Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/bcf274df-5509-357c-a371-e2d4c72b0723.roa
File:                     bcf274df-5509-357c-a371-e2d4c72b0723.roa (raw, json)
Hash identifier:          kqCJldDENcrm6qTZVyrO++wWMbzXcTTLWqIHUlTwjXg=
Subject key identifier:   68:20:FA:EA:6C:3C:DD:CA:2F:D9:AC:5B:D3:EF:76:15:AE:EF:6F:46
Certificate issuer:       /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
Certificate serial:       010D0C9F4328584EA7876AE3FFB04CCEBAF15A80
Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/bcf274df-5509-357c-a371-e2d4c72b0723.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     53768
IP address blocks:        162.134.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:6a:e3:ff:b0:4c:ce:ba:f1:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4442da95-d0a7-447e-97bc-c4f885793c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:39:c6:71:e4:91:d4:78:a0:f3:b8:b3:e4:56:
                    0a:37:50:02:56:ef:a2:93:62:aa:05:3c:56:4e:ea:
                    be:4d:39:c8:c6:a2:3c:2f:f3:ec:f0:c0:77:35:d2:
                    8a:79:21:ce:cf:78:ea:5a:68:c0:11:c6:44:01:69:
                    a4:90:51:c3:35:71:11:35:8f:6d:7e:3c:6e:01:a3:
                    e9:66:92:33:e3:70:36:d2:3d:32:00:a3:c2:f1:e4:
                    24:17:41:08:55:26:e4:8e:7c:f5:4a:e7:8c:a4:62:
                    ed:b1:62:2a:5a:3c:e6:b2:27:0b:9b:b7:36:26:32:
                    24:9a:76:94:fb:41:2b:c3:37:22:c5:ab:67:c7:46:
                    bd:9f:d4:0b:0f:b4:59:cc:5a:7b:b0:23:52:e8:63:
                    55:11:df:41:20:e5:0c:ba:fc:ba:a2:ab:ca:94:cb:
                    a4:a5:11:40:f6:cc:ed:fe:6c:74:4d:88:b9:6a:d6:
                    67:57:8b:e5:2a:95:e0:6e:42:d6:6d:d9:49:01:23:
                    9f:93:89:c0:4c:56:c7:05:ec:3c:92:13:97:12:c1:
                    c0:df:98:e6:3b:13:43:ce:14:95:13:1a:27:b7:b6:
                    ae:9a:8c:5a:af:d3:37:76:be:9f:cb:39:43:87:13:
                    2b:e7:59:dd:6c:a0:4f:f9:ee:89:23:f2:00:50:24:
                    e7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:20:FA:EA:6C:3C:DD:CA:2F:D9:AC:5B:D3:EF:76:15:AE:EF:6F:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/bcf274df-5509-357c-a371-e2d4c72b0723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl

            X509v3 Authority Key Identifier:
                keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.134.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:53:9a:2e:4f:ca:98:93:47:37:e6:d6:17:89:b7:e8:54:12:
         41:22:36:b8:6a:c2:80:ef:02:c9:82:d3:b5:3c:67:dc:46:5b:
         90:a8:41:f1:62:b3:08:39:42:db:99:49:3d:e6:25:fe:b2:23:
         e3:c8:68:10:a8:47:60:b4:75:5f:76:3d:0e:66:c2:59:20:ac:
         7c:d8:36:0c:3a:46:92:ce:79:30:cd:0c:c8:ed:d5:6e:e8:5e:
         66:a1:22:a0:b6:6d:31:77:9c:cc:e6:4e:72:f3:49:bb:29:ee:
         f4:60:61:35:cc:0b:6d:4c:9b:b8:ae:48:f0:73:82:41:c3:e3:
         f6:19:fe:a3:ba:bb:12:8f:7d:8a:7d:7e:dc:4e:a0:58:bc:03:
         ec:de:d7:92:59:23:9c:ab:0a:b0:99:a2:95:88:c8:66:33:f0:
         58:23:85:1b:30:c9:ae:54:0c:a0:1d:ea:61:51:c0:34:8e:2e:
         d6:ef:a0:d3:2d:18:5d:99:b0:82:ad:5e:62:1a:1e:70:39:f8:
         09:f8:1a:af:b3:6a:98:6f:47:28:a3:f7:36:49:34:dc:31:5d:
         6f:2e:dd:66:ba:f1:0c:d1:4d:3e:09:db:48:e8:df:a3:d5:44:
         98:f5:de:13:a5:0a:ad:f5:4c:78:e0:42:c6:1a:71:ba:84:3d:
         84:51:44:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:05:28 2026 by rpki-client