Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/9ff30824-1084-32e9-aa19-53c49b5db5a4.roa
File:                     9ff30824-1084-32e9-aa19-53c49b5db5a4.roa (raw, json)
Hash identifier:          72Nuv3XEWpvPLlez5UuecrgCiV+CJMcsUcA3KFh+rM8=
Subject key identifier:   00:56:33:E3:25:26:92:52:B8:18:BD:2C:46:AF:65:4D:03:17:99:4B
Certificate issuer:       /CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5
Certificate serial:       010D0C9F4328584DD0905C4D6644EB9D5DE0EE20
Authority key identifier: 00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/9ff30824-1084-32e9-aa19-53c49b5db5a4.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     2902
IP address blocks:        198.59.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:5c:4d:66:44:eb:9d:5d:e0:ee:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=e5c04b94-1731-4ab5-aaa8-acaf16da3a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:32:eb:a6:fd:d3:84:11:60:19:82:a8:4e:e1:
                    b9:9d:12:d3:c0:bf:fa:0b:77:14:60:9d:d0:72:2f:
                    db:20:3a:d9:ff:e2:0a:e0:4d:c6:89:20:c2:a8:99:
                    91:de:07:04:80:18:3d:46:72:02:ff:c0:63:9f:8d:
                    4a:22:7d:0a:10:9f:a0:a0:90:27:7e:5a:89:40:68:
                    80:47:e8:67:93:fe:2e:54:72:e0:a0:79:ae:30:39:
                    2b:a5:f4:e6:c5:94:41:b7:03:b8:d5:32:74:35:f4:
                    d8:4a:e1:f8:10:5c:f0:f1:5e:c4:b9:2c:67:de:33:
                    e3:62:62:85:b4:40:10:60:ae:6f:ff:d1:19:76:df:
                    57:3b:eb:86:eb:ee:9d:79:f4:92:11:bf:14:0f:c1:
                    83:64:4e:a9:a2:54:13:4b:b5:fb:f8:8f:b2:6d:bb:
                    19:63:ac:ce:19:86:5b:e0:08:7e:94:ad:18:14:87:
                    cf:ec:b3:a9:12:84:0c:08:a6:cb:08:6b:cb:97:f0:
                    17:33:6a:52:90:a0:94:ac:31:b4:39:94:68:64:ff:
                    f1:21:7a:2d:b7:ec:a9:c4:9b:72:36:7f:75:ef:06:
                    82:22:6e:12:11:7f:e2:f1:7f:5d:a6:b6:57:0f:77:
                    16:ed:66:b3:c0:4e:a5:0e:98:e5:f9:b0:44:11:4b:
                    84:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:56:33:E3:25:26:92:52:B8:18:BD:2C:46:AF:65:4D:03:17:99:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/9ff30824-1084-32e9-aa19-53c49b5db5a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl

            X509v3 Authority Key Identifier:
                keyid:00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.59.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:a8:00:3f:40:2f:38:14:1d:56:c4:26:aa:87:d9:23:4b:e3:
         4c:47:5e:67:fc:1b:49:ca:4a:6c:37:0f:8c:3f:f0:37:d5:49:
         80:a4:96:54:bc:94:05:22:42:1d:d7:35:eb:1b:f5:45:69:fc:
         bd:95:1d:75:1e:35:9a:c7:bb:b6:69:1e:ae:ce:47:ac:cb:70:
         1c:12:03:d0:af:40:02:02:40:0c:38:38:61:a2:65:19:53:2c:
         16:66:29:57:9d:e6:f7:7c:af:cb:1b:8b:b2:e2:13:07:51:2b:
         f6:d2:8e:4a:f4:29:2e:5a:a5:ac:46:82:d1:a7:d5:4a:01:d8:
         3d:2c:45:b6:7a:e4:49:86:0b:da:92:34:cf:bf:23:80:37:3f:
         30:16:d4:cb:0c:3a:c3:12:ba:7c:2e:4e:f4:38:3f:78:d3:04:
         85:9b:f4:49:66:2b:c3:93:9e:4d:12:17:a0:1c:4e:c0:05:07:
         1b:ff:bb:c4:c4:cd:b9:8c:6a:e7:c1:5b:2d:24:83:40:96:62:
         77:40:43:32:eb:3d:22:25:01:d2:cf:bc:d0:8c:ad:53:3a:04:
         86:31:d4:6a:8f:39:0f:3a:cb:0c:f7:57:21:98:43:40:75:2c:
         03:10:e0:d6:19:86:a5:44:11:71:55:d7:96:05:45:2f:87:e7:
         8d:a4:e7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:13:58 2026 by rpki-client