Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bc625f3a-cc44-3788-8476-8cd61831751c.roa
File:                     bc625f3a-cc44-3788-8476-8cd61831751c.roa (raw, json)
Hash identifier:          CkUUBedZdDhlLgwKokGzNW5rJpsBD0yRJPH8ihMkZA4=
Subject key identifier:   FA:C3:21:48:65:1A:D7:A1:B7:35:5B:5B:C9:1B:21:AC:B7:46:81:34
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F4972E7797A3303F47A059480
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bc625f3a-cc44-3788-8476-8cd61831751c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19750
IP address blocks:        2001:550:1209::/48 maxlen: 48
                          2001:550:120a::/48 maxlen: 48
                          2001:550:2705::/48 maxlen: 48
                          2001:550:2706::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:e7:79:7a:33:03:f4:7a:05:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3154bd0a-4ed6-463e-8897-3563f384264b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0f:05:ff:20:3a:bb:37:0a:97:b8:57:b9:d6:
                    e4:3b:3f:70:86:66:c0:f1:ec:2e:e5:01:98:1f:e0:
                    00:60:3a:82:75:7e:45:f9:93:6a:43:ca:f5:3f:1b:
                    2e:22:e0:f3:9c:ca:61:75:28:60:00:3a:a8:19:85:
                    96:73:85:0a:b3:d8:ec:ce:1f:05:5e:73:82:40:f2:
                    14:52:6e:bb:6e:66:ce:7c:d6:98:69:2e:91:e5:ac:
                    12:6e:54:36:95:32:a3:ee:e9:5d:22:60:ad:e2:60:
                    e1:f6:a3:59:8b:52:62:5e:19:8a:2a:e5:ae:c8:25:
                    67:3b:79:4d:8b:10:c4:c2:ff:84:ec:1e:de:22:38:
                    d2:9a:dd:16:d5:ed:af:77:c3:1a:88:a8:17:db:b3:
                    28:b5:1a:00:fd:1a:aa:62:d3:cf:b3:5a:c7:05:11:
                    f6:4f:4f:5a:e3:23:86:54:59:46:3a:e0:14:ee:d5:
                    fd:69:9f:79:15:57:e3:c9:86:c9:a4:28:7f:0b:07:
                    c6:a7:4a:69:bc:40:fb:81:04:a5:6a:2e:2a:8b:f1:
                    87:20:db:ea:5b:fb:36:29:b6:e6:9f:7f:73:14:5d:
                    ea:3f:c7:e8:09:38:df:69:f6:54:2d:50:7d:93:9b:
                    f7:a7:fb:59:c6:f5:53:b0:48:a2:5c:13:c3:36:ea:
                    20:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C3:21:48:65:1A:D7:A1:B7:35:5B:5B:C9:1B:21:AC:B7:46:81:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bc625f3a-cc44-3788-8476-8cd61831751c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:550:1209::-2001:550:120a:ffff:ffff:ffff:ffff:ffff
                  2001:550:2705::-2001:550:2706:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:2e:ce:7b:3e:a3:57:c2:c1:e5:34:78:f3:9e:bc:b0:d2:37:
         98:61:b6:c9:f7:e8:65:c2:cb:c7:4b:75:e3:15:e1:17:18:bb:
         54:e7:9e:61:a8:c7:21:a1:2a:8d:40:e7:0b:28:82:68:a1:0f:
         96:17:d9:45:33:74:14:d6:d2:17:91:d4:73:da:dc:46:15:17:
         16:1c:13:b1:81:21:dc:b3:68:ed:db:70:72:0c:20:36:ab:c9:
         9d:22:f1:36:4c:40:55:28:38:0c:a0:24:b3:8e:cf:04:6d:a7:
         21:03:98:d7:18:5b:f8:0e:b7:7b:91:b6:ad:39:e2:6f:bc:86:
         f2:3d:79:4f:13:4f:d4:05:41:0e:92:c3:60:59:56:7a:6c:27:
         e9:31:3d:f2:69:f1:77:a0:53:17:89:2a:2c:79:a1:15:f3:ec:
         f9:c0:54:12:d7:35:7f:fd:a2:32:3b:81:d4:a7:e4:70:0a:da:
         f3:60:8a:95:9b:b4:04:17:09:6b:4d:5f:12:14:75:3a:e4:2a:
         22:00:13:87:d8:94:a4:b8:57:fb:3e:4f:c5:0b:8a:29:10:2f:
         52:d9:f4:4d:09:d9:67:2b:bd:0e:98:77:fd:5d:9d:60:8d:f7:
         77:cd:5b:69:bd:0a:13:c7:65:ff:96:f2:ac:94:29:55:c4:35:
         9e:bb:52:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 12:21:52 2026 by rpki-client