Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/a5a61a2d-bf62-35dd-a58a-aa500e10dca8.roa
File:                     a5a61a2d-bf62-35dd-a58a-aa500e10dca8.roa (raw, json)
Hash identifier:          K4XTwdfr/+GThTDVDtGFpDs2hWRQxl1ESj9ztfAIBZA=
Subject key identifier:   A0:90:16:32:E9:2F:10:D8:AB:7A:EA:7A:0E:02:43:CE:38:55:21:12
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584E1A3BD47D5C9C182D51E0AD80
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/a5a61a2d-bf62-35dd-a58a-aa500e10dca8.roa
Signing time:             Mon 08 Jun 2026 10:20:05 +0000
ROA not before:           Mon 08 Jun 2026 10:20:05 +0000
ROA not after:            Sun 06 Sep 2026 10:20:05 +0000
asID:                     14618
IP address blocks:        31.99.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:3b:d4:7d:5c:9c:18:2d:51:e0:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Jun  8 10:20:05 2026 GMT
            Not After : Sep  6 10:20:05 2026 GMT
        Subject: CN=b8da6808-5111-4879-b5ee-24839c99e221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b6:2c:7f:ff:74:93:a3:59:f2:13:d1:7d:a6:
                    a8:a2:6c:cc:17:bb:98:b2:a0:6e:4e:21:83:31:b6:
                    77:79:44:69:72:9f:8c:a2:b7:99:b8:59:6e:62:e0:
                    c3:4c:51:f1:ba:9a:6b:fb:9c:3b:95:1e:d6:a8:28:
                    35:1e:3a:bf:06:d7:84:f0:3b:1b:28:ed:f5:ea:13:
                    e2:d5:03:a1:6c:37:7b:f0:3f:f4:dd:fb:27:62:8a:
                    51:f4:3e:33:93:94:b7:13:db:ff:91:ab:78:cd:b1:
                    ad:6d:50:50:2c:96:dc:70:c7:c0:15:4d:a7:75:38:
                    c2:10:02:89:b0:d2:38:4d:55:8f:b3:69:0f:38:ce:
                    2a:0d:84:74:43:69:b5:0d:96:de:73:f3:ff:f5:00:
                    4a:14:74:93:62:1c:39:4a:e5:a4:42:28:f2:68:94:
                    d4:3a:cc:70:6b:a6:95:e6:bb:4a:93:28:e0:e7:48:
                    f4:56:d9:ed:34:b6:5a:72:e6:89:a6:cb:93:e6:35:
                    80:b9:a3:d4:54:db:c6:78:93:3d:92:a6:f0:99:9c:
                    40:0c:c1:fd:b0:b4:ab:25:f1:4a:31:23:02:cc:65:
                    77:a7:45:8b:d5:3e:8e:40:ce:3a:48:fd:7e:23:83:
                    80:a3:8d:35:5d:cc:5e:88:b6:73:ec:3f:5c:11:4b:
                    a1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:90:16:32:E9:2F:10:D8:AB:7A:EA:7A:0E:02:43:CE:38:55:21:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/a5a61a2d-bf62-35dd-a58a-aa500e10dca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.99.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:a4:78:30:f1:5c:ce:d2:4b:d1:3d:70:78:c1:bc:66:66:ce:
         66:3e:da:cc:e4:8e:8a:70:b2:84:92:7b:c4:59:8f:47:d9:3c:
         32:e7:fc:c0:ff:03:9c:da:c3:ed:07:c8:e3:23:3a:f0:04:63:
         cd:88:c4:7b:45:c4:c3:3d:cf:2c:0b:93:1a:40:f1:b6:fa:85:
         49:2c:d4:49:a4:3c:51:15:15:70:24:f4:e3:7f:9e:e8:b2:06:
         3d:d4:06:03:cb:34:ce:1a:b6:c3:7f:b7:67:46:25:5e:19:40:
         bb:ff:66:cd:48:1d:2c:f3:01:8c:b2:02:5c:ad:37:2b:32:05:
         58:44:6d:14:07:51:de:32:da:bd:86:90:70:be:a4:f2:a4:56:
         a4:dc:da:7d:80:fa:3b:26:af:6a:7b:6a:95:d0:13:f4:a3:ab:
         d9:2b:c6:06:13:dd:e1:59:07:dc:ff:fc:e3:c8:a3:32:04:9b:
         ac:13:bd:dd:25:14:eb:42:94:bb:85:0d:f3:89:e6:cb:71:4b:
         9a:cd:e2:06:44:3f:18:68:ec:d3:02:db:e0:8b:f7:f7:f7:8f:
         88:6b:05:63:12:fc:c4:aa:7b:3b:6f:65:0e:26:c4:6b:25:e4:
         93:67:e9:39:94:1f:44:f3:c1:6b:b0:dd:29:36:0e:32:3e:0f:
         59:a9:80:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:15 2026 by rpki-client