd0fec3.roa (raw, json)
Hash identifier:          av0ynRrkq4b1JaN+UsJibNYVzZw6DgiYgEkR2t7Vsgg=
Subject key identifier:   8E:99:F8:5A:26:19:6F:81:36:99:4A:05:12:4F:1C:04:AB:27:42:9F
Certificate issuer:       /CN=ba461ed6-9748-4005-b669-8946003e1ae1
Certificate serial:       010D0C9F4328584A9E9620DAF99EE998306F6F80
Authority key identifier: 86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/426fe59f-41f8-3a5b-a799-ac686dd0fec3.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     4246
IP address blocks:        128.235.12.0/24 maxlen: 24
                          128.235.13.0/24 maxlen: 24
                          128.235.85.0/24 maxlen: 24
                          128.235.159.0/24 maxlen: 24
                          128.235.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:20:da:f9:9e:e9:98:30:6f:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba461ed6-9748-4005-b669-8946003e1ae1
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=ca8a40cc-4a62-4d0a-a846-424630731aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:12:2f:cb:6a:b8:bc:3f:05:2d:07:df:11:92:
                    d2:58:31:af:a1:00:fa:a9:8f:01:78:a8:24:7a:33:
                    15:1f:43:7d:dd:14:09:bd:2b:6b:79:b1:68:e0:50:
                    29:8a:0b:5b:d5:19:d2:7d:29:c2:50:04:87:80:78:
                    2c:25:dc:39:63:38:0f:4e:de:58:e1:4c:40:86:30:
                    d6:b4:06:bb:48:e4:1d:25:26:b0:67:ee:f6:30:3b:
                    ee:ab:dd:b8:54:3b:3b:d9:06:43:b7:ad:19:28:7d:
                    32:09:85:9a:97:38:14:53:dc:30:13:5f:8e:4f:5a:
                    db:ed:75:f5:62:d9:23:72:55:fd:82:2b:fb:ab:fa:
                    3e:21:af:7d:43:8f:88:f2:61:87:b4:7f:69:0a:ef:
                    b9:6d:74:89:f8:d8:08:f2:e4:8d:59:ba:09:75:ee:
                    64:61:ba:42:24:92:4a:a1:3d:fc:d2:f4:e1:ef:aa:
                    18:db:a1:7d:92:82:7e:9b:07:ed:a7:50:b8:29:fe:
                    3f:7f:bb:60:20:9e:6f:b6:56:2b:02:77:3b:ee:ef:
                    cb:03:ba:a8:5b:a0:f5:ec:19:2f:b6:c9:26:c2:1e:
                    5a:c1:1a:3a:3d:76:26:86:d7:29:03:d4:5b:3d:b8:
                    ed:f2:e1:31:0f:93:c2:44:3a:f0:bf:86:17:9e:e3:
                    27:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:99:F8:5A:26:19:6F:81:36:99:4A:05:12:4F:1C:04:AB:27:42:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/426fe59f-41f8-3a5b-a799-ac686dd0fec3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl

            X509v3 Authority Key Identifier:
                keyid:86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.235.12.0/23
                  128.235.85.0/24
                  128.235.159.0/24
                  128.235.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:be:a8:73:eb:a1:56:da:22:d5:1a:ae:d9:fe:6e:7a:5b:e1:
         99:76:36:bc:01:0e:98:11:13:be:ef:f8:ce:2f:d0:cc:01:5e:
         74:54:0f:9f:3e:7a:9b:6c:9c:63:ca:bb:1b:b9:7f:8f:e5:49:
         d4:2e:a0:55:47:5a:07:b6:3d:1b:4c:32:d5:6a:7e:d6:53:5e:
         1c:5c:06:19:8e:f9:90:99:8f:a8:33:ca:07:b6:18:39:4e:7d:
         91:c0:b6:ea:61:45:d7:27:65:1d:41:9e:ce:ae:3d:7c:f8:07:
         9e:d4:7f:62:e2:f2:52:90:a2:b3:05:41:57:3f:04:3a:e5:b2:
         28:39:15:f4:a6:61:98:3e:d8:ba:ac:24:59:83:8b:62:c3:6c:
         61:55:30:22:b7:3f:84:77:cb:07:6b:83:3c:60:0f:d9:47:04:
         24:27:59:7e:49:bd:b6:7e:9e:86:c1:77:81:84:ad:87:81:3f:
         6e:14:42:f4:a5:86:08:9d:ea:9e:cb:2b:57:0d:78:0e:6a:46:
         bd:95:4b:c4:27:98:6f:5e:bd:89:3c:1b:80:b6:a3:fd:9b:1e:
         c3:ca:c0:d3:fc:18:64:76:a8:6f:7e:cd:96:a9:97:ab:ea:40:
         91:61:de:99:4c:d9:c8:23:ec:03:af:df:74:2a:9a:7a:af:73:
         66:6c:73:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:36:19 2025 by rpki-client