Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/85cae2bd-5063-312a-99a8-0b49ad92edfa.roa
File:                     85cae2bd-5063-312a-99a8-0b49ad92edfa.roa (raw, json)
Hash identifier:          X9i3LPl3Y5tae0uCTD+u95RuaHxsabaPXSsHAs+wy9M=
Subject key identifier:   48:3F:96:A6:AC:EC:B9:64:BC:87:DE:E4:74:AC:3F:5C:04:0E:70:23
Certificate issuer:       /CN=bbc10cdd-c548-4bd0-aafb-ae57822b4599
Certificate serial:       010D0C9F4328584E0700A2019FC0F6C4EF453E80
Authority key identifier: BC:F8:A0:07:28:56:E3:62:62:B3:92:B7:99:FD:3E:20:EB:18:6F:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/85cae2bd-5063-312a-99a8-0b49ad92edfa.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     16509
IP address blocks:        64.39.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/bbc10cdd-c548-4bd0-aafb-ae57822b4599.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/bbc10cdd-c548-4bd0-aafb-ae57822b4599.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:a2:01:9f:c0:f6:c4:ef:45:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbc10cdd-c548-4bd0-aafb-ae57822b4599
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=0f950588-7791-4748-845f-51e32f0aa7f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:77:60:90:c3:86:93:3c:6c:76:8c:47:f7:1e:
                    81:06:69:2b:98:95:85:fc:99:5a:9d:72:b0:49:28:
                    e6:9c:96:4c:23:43:08:03:d5:f8:dd:f8:3e:91:30:
                    a6:72:41:7d:b1:21:99:5e:63:32:8c:d1:1e:71:65:
                    40:92:b8:d3:0b:b7:14:fd:92:82:86:42:53:8c:8e:
                    22:bd:62:35:9c:5d:fd:fa:7d:a4:a2:99:58:c1:30:
                    dc:d4:fc:a9:d9:12:ac:52:a2:86:03:d0:56:90:0c:
                    cf:4e:db:74:be:74:64:e6:f8:d2:42:cf:00:ce:ad:
                    1a:03:6e:94:09:32:5d:c7:8a:de:14:a7:3d:50:69:
                    43:24:41:35:15:81:bc:35:fa:ee:b4:49:1b:64:69:
                    da:25:7e:f1:45:de:72:f0:87:6b:3e:29:ce:dc:d8:
                    7d:a6:fb:88:5a:ae:ea:fd:d0:97:de:55:1c:87:ad:
                    c1:f7:16:90:2e:60:29:2c:20:c0:af:e4:8d:64:6e:
                    6f:ef:a2:5d:b3:41:2b:9f:de:de:5a:9c:5a:66:9f:
                    bc:03:c6:2c:b6:ac:39:0d:61:57:01:e4:b9:6e:95:
                    f2:3c:a3:8c:62:84:99:0c:c9:6d:8c:eb:37:07:8a:
                    73:65:a2:89:42:c8:d2:bc:99:9b:c2:70:9f:d3:a7:
                    29:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3F:96:A6:AC:EC:B9:64:BC:87:DE:E4:74:AC:3F:5C:04:0E:70:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/85cae2bd-5063-312a-99a8-0b49ad92edfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/bbc10cdd-c548-4bd0-aafb-ae57822b4599.crl

            X509v3 Authority Key Identifier:
                keyid:BC:F8:A0:07:28:56:E3:62:62:B3:92:B7:99:FD:3E:20:EB:18:6F:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:2f:d8:f2:e6:ca:61:98:0c:75:f2:4e:5d:fb:7b:18:44:f8:
         62:01:57:21:87:70:82:8f:4c:ed:8e:06:df:3e:10:a0:84:8e:
         3a:be:6f:0a:e7:c5:70:fe:f5:92:f0:f1:f4:f4:0d:67:6a:e9:
         f8:c0:ad:3d:28:b1:ff:c3:ae:2f:d6:ea:15:83:7b:be:67:9f:
         84:ef:25:4f:f3:e6:a1:9d:3d:f8:98:d7:6e:ee:45:8d:08:22:
         35:c1:d8:b2:83:74:98:2a:63:ef:47:02:d1:15:3a:eb:4c:82:
         75:33:cd:c9:f6:98:4a:ee:ff:5e:6b:35:3e:c5:c2:31:30:ad:
         cb:e1:56:61:02:61:57:e0:f4:e2:8f:b2:0d:8c:f2:4d:f0:0a:
         ea:ce:f9:e1:34:12:e0:f8:08:58:24:2b:ba:a3:70:d0:93:6d:
         f3:ed:9b:fc:df:3f:cc:79:8a:0c:67:8b:01:57:2c:ac:5d:66:
         14:83:7e:f5:c0:1e:4c:a8:9b:44:c8:11:7e:83:bd:0c:e5:f8:
         7e:c4:d9:8c:80:eb:15:c0:06:09:0e:5c:9b:ec:b0:51:e6:e3:
         f6:94:60:84:07:ab:18:f9:80:25:66:fb:9f:3f:93:28:2f:f5:
         d1:19:4c:2b:9a:c6:d8:bf:10:42:52:f6:8c:4b:6e:d0:dd:a8:
         0c:5d:ec:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:02:19 2026 by rpki-client