Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/bcb88dad-ac67-33fb-ae1e-e3b724c1358e.roa
File:                     bcb88dad-ac67-33fb-ae1e-e3b724c1358e.roa (raw, json)
Hash identifier:          DAEVI4lIZCU/zP5rR0Bjo8K1Soea1Ik964LnpDYjRkk=
Subject key identifier:   2F:55:A0:7F:97:DA:09:F4:4A:14:09:60:76:9B:CF:AE:9F:66:4D:3E
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584E1B798B4D31ECD51CBA4D5340
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/bcb88dad-ac67-33fb-ae1e-e3b724c1358e.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     212238
IP address blocks:        216.180.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:8b:4d:31:ec:d5:1c:ba:4d:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=b2394e9d-f4e7-4288-aa85-1149448b24dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:02:fd:cd:9d:74:43:2f:c9:53:59:b0:77:9f:
                    21:2e:22:85:3d:f7:15:ae:e0:1f:8b:6b:c3:c0:5a:
                    6e:f2:1a:91:3c:61:65:1f:78:4b:37:ad:27:84:2d:
                    68:64:64:4a:f4:59:49:5e:81:dc:50:bd:a8:75:a5:
                    f2:e3:3b:bb:fb:e1:6f:f5:30:30:40:f5:83:c0:1e:
                    84:ba:a9:89:1e:98:4c:7e:59:9b:40:c5:bd:80:87:
                    3f:d2:bf:38:b9:0e:75:8d:55:25:d5:30:0a:f7:29:
                    b5:c2:93:c2:06:79:06:de:50:b9:af:5d:25:cb:63:
                    14:06:7f:ea:f6:c8:d0:a2:73:f1:12:e1:d5:9c:ed:
                    4b:07:78:07:92:44:12:21:8b:ca:d4:1f:eb:cb:d1:
                    52:22:2d:c6:6c:bc:50:96:be:cb:28:73:e8:a9:e7:
                    47:d4:19:86:fa:0e:b0:44:1a:65:a7:da:ad:a8:6c:
                    1e:96:fb:fa:26:62:03:83:70:40:d4:68:9c:a5:80:
                    a4:57:ff:fe:b6:88:07:b9:98:af:b2:e6:f5:52:28:
                    40:ae:37:66:0c:ef:1b:54:07:a0:d6:2b:07:46:b3:
                    c2:e8:e2:71:b8:af:b7:2b:68:72:60:4f:bf:83:27:
                    d9:7d:86:3d:20:6d:10:a7:1b:ce:14:ca:b5:cd:b0:
                    fe:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:55:A0:7F:97:DA:09:F4:4A:14:09:60:76:9B:CF:AE:9F:66:4D:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/bcb88dad-ac67-33fb-ae1e-e3b724c1358e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.180.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:23:3c:44:3c:a3:36:fb:05:22:af:c7:19:79:1b:98:a1:8b:
         ce:ae:15:e1:b3:07:42:02:e1:8d:cd:f2:fe:31:4f:7d:66:4d:
         a5:68:24:64:15:61:c6:a9:f4:14:19:7c:19:7e:bb:36:3f:d9:
         79:f7:35:b6:be:9b:55:96:39:f3:cd:88:de:18:03:e8:87:7d:
         0c:be:5a:46:9d:da:57:08:1f:bc:05:c0:5b:0b:dd:ff:f6:96:
         00:4d:21:d2:c6:ee:c0:c3:62:18:b4:8a:ac:95:e4:90:3c:89:
         f7:35:12:f8:03:e4:75:0e:be:99:74:7d:64:e2:26:80:30:da:
         c4:d9:65:63:37:79:bc:44:06:d8:60:63:83:f8:e1:a2:37:c0:
         b5:a2:ae:b4:1c:a0:3f:9a:42:6a:c1:ca:10:60:1e:11:3e:0c:
         19:68:06:29:79:35:69:b6:f7:57:d1:b4:7a:10:23:86:f0:a3:
         e1:1f:cb:fc:34:9a:5e:9a:81:ca:25:d6:44:cf:aa:99:ba:d0:
         79:75:5d:14:e0:ed:59:1f:c3:97:fc:59:26:bf:f2:a7:7a:18:
         3c:33:9b:c2:6c:0f:64:4f:b2:48:5e:cf:1b:7f:b9:d4:7d:09:
         16:c0:2f:90:de:e5:8c:ca:36:07:0d:b5:fa:40:04:1e:21:b6:
         01:b0:2d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:58:34 2026 by rpki-client