Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc889eca-9ca2-3614-a66c-3caef4c0dc95.roa
File:                     bc889eca-9ca2-3614-a66c-3caef4c0dc95.roa (raw, json)
Hash identifier:          Tfp2MmMFcbf1xHRy0Rl2If3ufShGecQkLuY4Z/FQRrQ=
Subject key identifier:   BD:C3:EC:AB:69:D7:69:19:69:B3:8C:F8:B6:1D:D4:41:17:19:B4:7F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE8697B0B19A4DBFC6B12400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc889eca-9ca2-3614-a66c-3caef4c0dc95.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33287
IP address blocks:        76.111.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:97:b0:b1:9a:4d:bf:c6:b1:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=a29d2bfe-584c-4e46-8fc7-8114f404a00f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f8:d4:f7:4d:09:7c:a7:35:38:9f:c9:9c:ed:
                    50:4d:a9:50:09:b1:b0:c5:2a:0f:96:9f:9e:01:a3:
                    db:b8:a3:9c:4f:34:14:ec:f0:ae:c0:05:13:18:c7:
                    04:3b:5d:5e:3d:95:30:b5:7b:ae:ea:44:3a:e2:12:
                    1e:1c:d6:2b:3a:54:24:fa:6c:61:46:18:26:0f:ac:
                    0e:7a:cc:da:51:47:17:41:19:e8:6e:2b:9f:7b:bf:
                    e0:8e:14:b1:1d:5c:d4:81:ce:e0:e3:98:35:45:87:
                    f7:6d:92:d9:50:f7:ae:8e:12:04:c7:1f:9d:bd:73:
                    86:76:2a:b7:7e:4f:ee:b3:2d:ae:5c:7b:9c:70:be:
                    b3:f5:72:a3:23:09:b7:f2:df:26:30:21:d9:de:c7:
                    2a:5e:63:ae:5c:86:11:47:bc:e7:4d:0e:61:70:18:
                    a6:02:92:b1:5d:bf:07:f0:6b:7c:c6:77:24:f7:7d:
                    3e:f5:c4:01:62:eb:63:07:cf:5e:8b:28:df:88:41:
                    45:80:40:50:3b:50:00:ce:3b:50:f7:df:6d:2e:85:
                    4f:83:28:f6:2e:19:79:17:19:d4:8d:01:bb:8c:32:
                    af:6a:6d:df:a4:26:39:dc:57:c8:45:89:1b:04:1b:
                    a0:1a:e2:bb:74:86:45:87:58:1c:59:bd:0a:f4:cd:
                    aa:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C3:EC:AB:69:D7:69:19:69:B3:8C:F8:B6:1D:D4:41:17:19:B4:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc889eca-9ca2-3614-a66c-3caef4c0dc95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.111.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:8e:bc:0a:44:a5:a4:f4:32:ad:00:02:4b:41:58:bb:3e:a0:
         6b:cd:98:ce:85:8b:e1:5c:36:e1:ae:b7:dd:98:49:11:2a:ba:
         24:32:07:86:a3:77:c6:92:5d:84:e7:d3:a1:13:1d:f4:57:4d:
         1a:ac:42:00:4a:70:20:38:94:5e:c0:5f:5b:39:46:b3:e4:80:
         73:c0:40:a6:e3:3a:e3:62:d4:20:ef:3f:ee:ec:04:5c:06:36:
         35:3b:3d:fc:68:79:cc:98:cb:39:f5:9d:76:99:3c:ac:90:4b:
         e4:a5:17:f9:19:63:30:92:04:a6:e8:cc:d8:f3:b6:bd:06:d8:
         3a:ee:0a:70:9e:6a:1e:09:7f:b9:cf:36:42:3d:a6:70:fe:f8:
         f2:eb:8f:81:70:eb:d2:77:65:63:bc:35:76:52:e1:3f:eb:8b:
         0f:92:44:4c:8e:61:21:ee:62:0b:08:0a:31:02:9a:02:f0:ca:
         f3:b0:24:d9:83:0a:6a:6f:bf:da:a6:a6:90:3b:15:a4:dc:fd:
         44:38:4c:a9:57:91:64:a5:06:ca:28:55:55:00:a8:9d:a4:2c:
         c4:aa:93:9c:a0:5b:ea:6c:ec:61:f4:82:4a:b4:e9:5a:50:51:
         b5:ce:5d:23:80:c3:53:f5:41:fd:a5:31:74:49:19:93:0e:31:
         7b:15:a1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:11:26 2026 by rpki-client