Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/ba07e058-475f-3cae-a965-ee16cbd03c5c.roa
File:                     ba07e058-475f-3cae-a965-ee16cbd03c5c.roa (raw, json)
Hash identifier:          ysWj4WzTyPY33bF51bKdE0T2d/8S8Xk5ZGTBYVNJ9mc=
Subject key identifier:   C1:68:2C:9D:09:65:FE:51:AC:79:9A:14:C8:CC:41:05:08:7E:8F:73
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584E1D328607089FC7CDBD3B0680
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/ba07e058-475f-3cae-a965-ee16cbd03c5c.roa
Signing time:             Tue 09 Jun 2026 11:48:45 +0000
ROA not before:           Tue 09 Jun 2026 11:48:45 +0000
ROA not after:            Mon 07 Sep 2026 11:48:45 +0000
asID:                     209888
IP address blocks:        199.235.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1d:32:86:07:08:9f:c7:cd:bd:3b:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Jun  9 11:48:45 2026 GMT
            Not After : Sep  7 11:48:45 2026 GMT
        Subject: CN=e4616f16-993a-4848-9b63-478bfd70503d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:38:b5:bc:bc:3d:1b:26:01:bc:40:f4:a3:4f:
                    9e:60:b5:2a:c9:d3:81:10:d0:a5:35:67:52:d1:27:
                    f3:12:7a:34:8b:f4:67:cf:cd:af:7a:e7:2a:c2:7e:
                    82:2c:31:50:93:8c:54:67:bb:05:3d:6b:ba:dd:3c:
                    af:f7:9c:38:17:e3:e4:2e:98:0f:28:b2:eb:9b:91:
                    a2:5f:cb:cf:b7:67:7f:35:58:bc:d3:01:e6:35:f2:
                    bb:54:c2:05:3a:28:fa:2e:bf:63:d0:06:7c:14:f1:
                    fd:44:c8:26:ea:37:58:18:84:70:c5:71:cf:1b:9f:
                    dd:83:c8:ee:38:e6:30:35:9c:1b:f8:61:d8:b0:46:
                    c5:ab:c6:8b:69:94:f3:3e:10:80:ca:64:52:7c:96:
                    51:33:1e:1c:4d:fd:6c:eb:71:5a:b5:76:b9:2c:eb:
                    9a:05:89:4d:4d:d9:3b:d0:f1:29:a4:6c:c9:40:30:
                    84:7a:b0:ac:67:c6:51:76:49:32:7e:85:87:6c:b3:
                    c4:3f:8c:28:9f:24:41:9e:de:a1:a1:1c:a0:a2:c3:
                    4f:62:0d:76:fc:c3:1e:ad:f7:0f:29:63:bc:30:fc:
                    a8:71:2e:4c:38:73:8a:da:11:29:95:ad:c3:aa:eb:
                    ad:fd:f2:1d:97:fa:33:8c:70:d4:23:43:49:21:2f:
                    cd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:68:2C:9D:09:65:FE:51:AC:79:9A:14:C8:CC:41:05:08:7E:8F:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/ba07e058-475f-3cae-a965-ee16cbd03c5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:1b:c3:a9:7a:b5:65:13:53:d1:12:df:ba:1e:82:b3:c8:74:
         31:83:ac:1a:3d:1d:15:00:72:02:ad:ed:0a:c8:20:06:33:71:
         1b:60:da:ee:bb:bb:4e:9f:2c:15:4f:45:72:2f:1a:69:e6:b8:
         3d:e1:ef:1b:83:da:bf:8b:94:43:12:73:3f:ef:e8:eb:a1:64:
         41:37:cf:71:5e:f0:e8:1e:94:72:64:03:dd:49:7d:b8:b2:a5:
         f4:c3:a1:42:05:9f:f9:dc:fe:b3:ff:59:f3:76:16:1a:00:31:
         74:7d:06:7d:39:04:45:fb:6d:4c:e5:31:38:4e:76:d2:a5:0f:
         0c:f5:51:cd:ad:6e:37:05:bb:a3:30:6b:eb:1f:ac:db:67:4d:
         0a:99:ae:5a:c1:c6:a8:b5:06:e5:48:b8:a1:bb:e5:80:4d:d5:
         ee:f9:06:1e:21:d5:5f:4e:33:11:d7:9b:b3:2f:1e:d6:ca:48:
         75:78:87:e6:9c:ad:93:9a:31:b8:d5:46:49:ac:dc:e9:f8:b6:
         bd:1e:fb:57:08:05:5f:cf:fc:2c:ec:3c:de:76:ac:f5:63:fa:
         44:db:92:ef:d2:da:90:11:c3:61:df:37:d7:c9:26:90:f7:5b:
         ea:4e:e8:ac:15:17:e9:b6:ac:8c:44:b5:b9:50:03:75:8b:ae:
         89:89:c9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:54:16 2026 by rpki-client