Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/d9b3d2af-88b0-3b3b-a075-b21514d98bb4.roa
File:                     d9b3d2af-88b0-3b3b-a075-b21514d98bb4.roa (raw, json)
Hash identifier:          0jrJTF89dCPqlcLbU6IO3X0xafCSywrM0+HOytgYiSM=
Subject key identifier:   63:E2:88:39:8D:0B:02:63:BE:99:0A:0F:6D:92:BB:C6:B7:7C:8E:91
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584F23C25E7A2562E79DCB05B980
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/d9b3d2af-88b0-3b3b-a075-b21514d98bb4.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     33392
IP address blocks:        216.230.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:5e:7a:25:62:e7:9d:cb:05:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=9a68484a-4313-4e1a-bf7a-5d34a4f9a5d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ce:22:10:47:df:3c:bb:fc:62:de:78:1e:22:
                    65:4d:1d:3f:3a:ff:87:1c:e3:12:25:87:d1:10:fd:
                    ed:12:29:24:55:17:ab:0e:79:17:c8:f5:3d:d0:ff:
                    46:ac:ed:03:ce:ea:f0:03:93:f6:db:a4:ee:a5:d4:
                    6b:4d:da:12:73:29:ad:d7:f8:4c:95:d3:e0:ee:fc:
                    42:f3:93:b2:fd:f9:3c:53:3c:0c:2e:85:e1:3e:f6:
                    32:be:18:ca:16:45:69:c3:b2:b5:84:81:ec:02:af:
                    0b:90:38:fd:98:5f:e8:ba:3b:ea:ad:4d:b4:a1:48:
                    fb:93:b1:00:31:c1:47:33:69:22:c6:8e:69:91:08:
                    c5:32:79:59:e8:32:79:71:eb:f1:c4:0e:27:cb:92:
                    c8:c3:f1:d4:40:d8:36:56:b5:a1:66:12:25:66:b4:
                    36:f7:70:a6:5e:4a:a2:7e:2f:92:e7:99:e9:54:5f:
                    d0:39:12:0f:49:6d:11:95:c1:68:63:d5:41:98:d3:
                    8f:39:6b:03:13:00:12:18:cc:08:85:a2:61:8f:75:
                    41:40:ae:06:6b:71:a7:6a:64:dc:c3:2a:8b:60:08:
                    c5:62:2d:42:8c:c2:1b:8d:f1:e0:e4:51:d6:6c:49:
                    b6:2f:44:31:9e:9d:2f:91:f0:8c:5e:ee:7f:ef:fb:
                    0b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E2:88:39:8D:0B:02:63:BE:99:0A:0F:6D:92:BB:C6:B7:7C:8E:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/d9b3d2af-88b0-3b3b-a075-b21514d98bb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:06:4e:45:05:6a:26:ae:d2:c3:c0:cb:55:6f:74:ce:ec:71:
         51:fe:0e:e1:5f:15:42:3a:86:db:04:62:b3:50:44:b8:6d:cb:
         1c:12:34:58:3b:3b:cf:51:f9:22:3a:28:8c:3b:aa:d6:55:5f:
         18:74:75:89:ec:a5:50:54:7e:6c:cb:d9:de:10:9e:d7:36:fd:
         de:9b:1d:b9:85:33:e5:69:5b:f0:48:7f:53:94:b6:f1:3c:19:
         c0:1d:f4:36:26:67:e5:9a:1a:85:62:14:aa:3e:11:10:ec:9f:
         69:f1:f6:ca:94:92:04:02:f1:ab:3d:d4:f0:55:2c:35:26:a8:
         e7:44:1c:6e:c9:de:8c:59:f2:a8:0d:56:fb:8e:1a:49:bf:f0:
         0e:33:3a:e9:34:b4:20:aa:c4:fb:ea:8a:e1:e4:e7:48:04:2a:
         da:63:37:da:c5:08:74:ff:be:bd:5f:ae:69:27:b9:1a:c7:d2:
         ba:9f:6a:21:ae:66:42:db:36:c0:dd:8d:4b:d0:47:59:64:47:
         db:44:94:5d:09:7c:8c:77:0e:84:fc:e4:d1:4c:87:c0:b9:33:
         8d:38:ae:29:47:e9:66:6b:30:fc:21:0b:15:34:2c:cc:85:4e:
         6b:63:fa:cf:56:83:5d:40:ef:d2:fa:c9:bd:16:4f:c6:f3:d4:
         24:e4:4b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:13:58 2026 by rpki-client