Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/bcf62835-8319-39c6-80fb-960ad2427989.roa
File:                     bcf62835-8319-39c6-80fb-960ad2427989.roa (raw, json)
Hash identifier:          mJJ076CYod7iq4wtLYMKsUoYabZe7ZMhUoTtW7hUFQU=
Subject key identifier:   A2:98:01:96:44:CE:C0:60:1D:43:F4:EC:AF:78:51:B3:11:2D:78:AA
Certificate issuer:       /CN=8fc21c27-e8e6-433a-86da-315992f3e55a
Certificate serial:       010D0C9F4328584EA7888FA8BF60441B8F705E00
Authority key identifier: 95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/bcf62835-8319-39c6-80fb-960ad2427989.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14537
IP address blocks:        67.211.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:8f:a8:bf:60:44:1b:8f:70:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc21c27-e8e6-433a-86da-315992f3e55a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0f8cb356-74e4-468d-9fda-0f9504df5874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:11:77:c3:7b:3e:4b:b5:53:58:e4:a0:f8:7e:
                    bf:58:5d:bc:3d:e5:19:a3:5d:34:49:a5:28:5b:86:
                    aa:fd:a3:76:d8:bf:c7:b7:54:8f:d6:5a:35:79:03:
                    a6:58:42:5e:a3:58:56:f1:d8:24:5d:dc:f7:8c:1e:
                    5f:27:36:17:87:9f:40:86:28:2c:71:43:3f:49:0e:
                    46:96:51:c1:7c:37:93:54:22:46:54:23:ff:ab:23:
                    1d:bc:0d:23:42:5d:5c:e2:f7:0a:e3:18:fe:f9:bf:
                    a9:97:fb:a2:52:8d:c9:b4:7e:08:5c:ba:3e:72:6d:
                    90:9c:df:ab:68:52:82:8f:ce:c1:0c:7a:3e:1e:05:
                    c6:a6:b5:8f:29:23:90:3c:02:1c:c0:12:44:2a:79:
                    78:d8:c3:26:6d:96:4a:d5:bf:68:8c:84:fc:0f:06:
                    26:03:db:19:f1:1c:58:4a:47:36:ab:d1:68:a6:f4:
                    6a:19:c8:a6:d8:1b:f8:62:10:d8:8b:98:95:fb:e1:
                    bb:cd:9e:ac:bf:71:47:4f:dd:f6:e2:9a:67:0d:d7:
                    94:b9:cf:06:73:ea:56:3a:69:2d:07:48:13:c3:89:
                    76:3a:69:06:ea:d2:4a:b0:fd:c7:b8:cb:58:5b:79:
                    1f:a8:2c:c1:89:d8:e8:b2:52:f4:45:c3:76:b0:e6:
                    26:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:98:01:96:44:CE:C0:60:1D:43:F4:EC:AF:78:51:B3:11:2D:78:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/bcf62835-8319-39c6-80fb-960ad2427989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl

            X509v3 Authority Key Identifier:
                keyid:95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.211.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:81:53:94:71:7f:d3:8e:06:a7:a8:46:ae:89:94:d9:94:80:
         c0:7b:12:f7:5c:e4:e4:b8:35:8a:5a:03:bd:6c:e9:35:b2:17:
         c1:8c:01:df:2d:82:e4:49:61:e9:9e:ec:15:49:9e:eb:6d:1f:
         1e:c1:d5:88:b0:b7:41:b3:30:75:25:28:36:6d:77:1e:b2:40:
         e9:58:4e:f3:fb:07:e2:bc:c7:06:88:a4:db:49:37:c7:5e:26:
         0e:cb:6d:59:59:09:e5:bc:60:5a:ba:f0:89:95:77:6c:85:90:
         43:01:18:cf:4a:2c:2a:7f:6d:c2:0d:2d:cf:6d:af:da:5a:17:
         9b:54:ba:f2:c1:cd:d6:85:20:ec:1c:3d:9b:a4:64:ac:14:0d:
         44:f2:7d:bc:1e:1e:47:2a:91:0b:8c:b5:e4:a5:0e:a1:3a:aa:
         47:b7:38:71:e6:bb:86:d5:c1:ff:d6:06:93:b3:b4:5e:d8:43:
         ff:07:ae:39:ee:29:cd:29:d0:14:a1:da:7e:20:0d:09:6b:70:
         17:70:d4:5a:c1:dc:c2:6c:4a:ea:b3:0c:56:6d:a4:f7:c9:0a:
         79:af:1f:fc:29:a2:58:14:87:24:8c:8a:ed:32:cd:62:08:d8:
         c6:4c:ad:a9:e6:60:72:c0:01:af:66:5f:80:e5:15:f8:af:b2:
         c3:30:c6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:09:22 2026 by rpki-client