Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983/3b94ce38-1210-31dc-85a6-3b4bd5558b9b.roa
File:                     3b94ce38-1210-31dc-85a6-3b4bd5558b9b.roa (raw, json)
Hash identifier:          PXD6Wq3j1bqnXkxR9aukZEYuYR4MN3LsKEQJ8azBUpE=
Subject key identifier:   B7:93:5C:50:8E:44:C4:40:44:F1:6F:AA:33:51:46:6E:E8:A4:DF:3D
Certificate issuer:       /CN=bfab1614-ca9b-48b0-baa4-45a61bd07983
Certificate serial:       010D0C9F4328584D6AAAA7C8133E5059B397E9D0
Authority key identifier: 62:B0:C1:4B:1E:0A:D8:47:73:43:94:8F:C4:57:EF:60:68:40:6F:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983/3b94ce38-1210-31dc-85a6-3b4bd5558b9b.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     397635
IP address blocks:        146.225.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983/bfab1614-ca9b-48b0-baa4-45a61bd07983.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983/bfab1614-ca9b-48b0-baa4-45a61bd07983.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:a7:c8:13:3e:50:59:b3:97:e9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfab1614-ca9b-48b0-baa4-45a61bd07983
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=918bbb4b-0fe2-4a4c-9417-91176173118d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f3:17:39:60:77:88:09:4c:14:1b:e3:ab:b0:
                    5b:c4:24:7a:30:5d:d3:42:42:6f:53:d8:cd:b7:1f:
                    9d:54:19:dc:26:88:b2:fb:d7:64:c3:d2:fb:05:b5:
                    c2:80:4e:c2:a7:bb:5f:90:4d:5e:c7:14:a8:91:1b:
                    9c:8a:3f:7e:d9:e6:89:20:6e:74:42:52:b9:f9:bb:
                    0c:3b:da:e7:41:e9:75:45:d7:0a:b9:b6:b6:02:aa:
                    22:56:26:5a:10:3d:9e:2f:80:d9:50:cb:b4:77:e0:
                    b7:a5:cf:1f:61:55:93:15:1f:83:b9:13:b4:5a:02:
                    1c:a2:da:78:34:ed:19:ba:c9:59:d5:8c:c7:73:75:
                    fe:a8:c8:b1:44:6e:f0:cc:76:1f:53:e1:91:88:2e:
                    8c:8c:03:19:37:b7:26:71:93:04:39:6d:97:8c:77:
                    bf:19:71:f3:3d:61:4c:89:46:bd:12:b1:46:b0:bb:
                    f9:aa:96:60:47:7d:ac:01:f4:d7:2a:82:6e:69:18:
                    68:a4:2d:69:1b:ac:1f:2b:b7:c5:32:22:bf:52:dd:
                    ef:30:d6:98:69:e9:68:63:93:e4:9c:13:1a:f5:4e:
                    1f:c6:a0:6b:8e:e8:bc:60:98:e4:aa:52:46:8b:b6:
                    f3:05:81:6f:c1:8d:2a:40:13:fa:f3:f4:29:87:73:
                    b9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:93:5C:50:8E:44:C4:40:44:F1:6F:AA:33:51:46:6E:E8:A4:DF:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983/3b94ce38-1210-31dc-85a6-3b4bd5558b9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983/bfab1614-ca9b-48b0-baa4-45a61bd07983.crl

            X509v3 Authority Key Identifier:
                keyid:62:B0:C1:4B:1E:0A:D8:47:73:43:94:8F:C4:57:EF:60:68:40:6F:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.225.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:1c:86:11:8d:c9:81:48:c2:f4:a9:90:f1:c0:ee:20:b6:cb:
         70:78:d8:79:f8:ce:e2:06:48:3b:7f:55:1b:44:ef:e9:db:dc:
         5b:c7:72:4b:55:f5:36:dc:fc:92:10:0a:a6:7b:d4:2a:74:8f:
         9c:66:73:f7:79:5a:2a:e7:59:c3:e3:97:5c:2f:8b:66:f0:ae:
         4d:a1:16:73:86:50:6f:aa:2b:ad:6a:69:75:78:5e:e0:13:06:
         0f:62:16:72:17:d5:a3:56:ec:34:35:8d:4e:67:8a:4e:bf:ca:
         d6:9c:1e:70:e3:9c:88:5a:fd:2d:54:75:34:31:f3:04:2c:8f:
         18:1d:c6:30:69:b7:27:f7:b2:2a:7d:d9:87:64:ee:f9:9f:e4:
         74:34:c4:17:9f:33:78:b4:31:50:1b:89:59:e0:2e:4a:e3:80:
         54:67:30:7d:c5:df:0f:3e:46:be:a4:cc:50:46:04:42:7b:21:
         45:cf:63:93:f2:41:91:b2:a8:d9:2e:c4:9f:15:dd:ba:5d:21:
         69:a1:12:60:c2:91:45:1e:7d:01:95:97:aa:3f:dd:2c:31:dc:
         61:cd:4d:46:1e:3f:9c:57:79:57:6c:de:67:e0:fb:a4:37:7d:
         27:e9:40:44:f7:da:94:08:3a:91:70:e6:0d:95:b4:8a:e7:89:
         41:61:8d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:03:20 2026 by rpki-client