Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bcb35c1f-82c1-3c7f-bcfa-0d22a626d873.roa
File:                     bcb35c1f-82c1-3c7f-bcfa-0d22a626d873.roa (raw, json)
Hash identifier:          vVFI21fpoJ1pEn00toBO+5QXc+7bMTYm/VNdQcW3LSM=
Subject key identifier:   5B:EA:F5:C9:A3:70:DD:43:85:E7:3B:74:29:C0:E2:F2:76:BE:77:F0
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E447BE8995376AC11D29D00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bcb35c1f-82c1-3c7f-bcfa-0d22a626d873.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        50.91.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:7b:e8:99:53:76:ac:11:d2:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=a9df025c-0cb7-4cb0-bd80-e8a7f13e8cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:86:4c:66:8c:71:26:4b:e0:4d:40:8c:ca:e6:
                    43:45:41:63:b5:45:0b:a0:93:32:b1:b0:15:67:0d:
                    58:88:ba:2e:9b:c7:89:b2:b7:78:52:41:f0:dc:f8:
                    2e:52:31:3f:f4:31:7a:52:f3:39:bb:6a:1b:92:59:
                    13:7a:b9:12:82:2e:6c:5a:02:37:8d:5f:be:69:91:
                    bc:28:5b:0f:7d:bc:c5:33:e5:c7:56:7d:04:ef:f7:
                    23:09:8c:dc:e7:ae:60:a4:c2:12:64:8b:d9:10:ca:
                    d2:f3:67:31:0d:c8:8a:2f:0f:2b:f3:93:53:e2:a7:
                    ea:a2:2a:63:ff:00:ad:f6:bb:d4:ca:72:cf:02:3f:
                    7c:a9:f0:84:71:a8:b3:df:fa:73:77:1e:b0:c5:40:
                    fc:4b:04:37:80:b7:85:28:8c:fb:de:33:70:fa:13:
                    c9:1d:84:fb:2b:6f:a1:22:1d:49:2c:18:c0:ab:ef:
                    68:86:bc:7b:a9:b9:d8:f7:01:32:64:d3:5f:07:ce:
                    38:6f:e3:50:48:8c:08:0c:71:bc:8e:01:6b:64:3b:
                    cb:83:69:c7:d3:07:b1:7b:02:88:82:2c:73:4b:39:
                    2a:ef:64:9f:41:f1:6f:35:01:05:a4:2b:75:b6:b9:
                    51:70:39:9a:af:53:46:d5:5d:eb:b5:31:8d:02:40:
                    12:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EA:F5:C9:A3:70:DD:43:85:E7:3B:74:29:C0:E2:F2:76:BE:77:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bcb35c1f-82c1-3c7f-bcfa-0d22a626d873.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.91.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:3d:fe:3c:c8:61:4e:ab:1d:18:f1:32:98:f5:da:b4:69:37:
         ad:19:d4:ef:b6:77:9b:0d:ba:35:82:b5:f8:a5:3a:76:fe:c9:
         63:14:d4:72:ba:a0:c5:3b:f7:23:71:24:ed:1e:95:64:88:1e:
         b5:7a:c3:5e:cc:b7:c2:09:22:71:fb:2c:4d:11:72:30:88:a0:
         b0:0c:a5:63:96:e2:8a:e8:10:69:32:d6:07:ce:b2:37:f8:fa:
         44:f1:5d:82:1e:6d:69:3f:e8:2b:8f:3f:1f:c8:12:b9:90:9e:
         6b:6a:c0:cf:9a:42:18:b3:a2:c0:79:e4:1d:cd:ae:34:16:01:
         a6:c4:5f:a8:ef:88:91:64:aa:0c:91:40:93:4e:d5:00:55:81:
         3c:a5:9d:7a:3e:fd:a6:62:0f:fc:8d:04:e7:92:5d:a7:f9:c8:
         1d:a0:60:02:7c:7c:b8:3e:92:25:1b:28:85:c9:1f:6e:eb:4b:
         93:f6:cd:0d:1c:d9:68:89:96:0a:e1:82:10:9c:4e:9a:3e:b8:
         3d:4f:96:e5:a9:76:90:72:97:bf:f2:0e:eb:fa:ea:f1:22:d5:
         a4:bd:3a:ec:05:10:88:0d:66:29:0c:5c:41:20:3c:d5:e3:79:
         35:34:67:92:ad:30:08:79:02:4a:6c:2c:7b:83:ca:c4:da:28:
         44:fb:a6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:27:10 2026 by rpki-client