Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/64a1f854-1dc6-3d51-8647-8b987169509e.roa
File:                     64a1f854-1dc6-3d51-8647-8b987169509e.roa (raw, json)
Hash identifier:          bguAnD5nYf6G34yprcB66jxtzjYRp66kelfRRjGHXsA=
Subject key identifier:   33:5F:73:62:D3:E8:AD:C8:82:C8:32:24:11:2E:7B:46:24:75:63:35
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584DDFEB233E281F922483054200
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/64a1f854-1dc6-3d51-8647-8b987169509e.roa
Signing time:             Mon 18 May 2026 13:00:31 +0000
ROA not before:           Mon 18 May 2026 13:00:31 +0000
ROA not after:            Sun 16 Aug 2026 13:00:31 +0000
asID:                     16509
IP address blocks:        170.139.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:df:eb:23:3e:28:1f:92:24:83:05:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: May 18 13:00:31 2026 GMT
            Not After : Aug 16 13:00:31 2026 GMT
        Subject: CN=3f4ba325-aa19-46d6-9e9c-cce9a9658b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:29:c7:55:f6:79:93:83:2b:a5:2c:01:c9:7b:
                    d7:b0:69:5a:41:73:cb:b0:8f:1d:04:19:6a:30:26:
                    95:5d:ac:23:31:9d:45:6c:2e:95:e9:bb:d7:87:44:
                    98:f7:cf:9b:41:d5:46:2b:a1:52:ff:01:df:e9:c7:
                    66:f8:ee:35:7e:9d:49:c3:52:29:74:e5:58:03:68:
                    61:f0:75:b0:8b:79:16:0f:ed:82:45:5d:2a:0c:bc:
                    1b:5d:f2:92:c9:96:79:56:46:33:dd:44:04:b7:74:
                    b7:24:cc:a0:8b:0e:4e:df:4c:92:e5:00:d1:4e:ce:
                    b9:4c:cc:b2:52:d1:5e:c2:3e:2b:65:98:6e:8b:88:
                    3d:d8:1f:78:52:55:12:df:b1:41:71:ce:f9:7e:c5:
                    0d:02:ee:b8:52:05:a0:00:2d:1b:46:b0:e8:58:49:
                    e9:31:c0:c4:5e:63:b9:0f:b2:2a:e3:62:19:b8:93:
                    59:16:3b:f9:0d:74:c2:64:be:1f:83:38:c5:96:8b:
                    fb:54:1b:bb:b5:15:b8:af:8f:af:ea:3f:f7:62:e2:
                    ab:8e:38:09:7a:06:1c:80:6e:d9:b7:d6:28:73:4b:
                    5d:1e:16:c8:f8:b4:b1:2d:c5:77:3f:c3:e7:9d:cf:
                    47:e9:a2:4c:af:3b:bf:fa:60:53:03:29:65:fa:ad:
                    bc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5F:73:62:D3:E8:AD:C8:82:C8:32:24:11:2E:7B:46:24:75:63:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/64a1f854-1dc6-3d51-8647-8b987169509e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.139.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:d5:22:e3:e1:22:17:54:1f:0b:78:6e:4f:e5:c3:87:da:35:
         ee:94:50:f0:2a:8e:b8:08:e0:1a:63:82:4d:ac:a3:ef:4d:3b:
         79:a8:3c:8b:8e:7a:fb:59:c2:0b:04:f6:b2:53:46:ad:25:36:
         da:36:8b:8f:44:04:7c:d4:ae:57:67:a0:a8:78:7b:4c:51:b6:
         9c:b1:89:b2:b7:b6:70:4e:e5:75:79:89:97:83:0a:44:b7:44:
         7c:d3:02:88:86:31:ef:cb:0a:64:ce:da:53:a9:7a:6a:09:08:
         d1:61:4d:14:0a:de:74:5b:75:50:0d:3f:ea:2b:41:ea:0b:57:
         b3:51:4b:de:bb:f0:24:63:1c:46:4c:d9:36:15:38:d3:a2:ef:
         9b:4f:a9:c0:e5:29:7f:eb:41:79:61:ce:c9:fe:91:f7:01:69:
         71:0a:c5:cc:c0:cb:29:6c:dd:06:1f:ad:09:78:38:a4:d5:ed:
         67:9d:56:8a:18:d4:8e:32:4a:f1:f2:64:e1:a2:6e:74:73:04:
         f5:27:ca:87:e7:d8:b8:6e:f0:23:84:91:b2:27:93:92:3d:c6:
         a9:8e:21:78:aa:b8:77:6a:e2:62:19:01:9c:e0:04:5b:0e:43:
         40:ea:2b:85:37:26:c9:3a:bc:c3:da:2c:1a:30:f0:6f:cf:53:
         dc:e6:1a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:57:43 2026 by rpki-client