Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/ba4b6a0d-fed6-37b5-a4ca-5fb2c5f860e8.roa
File:                     ba4b6a0d-fed6-37b5-a4ca-5fb2c5f860e8.roa (raw, json)
Hash identifier:          mX5F1EV7/GBCSaV4EJND3e7XNOn+boJa4qJPQB1fk7w=
Subject key identifier:   AE:D5:8E:13:D3:EE:B6:D9:93:5C:3F:E3:66:EC:81:B1:B8:C3:B9:94
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F4328584EA79C47241A34224B60DE87F4
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/ba4b6a0d-fed6-37b5-a4ca-5fb2c5f860e8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     213867
IP address blocks:        204.155.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:47:24:1a:34:22:4b:60:de:87:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2091eb64-6652-488f-9ebb-ceb59710e387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:33:d0:1e:6f:51:4b:20:51:4e:a0:77:3f:c6:
                    da:c8:ed:fa:41:cb:60:71:9f:2a:cc:93:d3:7f:6a:
                    b1:c3:db:58:17:a0:87:a3:57:50:22:d0:e3:e5:25:
                    ee:17:68:2e:54:20:63:ff:ec:90:a9:25:98:6d:95:
                    0e:77:56:af:32:ba:3c:7f:50:cc:a4:4a:36:2a:51:
                    ec:4d:bc:79:b5:22:88:12:ef:66:65:ee:99:30:8e:
                    b0:56:7c:40:62:8d:ff:4e:28:6f:33:98:19:b0:6f:
                    02:52:64:14:54:ae:58:57:c7:26:c9:bc:45:68:4e:
                    29:70:80:a3:4e:52:52:22:41:c4:c9:58:c0:a4:5e:
                    50:f3:b3:1a:ae:cd:8e:13:db:19:95:e1:ee:95:1b:
                    59:1a:03:ea:e8:94:e5:2a:5f:15:d1:ab:92:5f:2a:
                    ab:14:01:f8:ef:af:e9:72:69:37:dd:8c:a5:35:6e:
                    d8:1a:29:14:64:9a:00:17:41:9a:63:ce:24:52:db:
                    fa:70:5d:51:29:0c:d6:99:e6:a9:4f:b2:af:89:1a:
                    70:5f:6c:7a:04:2c:5d:50:6f:53:3d:8a:cc:c8:73:
                    fa:d5:41:d5:8e:57:ad:a9:81:be:11:7f:12:7b:f8:
                    f0:b1:bc:eb:f7:7f:b1:db:56:7d:03:e1:5a:77:a9:
                    1d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D5:8E:13:D3:EE:B6:D9:93:5C:3F:E3:66:EC:81:B1:B8:C3:B9:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/ba4b6a0d-fed6-37b5-a4ca-5fb2c5f860e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.155.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a4:e4:39:03:da:27:de:84:36:7b:09:70:c6:81:c9:34:b8:
         74:8c:85:c5:b2:8a:6d:23:32:78:64:08:c4:be:c6:c6:57:db:
         d4:00:ac:21:3e:a3:8c:0e:dd:b2:38:13:2e:7d:b5:b8:ea:01:
         d2:4a:b5:2d:9f:23:aa:25:d5:f6:b0:cf:38:bc:4a:ae:b1:ad:
         b1:de:e8:09:18:63:43:f8:f3:20:63:90:d1:5b:a7:0e:f8:41:
         58:cf:83:c1:cc:61:29:bd:06:eb:55:76:1f:98:0f:60:2b:94:
         83:6b:d2:8b:fd:a2:20:cc:9d:f1:e8:f7:ae:96:d8:71:7b:08:
         24:73:8b:ab:b3:2e:e5:fa:f0:16:1c:58:10:e5:1a:92:68:c5:
         17:de:ea:83:2b:fb:1a:13:d1:72:75:a2:2a:1a:25:7a:40:c2:
         43:94:61:59:bb:39:1c:aa:7b:28:88:9f:7d:38:32:d2:92:f8:
         1e:aa:b0:93:82:ed:cb:bd:5a:4b:0c:0c:e1:e6:46:af:a7:20:
         70:79:c9:1c:cf:f2:3f:2c:77:a7:29:5d:06:3c:54:2a:87:32:
         10:26:52:fb:41:4b:1a:eb:71:1a:42:e0:3e:e2:1e:b6:81:85:
         b4:16:52:7c:8c:c5:c3:61:9d:32:d0:20:68:92:45:ea:f2:05:
         d5:59:f9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:51:18 2026 by rpki-client