Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bca77e78-846f-3652-b300-fe0a3778ba0a.roa
File:                     bca77e78-846f-3652-b300-fe0a3778ba0a.roa (raw, json)
Hash identifier:          DDVec+ll4a4AlEZ9B0HTqDUyVG33nIqq39r1vCH+0SA=
Subject key identifier:   39:02:FB:B4:0B:6B:A9:83:EA:A0:8E:72:AE:57:85:18:51:7B:EE:DC
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EA78F27642631D166F03ED4B0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bca77e78-846f-3652-b300-fe0a3778ba0a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23473
IP address blocks:        96.63.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:27:64:26:31:d1:66:f0:3e:d4:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2952ece3-94d8-4d27-b6df-5830720dc8f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8a:20:4f:ba:08:c7:11:12:30:15:c0:67:40:
                    6c:d7:4b:0c:c6:48:5b:b6:b9:a8:6e:bf:fa:ca:95:
                    59:91:e3:78:f4:7d:af:69:3d:39:b4:25:5f:96:76:
                    be:56:8e:d1:92:16:83:82:c6:93:c4:a7:79:6f:fc:
                    d2:6a:58:87:86:42:8f:37:07:3a:3a:17:20:a2:86:
                    c7:40:49:07:a3:a2:d2:9d:b6:5f:b3:f1:95:0b:98:
                    fb:97:e6:d0:49:b3:cc:1a:ef:fb:b4:07:a8:39:e0:
                    a1:e6:02:0c:2e:91:ef:2e:e0:32:a4:98:a3:93:79:
                    60:39:b2:06:99:ef:cd:74:af:d1:a6:ea:b8:28:a7:
                    9b:e3:d5:9e:a9:d4:e9:32:ca:df:68:9b:e5:9b:c0:
                    a5:6b:f2:fe:40:57:2f:c6:21:0e:c3:bc:b0:4c:b0:
                    7e:cc:f4:a9:58:0f:2f:c5:e9:9c:ce:b9:6d:0c:29:
                    40:e2:5a:74:ec:3f:0f:d3:ca:86:50:d2:70:c0:40:
                    08:81:f7:58:dd:a7:d9:84:28:aa:d2:71:8d:54:f8:
                    58:08:58:8a:0d:e9:b2:09:d0:fc:b5:66:09:48:b8:
                    0b:d8:be:44:d2:d2:03:84:0d:6c:50:cb:db:c0:88:
                    60:1b:59:5b:bc:b0:ae:c2:ab:8e:d9:e4:15:e1:96:
                    1d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:02:FB:B4:0B:6B:A9:83:EA:A0:8E:72:AE:57:85:18:51:7B:EE:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bca77e78-846f-3652-b300-fe0a3778ba0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.63.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:6c:ca:40:6f:fa:6d:6c:15:30:65:dc:c2:5e:ec:1f:4e:30:
         5a:06:3c:c1:71:ef:d2:2a:82:98:d7:a5:68:48:50:c7:4d:f0:
         39:2d:0d:2b:4a:38:80:f8:bd:37:68:66:d9:80:55:0e:e5:ef:
         8a:1b:8a:d8:4f:89:0c:2d:4f:8c:aa:fa:f9:c0:f7:e3:07:ce:
         52:45:05:b5:a6:f4:97:de:6e:c9:fd:ef:98:52:d9:c9:7f:88:
         3e:ba:26:89:ca:e6:36:71:a1:3e:86:60:5d:f9:65:d0:b0:07:
         b7:4c:70:22:f5:62:10:eb:7d:4e:f2:2f:4a:50:72:f0:1a:ca:
         4d:10:4d:52:3d:c6:44:34:f9:3c:0f:58:88:68:3f:e0:da:02:
         0a:1e:2b:66:61:1e:90:4f:cf:31:78:f6:85:54:ff:ad:83:b3:
         7e:5a:8c:1c:39:fd:20:5a:57:14:39:df:69:5c:a5:60:41:da:
         f6:5d:52:82:70:c1:e9:39:23:bb:dd:50:16:3e:09:da:b2:51:
         b6:a2:ac:44:02:71:20:ca:4e:ef:14:dc:fd:35:24:fa:1b:8a:
         b2:02:94:42:f4:34:dd:ec:8e:ca:b0:81:60:69:ed:60:74:41:
         24:4e:f2:56:fd:6d:93:27:16:bd:78:51:86:65:62:74:49:0b:
         19:0c:42:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:51:24 2026 by rpki-client