Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/bc60d7b4-d6be-35cb-80fc-16177325cc06.roa
File:                     bc60d7b4-d6be-35cb-80fc-16177325cc06.roa (raw, json)
Hash identifier:          S6n+Af21T3jJjwdlbsUCHIcUJvqBossHH/BB8Jiya30=
Subject key identifier:   31:09:6E:65:42:6D:82:55:1C:AC:52:01:44:EB:CC:DC:95:1E:57:AA
Certificate issuer:       /CN=09c51633-340e-4eac-820c-a36b33746085
Certificate serial:       010D0C9F4328584F119D0377D11660B1798EC040
Authority key identifier: 58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/bc60d7b4-d6be-35cb-80fc-16177325cc06.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     13928
IP address blocks:        199.21.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:03:77:d1:16:60:b1:79:8e:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c51633-340e-4eac-820c-a36b33746085
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=6a54771d-7664-4372-9056-f8a19eb89183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:af:a3:ff:72:3f:5d:ce:c9:ac:46:51:56:2f:
                    9b:da:ca:0e:6c:4c:4d:de:6c:51:f0:49:0d:85:0c:
                    7b:a2:01:8c:7d:be:c3:2a:0c:0e:66:1f:a6:ce:81:
                    37:f4:c5:a3:18:2d:1d:05:51:4f:be:43:e7:2d:4f:
                    0e:27:b7:2c:86:45:35:04:26:43:fe:15:8a:da:4d:
                    c6:fa:92:0c:2c:6f:04:bd:e7:44:37:af:87:ed:77:
                    4e:5f:83:20:5c:27:08:d2:7c:5d:39:6c:7b:a2:ca:
                    da:85:27:81:53:82:eb:d8:eb:56:e0:2a:26:d2:77:
                    49:02:36:8b:e5:d6:19:71:7b:04:7f:a2:18:5a:d4:
                    21:95:20:84:78:b9:a4:08:b0:83:dd:11:2b:c2:1a:
                    3c:b4:c0:59:a6:47:9f:83:99:b3:b9:4a:bf:72:39:
                    90:e8:7d:eb:e3:f0:a8:b0:12:82:d2:ec:bb:2e:d7:
                    98:c8:05:ea:82:57:f3:9d:ac:0a:90:08:50:d5:98:
                    ca:c3:ce:18:89:3c:9e:de:b5:78:f2:20:41:72:6c:
                    e6:46:86:c4:01:41:c2:41:d5:94:aa:f5:9f:5f:eb:
                    37:71:98:7d:f1:f7:8d:de:4c:f6:18:b1:7f:78:61:
                    e5:e9:8c:3e:f1:b4:5c:60:d4:98:27:0b:1a:8c:6f:
                    e1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:09:6E:65:42:6D:82:55:1C:AC:52:01:44:EB:CC:DC:95:1E:57:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/bc60d7b4-d6be-35cb-80fc-16177325cc06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.21.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:a9:dc:ad:ea:4c:ee:05:95:8f:d7:5c:fe:d6:ac:67:a4:c5:
         02:c3:60:92:19:b9:69:76:d8:96:1c:8f:9e:c5:84:a4:d6:11:
         0a:68:a4:2f:35:5b:e5:d3:e7:81:12:1b:8f:13:d3:23:f5:28:
         aa:08:75:72:40:58:17:9d:a9:85:f5:24:08:f0:51:84:c7:b7:
         4b:bb:d5:e1:ef:91:43:c6:d4:6d:31:a8:32:d1:e2:ce:15:1c:
         4d:d7:08:07:c8:47:d1:2b:46:ab:bf:82:d7:24:b6:5a:41:6a:
         4a:8b:4c:48:45:ba:8a:00:e1:77:3c:e8:f7:29:11:e9:7c:7f:
         9f:46:d2:48:bc:3f:aa:7d:c2:33:37:bb:07:a6:50:c4:d6:e8:
         0e:a4:13:58:64:7f:88:66:a0:68:23:bd:5b:5f:6d:0d:82:0d:
         c2:d2:95:f5:da:3e:11:bf:57:45:2f:bc:b2:29:46:0d:84:f3:
         b7:2f:11:e2:fd:d1:df:d4:6c:3d:d9:2f:80:4f:50:35:8a:ae:
         92:91:cf:61:de:16:24:73:08:d7:28:fe:02:e0:5f:63:df:82:
         e9:32:7d:29:7a:70:e4:71:ad:ec:92:9e:f3:08:1a:74:b9:bf:
         5e:60:a2:f3:4a:53:92:25:27:cd:a7:2b:b0:92:ce:fc:0f:6d:
         27:7c:80:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:15:18 2026 by rpki-client