Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/8cf345e8-9e84-3b52-bb55-315ab80a1ebd.roa
File:                     8cf345e8-9e84-3b52-bb55-315ab80a1ebd.roa (raw, json)
Hash identifier:          hmtpcuy7U9TMdSYeo5kBTvekz3ZtxLZkyEf8A0MEikg=
Subject key identifier:   7E:32:1E:45:94:6D:8A:ED:AF:66:C4:35:9A:9A:56:39:94:28:2E:46
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584E210EF4C7714F8A955E985CC0
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/8cf345e8-9e84-3b52-bb55-315ab80a1ebd.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     14340
IP address blocks:        136.146.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:f4:c7:71:4f:8a:95:5e:98:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=39174b9a-4ae4-45dc-8a0e-cd356866065a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3c:58:dc:02:a4:47:77:41:b2:c3:e5:be:cd:
                    96:aa:b7:2e:32:9e:b9:99:67:54:4c:7b:41:7a:26:
                    09:5e:b8:0f:4a:b1:11:f0:08:a6:74:d6:98:a5:f5:
                    2f:88:86:9c:94:97:0e:2d:de:56:3e:52:cf:da:7e:
                    fa:44:5b:1c:d4:bf:ce:3c:7b:c8:91:c7:39:1c:f3:
                    ab:61:70:72:79:a5:d4:4a:1c:88:e2:b5:c3:eb:76:
                    3e:1a:c0:11:45:99:08:df:8b:ba:df:17:36:90:83:
                    ad:23:70:19:ec:b6:e9:95:46:3d:0a:5d:db:fd:0c:
                    d7:ea:f9:38:5b:3d:aa:ce:92:e4:ca:4c:b6:5d:f3:
                    85:88:58:5b:63:7b:9a:a7:89:78:d4:4b:a4:c4:79:
                    ce:45:fe:62:58:5d:31:46:47:b7:24:7e:c1:17:4f:
                    3a:a2:94:08:62:54:02:8e:4a:4e:cc:35:aa:15:5f:
                    98:17:3c:f9:5c:c3:da:45:a0:5e:85:85:a6:31:be:
                    31:f9:fa:0b:a4:24:b4:93:52:c9:fc:10:c4:b6:c7:
                    85:af:59:c6:15:51:7e:c9:39:b6:45:30:5b:f7:e0:
                    93:2a:75:f1:49:b8:85:fe:2b:5a:71:f3:68:ff:ae:
                    c9:63:aa:31:00:b2:7a:20:db:5b:22:b7:7f:2b:9d:
                    bf:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:32:1E:45:94:6D:8A:ED:AF:66:C4:35:9A:9A:56:39:94:28:2E:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/8cf345e8-9e84-3b52-bb55-315ab80a1ebd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.146.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:51:01:4a:cc:8c:b7:ae:ea:b2:d3:dd:07:52:ba:b4:7d:d1:
         9e:db:d5:cc:ae:4a:2c:e7:b1:7c:f9:cf:44:34:a5:05:84:64:
         da:24:07:98:74:37:41:4e:0b:b9:9f:2a:5c:6e:7a:c7:0f:6e:
         57:6e:fb:6f:6b:b5:e9:2f:0a:a2:60:2c:04:b1:7e:6d:70:0c:
         ab:7d:d3:64:3e:f9:c8:66:cd:4b:f7:07:ee:80:1d:1f:ec:f5:
         78:77:5c:ce:85:e7:34:29:aa:ad:7e:2d:ba:de:a2:3b:19:eb:
         50:18:6b:e7:aa:eb:c4:7d:c4:2a:9a:3e:03:17:b2:15:96:f1:
         5d:25:29:25:a9:7e:a3:77:d6:ae:78:d8:e6:c1:58:a6:cc:c8:
         cb:fe:6e:86:08:e7:7c:29:7e:42:b8:23:85:6f:e1:70:fd:b1:
         63:45:e6:e3:54:1f:b1:37:52:8e:fc:61:5a:68:a6:a8:b6:20:
         f5:63:75:ed:5e:fd:73:df:89:bd:1c:37:a1:6b:68:9f:69:21:
         fb:1d:49:6e:2f:7d:0f:bf:28:b2:5b:f3:55:bc:25:d8:e2:1e:
         14:2d:e1:46:03:7e:15:ed:df:d0:63:ee:e1:a1:7e:4d:76:6f:
         68:d4:9b:5b:bd:e4:17:b8:bf:26:95:83:a0:ff:c6:14:22:d8:
         ee:46:b8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:21:15 2026 by rpki-client