Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/07af3803-4603-394e-91de-73689d9c1f0a.roa
File:                     07af3803-4603-394e-91de-73689d9c1f0a.roa (raw, json)
Hash identifier:          YnS6hcmhv6BjswzfZGMwwD38OB3mPx/ToxV7STW6WzQ=
Subject key identifier:   38:3C:EA:79:99:28:0B:75:E7:C8:F8:F5:E1:6B:6C:04:B3:C9:FC:4D
Certificate issuer:       /CN=bc6146e0-ac7c-49f0-a39f-f40759de0b5d
Certificate serial:       010D0C9F4328584DE6E5CE772562535A88E4DC00
Authority key identifier: 6F:35:45:A6:31:FD:EC:B9:3A:FD:94:AD:E8:F5:F2:3E:EF:94:DA:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/07af3803-4603-394e-91de-73689d9c1f0a.roa
Signing time:             Thu 21 May 2026 01:00:25 +0000
ROA not before:           Thu 21 May 2026 01:00:25 +0000
ROA not after:            Wed 19 Aug 2026 01:00:25 +0000
asID:                     20091
IP address blocks:        65.254.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e6:e5:ce:77:25:62:53:5a:88:e4:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6146e0-ac7c-49f0-a39f-f40759de0b5d
        Validity
            Not Before: May 21 01:00:25 2026 GMT
            Not After : Aug 19 01:00:25 2026 GMT
        Subject: CN=891356b7-0189-4ab2-98f3-2cb183d7d21a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:94:a2:e5:53:49:dc:aa:9e:0c:31:83:49:9b:
                    4b:d6:d3:78:5c:ee:b3:5d:f3:cd:be:0f:4c:bd:dd:
                    60:6a:9d:2d:a8:f2:e4:2c:77:0b:91:ed:be:d0:c4:
                    da:18:aa:9f:57:b0:31:51:c6:14:48:63:03:0b:ce:
                    16:4f:ce:eb:a2:75:a9:22:5c:15:46:79:34:04:a5:
                    d2:d6:10:55:57:96:e8:f0:53:61:5f:69:f4:ef:fd:
                    d9:b6:4a:20:f5:c1:67:c8:6d:a6:fa:1e:80:6c:65:
                    52:0e:10:79:02:32:bc:7b:7b:52:37:8f:00:e5:15:
                    ac:06:93:2a:69:73:02:41:df:3a:6f:a9:15:29:31:
                    3c:15:61:9d:2a:66:1a:b5:ea:f7:ae:09:b3:26:33:
                    20:48:b2:16:b9:25:27:84:58:1b:da:5c:f4:15:f2:
                    a3:14:24:67:1b:e2:45:35:a3:18:f6:6c:ea:1a:18:
                    9f:07:d5:dd:7c:e8:14:08:95:08:27:10:3c:93:23:
                    60:6d:00:90:52:a5:12:4e:c4:aa:30:72:32:65:f0:
                    1e:40:26:44:a6:1f:74:40:20:fa:84:19:26:68:18:
                    a7:3c:fd:23:ee:cd:dd:ad:28:ae:64:27:a8:69:5f:
                    a7:f5:cc:2b:8b:6b:a5:b0:86:92:03:2e:06:5d:69:
                    db:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3C:EA:79:99:28:0B:75:E7:C8:F8:F5:E1:6B:6C:04:B3:C9:FC:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/07af3803-4603-394e-91de-73689d9c1f0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.crl

            X509v3 Authority Key Identifier:
                keyid:6F:35:45:A6:31:FD:EC:B9:3A:FD:94:AD:E8:F5:F2:3E:EF:94:DA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.254.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:8a:40:77:52:9e:7a:90:a8:ee:42:d5:c4:cd:a5:79:ae:06:
         0d:cd:0c:f9:bf:be:93:27:38:99:4a:14:5f:b9:b5:c4:aa:0b:
         bb:31:7a:6e:1e:b0:29:1e:52:38:46:70:eb:de:c9:1a:53:3e:
         32:bd:85:6d:f3:ca:26:d4:84:1c:12:73:7c:ec:90:86:fe:fd:
         2e:b2:0a:38:1d:d0:34:8f:50:18:e1:d4:19:1d:c1:e8:9f:b1:
         2b:92:d0:0b:d8:e1:68:a7:31:6d:5a:4a:26:00:86:e2:bf:a4:
         67:da:dc:a8:d0:a6:3d:14:12:13:b4:2f:7c:c5:70:23:0d:05:
         94:12:5c:25:86:e4:cc:63:6c:c1:26:8c:23:d2:dc:2f:ab:2c:
         06:ab:98:27:2d:da:6b:22:78:f7:c0:4a:0b:f9:f5:25:47:74:
         1f:b0:cd:01:7a:3e:93:40:74:c0:7b:89:e6:9c:02:3c:a0:a2:
         f8:fa:2c:e2:4a:dd:6c:22:71:4f:77:7a:9d:83:86:7e:74:9e:
         54:d1:60:71:42:e4:27:0f:aa:f6:2f:a9:75:bd:3a:58:ea:99:
         40:c9:db:94:a2:27:76:1f:df:41:72:7e:89:e5:85:4f:4f:fe:
         35:89:53:be:01:73:db:37:ff:5d:03:fd:d0:52:75:6f:1c:b8:
         c4:58:dd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:21:41 2026 by rpki-client