Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/696be498-e165-346f-bdfa-eba3ceb26950.roa
File:                     696be498-e165-346f-bdfa-eba3ceb26950.roa (raw, json)
Hash identifier:          /SBTLAzYXvoMKYfrzQYNyCk5JgjWspBGalUPcNJ5WGI=
Subject key identifier:   C1:57:69:DB:DD:BB:37:BE:70:B1:DF:0F:EF:8D:15:94:A0:56:CB:8C
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584F1B62494CFC720325BB3B5F00
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/696be498-e165-346f-bdfa-eba3ceb26950.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     36511
IP address blocks:        208.103.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:49:4c:fc:72:03:25:bb:3b:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=b7afda88-f6e1-4396-8b9f-9077e22e6e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e5:fd:e4:58:40:18:97:aa:27:28:a3:0b:08:
                    de:b2:06:4c:29:68:e6:e3:e8:64:19:ef:5d:de:65:
                    46:2c:b9:24:89:8d:d1:d0:30:ca:57:78:fe:c1:32:
                    5e:2c:a1:95:a6:6e:30:49:2b:6d:c6:a4:c5:8e:c1:
                    5a:1b:9d:b0:6d:14:1d:6a:8e:56:c9:bd:33:1b:4a:
                    d1:42:cf:1e:5f:62:62:13:fc:93:71:de:ec:8c:39:
                    fa:49:59:9c:68:45:21:ce:0c:3c:22:65:b4:3a:00:
                    49:ce:38:d2:a6:5f:d2:e0:c3:d6:a7:be:81:9e:c6:
                    2e:cc:6b:49:c8:18:e6:4b:71:4c:d4:c7:6f:24:fd:
                    51:e4:42:88:49:32:55:36:bd:c1:f9:49:68:49:06:
                    42:cb:8a:b2:cb:3b:2e:6c:5c:59:77:fb:57:fd:c2:
                    d1:a6:d5:3b:ca:f1:fd:a6:1b:17:e8:3c:b2:32:5b:
                    a4:e0:60:7f:20:0e:45:ab:6a:ce:95:5e:f4:75:12:
                    67:47:22:56:e4:a2:d6:db:aa:23:92:7a:d2:ac:9e:
                    06:5e:89:38:eb:62:5a:11:48:21:f9:4e:05:15:f4:
                    01:5b:21:7b:f3:6a:ba:7a:4e:9a:da:9a:03:0d:fd:
                    a9:2f:76:74:ac:0f:17:e3:24:54:77:bb:1d:37:d1:
                    ed:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:57:69:DB:DD:BB:37:BE:70:B1:DF:0F:EF:8D:15:94:A0:56:CB:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/696be498-e165-346f-bdfa-eba3ceb26950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.103.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:87:4b:5b:2e:db:d5:98:ae:18:dc:9f:dc:6b:e9:49:44:bb:
         30:8a:47:ef:b9:9a:ae:88:cd:2b:2a:b7:16:c0:e3:2e:58:a7:
         e6:de:65:3c:3a:9d:da:5d:55:9e:aa:5a:0a:89:6a:c5:d8:d3:
         10:e3:0b:2d:21:c8:b1:d5:dd:70:3c:28:c3:18:69:df:60:05:
         24:39:f8:cb:80:d3:91:23:1f:ef:8b:0f:dc:0c:68:47:1c:c9:
         cd:a0:67:4a:a6:dc:0e:e3:93:dd:0c:1d:23:69:b5:d1:4f:09:
         c9:82:39:02:01:2a:0f:28:bb:5e:b0:84:aa:a1:14:e0:df:8e:
         bc:23:2d:64:1c:5e:1c:83:c2:14:af:11:7c:b8:99:1b:ee:25:
         3a:89:68:f4:28:4d:4d:f1:e4:a1:f8:ee:0b:af:20:64:b8:84:
         11:15:00:4a:8d:0c:11:36:47:e4:de:93:d3:86:c5:e8:2b:37:
         80:5b:cb:67:c8:21:d1:9a:d9:aa:97:9f:98:c9:19:d3:53:ab:
         ad:28:05:52:6a:4f:04:b1:77:72:6e:5e:77:4d:e3:15:c0:7f:
         97:1e:59:44:6d:c6:52:b5:ad:59:42:d4:b2:a5:98:af:e0:c9:
         b5:9a:51:34:88:76:6b:1d:4b:2f:f3:75:3e:95:95:ec:0d:3a:
         42:f5:1a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:53:11 2026 by rpki-client