Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/baef8468-3f58-3bbe-b21b-0654fc798773.roa
File:                     baef8468-3f58-3bbe-b21b-0654fc798773.roa (raw, json)
Hash identifier:          A2F+TEdkus1CLElBEy+i+zF9sMSbupZu+DT6UustvL8=
Subject key identifier:   19:C6:02:F9:49:FC:F9:23:B3:D7:E9:E2:66:25:A6:36:FB:7D:96:FE
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584F1CC7C0152823D4EDC816ACAA
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/baef8468-3f58-3bbe-b21b-0654fc798773.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     14618
IP address blocks:        170.114.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:c0:15:28:23:d4:ed:c8:16:ac:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=519d3e43-9044-4305-8787-e1e80a52e4d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3a:ca:a6:f7:36:96:c2:54:76:69:54:bd:34:
                    cb:91:f6:86:0d:59:4f:7a:2c:53:bf:dc:0a:9a:8a:
                    9a:a4:03:bf:d8:5f:aa:3f:23:a2:87:5c:62:42:59:
                    4b:f7:4e:ee:95:16:1a:89:22:51:9b:aa:7a:89:57:
                    69:8a:21:fb:cc:16:6e:6b:74:72:03:9b:0f:f1:1c:
                    3d:70:8f:3c:73:df:b7:9a:96:9d:4f:53:a5:b0:62:
                    93:18:53:2b:23:5f:82:a9:17:27:6f:e5:95:4b:2a:
                    43:5b:1c:a3:e9:ae:3a:54:8d:a3:d2:65:d1:04:6f:
                    b6:68:76:a8:be:c4:f9:0b:c0:e4:1e:30:9f:e6:8a:
                    8d:df:ba:3b:d1:02:0f:22:75:e3:6b:de:0b:37:17:
                    28:cb:7d:bb:7d:5b:36:f8:c1:5f:c6:e9:0f:1d:da:
                    2c:71:bb:10:73:74:b5:ff:0c:7a:98:bb:e2:d6:12:
                    ac:0b:29:68:35:29:97:44:82:a7:6b:ef:bb:a7:47:
                    05:52:a9:be:a0:98:3c:68:24:8a:c5:35:2d:cc:70:
                    a9:46:5a:58:3f:ca:ce:d4:ad:13:25:4b:2b:99:04:
                    a4:93:03:33:40:ec:67:22:2d:e0:c3:3f:77:63:9e:
                    b6:fb:cb:ae:1c:46:7f:64:fe:f9:d9:28:03:9c:db:
                    3e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C6:02:F9:49:FC:F9:23:B3:D7:E9:E2:66:25:A6:36:FB:7D:96:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/baef8468-3f58-3bbe-b21b-0654fc798773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:c6:03:74:38:44:32:48:6f:22:2e:d8:ac:ec:87:fa:8a:42:
         a1:f6:5a:a2:61:a5:e0:a3:36:c9:82:2e:2e:a6:4b:4d:be:4a:
         f9:db:d2:35:ff:82:ef:90:86:b8:5e:8e:3e:5d:db:96:cb:1c:
         1d:3a:58:ab:ab:fc:13:b9:7f:7c:66:49:26:c4:11:66:6e:3f:
         b4:fd:b6:60:c1:12:00:99:a4:36:7c:be:eb:15:62:e0:8a:59:
         29:58:64:8f:f2:7e:62:2c:e5:1d:2d:14:05:ce:d0:1c:af:2f:
         7b:b1:9b:8b:58:0a:e8:58:9f:83:26:c4:1c:15:14:9b:9d:ac:
         aa:b2:a6:43:72:5a:be:08:35:66:de:f8:c2:92:82:6c:42:30:
         41:3c:c4:05:db:23:88:42:b0:50:a0:c0:c3:e6:42:c0:2e:3d:
         72:6a:d1:54:02:6f:04:d3:b4:ef:89:dc:7e:65:8c:1f:e8:62:
         a4:6b:51:09:6d:14:b1:a5:7d:03:bb:e8:f2:cd:90:63:ec:16:
         f2:d2:10:ae:fa:d5:1e:c4:28:32:54:96:bf:a3:ed:fa:89:4c:
         3c:ac:1f:d5:b3:83:57:a9:fc:0e:1c:aa:d4:7d:81:d9:a6:74:
         0b:1b:47:85:25:fb:66:10:86:90:e2:94:b0:84:fb:eb:6e:7a:
         f9:96:f9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:55:10 2026 by rpki-client