Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/be400544-19f0-3ed1-bf3c-e5f9ab3730af.roa
File:                     be400544-19f0-3ed1-bf3c-e5f9ab3730af.roa (raw, json)
Hash identifier:          yZXaXRsBuIrHCy3vgY3r4oNGiS+qpayWxHEHsHjynTE=
Subject key identifier:   2F:57:F6:E4:C4:FF:26:F5:C9:17:E1:34:65:CA:D5:49:3F:99:6A:82
Certificate issuer:       /CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5
Certificate serial:       010D0C9F4328584DD0905C59E97F68EE9AA3F300
Authority key identifier: 00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/be400544-19f0-3ed1-bf3c-e5f9ab3730af.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     14041
IP address blocks:        198.59.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:5c:59:e9:7f:68:ee:9a:a3:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=9d564755-1b19-40ed-a372-56ff88165d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:90:81:96:7f:87:de:76:d4:8d:43:4f:de:5e:
                    e1:9f:e7:4f:33:ed:35:38:68:b4:49:bd:ff:37:33:
                    43:0f:22:05:fe:1f:f0:b1:cd:80:06:e5:a1:2a:04:
                    4f:19:af:db:7e:80:89:13:2f:62:41:71:92:91:4a:
                    5f:64:e5:5b:75:f6:3b:de:6c:9e:02:2c:bd:03:5a:
                    c4:b9:e2:e3:f8:e7:9d:88:61:97:d5:21:04:30:78:
                    16:43:97:ec:a8:8b:2c:7a:16:07:40:ed:3e:f1:70:
                    40:47:c8:dd:0b:87:ee:48:e8:a9:70:a4:ff:4e:37:
                    a6:ae:97:52:27:46:85:65:69:ec:93:80:6d:ab:85:
                    18:dd:b0:86:22:a5:ba:73:d1:91:a1:23:c0:61:49:
                    8c:c3:1c:71:fc:9b:16:f1:11:97:c1:f6:2f:47:0d:
                    75:e2:d8:a2:1a:41:bd:dd:76:58:25:9a:ca:2e:ac:
                    dc:0b:c4:55:0f:37:a3:ff:af:fb:d4:73:e0:2b:52:
                    f5:61:49:ec:54:07:67:d8:79:eb:9f:91:e3:30:0f:
                    e3:a2:9e:70:bc:78:af:6d:b1:95:44:ca:19:16:73:
                    f3:ae:30:84:8a:98:88:da:92:49:6b:4c:31:08:0f:
                    e5:d4:69:95:eb:ca:41:00:ac:5e:b4:d9:b2:cf:91:
                    06:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:57:F6:E4:C4:FF:26:F5:C9:17:E1:34:65:CA:D5:49:3F:99:6A:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/be400544-19f0-3ed1-bf3c-e5f9ab3730af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl

            X509v3 Authority Key Identifier:
                keyid:00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.59.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:e7:8c:87:c2:c8:be:ca:36:8f:74:0e:b3:89:2c:9b:5b:c2:
         f6:41:7f:9a:c1:b9:5d:6d:e2:f7:34:96:a8:85:e8:85:87:50:
         39:56:16:f0:d2:5d:41:01:1b:d9:ab:cd:74:8c:8f:7b:6b:ae:
         e7:85:51:03:09:ee:b6:73:60:c2:46:d3:a7:e1:ef:c0:ca:20:
         24:4e:69:ef:6e:97:4d:3f:57:ee:4a:36:1b:34:8e:b2:5e:c2:
         52:37:4c:53:c1:30:84:89:16:7a:4f:2e:53:fd:5c:39:9c:97:
         e3:82:fc:a6:b2:72:2a:23:5f:be:cc:d0:72:13:39:cd:55:02:
         1d:fe:95:ba:1b:7c:ef:bf:82:2f:7b:15:1d:a9:2e:b6:dc:d8:
         9f:5f:6e:6d:dd:2a:fe:61:90:36:06:a9:fa:89:4e:20:52:0b:
         6e:60:b8:c8:b0:e6:22:b0:71:09:cd:ec:5e:e3:df:00:62:ff:
         a5:3e:f6:99:e7:2d:45:49:0c:cb:6f:42:35:e9:c0:c1:9c:92:
         8c:80:b5:00:29:b8:5d:ed:c0:2b:3c:35:7b:62:5a:ca:5e:b1:
         6f:cf:ef:ca:a2:8e:05:70:8d:64:b4:d9:3b:e5:ca:53:a1:82:
         0a:90:5c:3b:97:96:1b:63:d7:d8:e7:93:88:10:cc:f1:d9:a3:
         42:90:ff:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:09:38 2026 by rpki-client