Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/bc290b45-2d90-32cc-a783-29c0c0317fc6.roa
File:                     bc290b45-2d90-32cc-a783-29c0c0317fc6.roa (raw, json)
Hash identifier:          VyDdaLPrdesPQujmtjdMROY1YoMRCVmCmYR02ys5w9o=
Subject key identifier:   1E:39:4A:AC:46:32:08:0C:01:DF:EE:4A:1D:F3:72:08:4D:C1:0D:D3
Certificate issuer:       /CN=b764fe0e-08f6-4216-a719-1ca6386e5571
Certificate serial:       010D0C9F4328584DEDE09C84147FAAC66852DA00
Authority key identifier: 71:B4:5B:6E:B6:C0:E6:28:8D:F0:09:60:B4:B1:71:14:8F:E1:CB:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/bc290b45-2d90-32cc-a783-29c0c0317fc6.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     400862
IP address blocks:        209.188.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/b764fe0e-08f6-4216-a719-1ca6386e5571.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/b764fe0e-08f6-4216-a719-1ca6386e5571.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:9c:84:14:7f:aa:c6:68:52:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b764fe0e-08f6-4216-a719-1ca6386e5571
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=58c882c9-8f9e-493e-a076-183c4dd9d40a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ba:1d:e1:7f:cd:c1:71:e8:7b:a4:48:ed:86:
                    a2:b6:9c:bc:f2:f6:68:9f:c1:cb:a3:60:11:1b:4a:
                    84:ec:f1:10:b1:81:41:cd:b8:5c:8b:07:bc:59:7a:
                    45:32:93:6c:06:71:3d:09:6c:ec:56:df:03:df:e6:
                    6d:1b:dd:86:ad:11:93:9c:b5:31:2f:78:9a:54:c6:
                    0c:a8:26:27:b8:d4:60:fa:7f:87:ee:e5:70:64:82:
                    e6:a8:d4:ef:1c:7c:7b:28:79:0a:57:e2:5a:c0:b1:
                    02:7b:18:66:06:84:02:e2:8d:df:1c:07:3f:5a:cb:
                    e9:e7:05:b7:d8:c4:24:54:5e:f7:05:9b:01:a0:f2:
                    fb:ef:b3:69:ff:95:0e:03:14:31:ec:f4:c6:85:23:
                    25:6a:7c:79:2f:98:54:2d:72:af:fd:f7:eb:79:6c:
                    25:da:db:3d:31:e5:9f:f5:f2:c4:f3:5d:44:25:ac:
                    06:24:e9:b5:75:96:69:21:a8:35:a3:b3:b1:70:4e:
                    80:6f:e7:e0:33:cc:84:98:65:3e:13:cf:1d:67:68:
                    90:5f:ba:47:8b:ef:eb:85:24:c9:87:d2:75:80:55:
                    73:2a:19:ef:40:d8:a1:2f:51:72:c7:62:69:35:fb:
                    0d:2e:a8:c3:09:23:7f:af:db:e4:b8:12:94:05:e5:
                    99:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:39:4A:AC:46:32:08:0C:01:DF:EE:4A:1D:F3:72:08:4D:C1:0D:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/bc290b45-2d90-32cc-a783-29c0c0317fc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/b764fe0e-08f6-4216-a719-1ca6386e5571.crl

            X509v3 Authority Key Identifier:
                keyid:71:B4:5B:6E:B6:C0:E6:28:8D:F0:09:60:B4:B1:71:14:8F:E1:CB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.188.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:f4:95:41:19:c2:0a:5d:bb:f0:da:35:b6:2e:88:e5:9c:2c:
         7e:17:88:9a:7c:e4:83:67:64:05:df:cf:00:3c:c9:9d:42:cf:
         21:4d:26:d2:1f:5c:88:14:56:5d:a2:bb:88:79:08:3c:07:8b:
         90:9a:80:bb:a7:38:61:98:e0:59:1a:de:81:27:18:a3:dc:07:
         9c:98:0b:34:4c:6c:a8:68:52:71:d6:cb:ab:b5:45:64:16:23:
         3f:7d:9f:7c:91:4a:db:5a:a2:03:9b:a7:bc:cb:60:65:82:49:
         1e:ae:8f:56:03:7d:3b:98:e1:17:fa:25:be:ee:8c:6a:be:aa:
         2b:a5:c5:12:4b:66:ea:ca:18:b7:2a:59:30:af:17:6f:06:92:
         a0:9d:fc:a0:08:3e:54:40:91:5f:28:85:30:65:9f:c1:d4:52:
         d8:ae:e7:79:43:e0:84:f2:3b:5e:d8:1b:38:d9:d8:f0:53:0b:
         88:03:31:95:26:48:be:41:11:61:87:73:bd:bf:26:f8:cf:da:
         3b:d3:85:e1:3f:11:38:87:da:f2:90:21:f5:a0:31:48:f1:0e:
         7b:ce:7c:45:37:9d:e4:aa:a2:6a:f6:a5:bf:ad:83:cd:68:22:
         19:6b:c0:5e:89:da:1c:c8:01:e3:76:0e:21:0a:b7:8e:b0:37:
         4d:74:0f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:20:08 2026 by rpki-client