Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ba673ec9-7c73-3400-8360-e3f1d1159429.roa
File:                     ba673ec9-7c73-3400-8360-e3f1d1159429.roa (raw, json)
Hash identifier:          sB329khTLw8t21/wxfNJYTuqJV9Ur/jxKH0OOrcdmos=
Subject key identifier:   14:3A:87:B4:C2:0A:F0:35:CD:BF:04:09:98:E6:12:18:3C:67:4A:C0
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F43DD47B4D4D0578B59B98CA0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ba673ec9-7c73-3400-8360-e3f1d1159429.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        66.253.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:47:b4:d4:d0:57:8b:59:b9:8c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=1b99159b-c87d-494b-80ca-0cb425a5f43b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f4:e4:d8:d1:40:3e:55:6a:a2:82:fd:69:ec:
                    fe:e9:45:28:ae:9b:16:76:32:1d:ed:8e:e3:c2:01:
                    52:53:43:f5:40:cb:bc:52:b1:80:21:a4:9b:b8:b8:
                    d1:15:b0:d2:85:c6:97:a1:4d:2b:4d:47:08:bf:7a:
                    fb:45:9a:a2:fb:46:00:82:2e:73:93:26:da:32:c1:
                    ea:bb:f9:27:c9:48:9f:61:29:82:81:84:25:df:f0:
                    d2:47:51:b1:9b:f7:0f:d5:49:72:d5:54:4d:d6:cd:
                    f7:e3:8c:fa:5a:2b:48:20:a1:05:01:9a:00:3c:16:
                    5c:de:44:7b:45:c2:d4:39:fb:06:77:22:ce:3d:67:
                    c3:7e:e6:62:fc:af:91:9f:5e:d1:7d:89:a0:86:e3:
                    fb:be:23:9f:df:02:ed:6f:10:4b:1f:34:3d:32:28:
                    f5:b4:e7:5d:41:6b:13:ba:be:39:6b:5d:9d:0a:6f:
                    a7:86:cb:4c:08:26:40:22:8e:3e:b3:2f:df:34:2a:
                    d4:ea:02:b0:82:67:c2:4c:99:7a:d2:07:94:f4:f9:
                    7f:2e:5c:fa:56:4b:97:b0:fd:c2:10:71:f5:5e:b6:
                    76:2e:75:d8:c1:c2:de:86:76:44:8f:48:b7:50:f0:
                    1a:27:16:89:92:d9:16:82:6e:87:c4:7c:81:4d:8d:
                    5b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3A:87:B4:C2:0A:F0:35:CD:BF:04:09:98:E6:12:18:3C:67:4A:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ba673ec9-7c73-3400-8360-e3f1d1159429.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.253.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:0a:1b:72:c0:0b:88:0b:e1:2e:1e:e9:b7:15:4d:a5:85:f6:
         fa:12:2d:0d:f6:4c:17:4a:1f:61:53:3a:78:83:70:29:82:b0:
         2a:24:42:4c:fb:2b:9f:07:18:72:78:b2:4c:42:3a:db:58:b9:
         de:ff:f5:5d:e0:cd:43:08:af:c4:6e:08:20:3e:59:64:0f:2f:
         b9:1c:e7:7b:5f:b6:44:57:fb:93:9d:7c:f2:98:ac:d4:8a:9e:
         72:3f:fa:05:cb:6f:38:ba:a0:a9:a2:cc:70:37:7a:2d:0e:80:
         03:c4:3d:de:4e:43:b7:08:ec:f3:8b:a1:00:15:82:13:ca:1c:
         52:15:32:8c:a1:20:d7:fe:92:2c:91:44:97:c4:84:24:b1:e6:
         ae:10:50:b6:0b:1a:bf:d5:6b:01:74:b6:08:5a:00:53:dc:b5:
         42:67:9e:ad:49:dd:54:9c:02:2d:41:5b:20:97:b3:8d:15:97:
         cb:a7:ac:af:cb:69:ec:1d:64:a3:e7:f7:3c:00:d7:32:34:43:
         09:23:9a:b4:56:7d:06:25:5d:e3:99:48:46:4b:b7:dd:31:0f:
         01:16:b0:20:0d:1c:e5:c3:9c:b0:3d:4a:b2:4b:b2:c2:bd:00:
         c9:0c:2d:71:6f:08:e0:ea:4a:48:cb:7d:c3:8f:ef:71:21:de:
         c2:12:6f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:31:15 2026 by rpki-client