Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9459405e-891d-328c-86dd-9338e9eb4edb.roa
File:                     9459405e-891d-328c-86dd-9338e9eb4edb.roa (raw, json)
Hash identifier:          HzebN/DQQlR60DqZQ7MYCm1YeZntwSPhZJ38j/RmgEY=
Subject key identifier:   BC:0F:58:18:E8:5F:4C:87:D7:1D:0E:11:ED:8D:FD:C3:84:8C:74:BD
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584D5E1A669F664C16E7F6FCF558
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9459405e-891d-328c-86dd-9338e9eb4edb.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     53508
IP address blocks:        24.244.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:66:9f:66:4c:16:e7:f6:fc:f5:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=5440d2e8-4450-41b2-adaf-f3b175317a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:29:75:07:c7:47:ca:51:be:30:09:1a:eb:65:
                    13:68:e9:1d:0f:39:6b:55:f2:c6:32:73:83:73:02:
                    5c:8d:73:09:74:54:b6:8a:2d:3f:fa:c2:87:9c:57:
                    c2:9c:f0:f7:d8:4d:88:e7:51:22:d8:bf:f4:df:07:
                    32:91:48:68:eb:6f:5f:c9:7b:01:53:8b:a7:a3:6a:
                    6e:ad:c7:7b:0a:01:6b:4e:f7:d8:e9:31:13:04:df:
                    57:4b:3e:06:5f:b3:73:11:a4:af:55:84:e2:63:d0:
                    23:2f:72:dd:25:e1:5f:19:bc:c0:99:80:06:32:ef:
                    bc:d9:62:f4:b1:55:16:19:e3:56:d3:92:9a:90:b1:
                    82:e8:27:65:69:2c:e8:d0:d8:34:48:0c:0a:ff:d5:
                    2f:0c:45:78:87:c2:d8:9f:34:52:30:34:12:6d:ba:
                    29:71:98:31:37:43:09:e7:aa:9b:fa:24:58:32:5b:
                    5e:ff:39:f2:95:db:51:cf:f4:8a:88:e7:2f:e3:1f:
                    19:50:b0:61:03:d8:74:61:10:8b:fb:29:28:d6:5a:
                    61:60:2a:a2:a3:30:ac:70:e1:92:62:95:34:01:2d:
                    b7:8e:00:a0:00:d3:bd:f6:25:9a:aa:45:54:a1:d7:
                    dc:38:00:b8:fe:f3:13:30:fb:44:8c:8e:e7:2f:7a:
                    92:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:0F:58:18:E8:5F:4C:87:D7:1D:0E:11:ED:8D:FD:C3:84:8C:74:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9459405e-891d-328c-86dd-9338e9eb4edb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.244.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:e3:08:00:68:d1:01:a7:e3:43:50:07:a2:23:16:0d:38:a4:
         a8:c2:d8:d7:c8:59:17:30:40:1c:eb:70:bf:ac:a5:46:25:04:
         27:a4:93:44:89:36:be:f1:0f:4a:1d:94:4c:13:c6:12:42:21:
         d3:35:41:bf:66:a8:e5:e8:51:03:20:9d:80:31:e7:e6:02:fd:
         e4:87:5b:2a:81:89:ae:99:e1:1e:97:a6:45:47:b7:ac:df:54:
         41:3f:f4:fc:db:68:ac:02:00:45:4b:fc:ea:45:b8:5a:6a:51:
         da:d5:c9:be:41:ad:42:f3:f2:08:c5:67:af:04:c6:2d:9d:d4:
         2d:6f:b7:40:47:03:93:1c:a1:53:04:04:4d:34:20:83:75:e7:
         70:8f:d2:00:f0:80:c5:74:24:ef:81:19:92:6d:dc:80:f0:2c:
         82:bb:32:76:55:e4:06:3a:22:09:71:a6:7f:ab:73:cc:fe:45:
         8f:2e:7b:ff:41:29:a8:44:b8:0d:c5:c5:7b:7a:64:32:ea:04:
         44:1f:e7:42:6e:3e:f7:57:63:5f:a1:01:73:4c:c6:2f:29:79:
         d2:60:95:53:75:45:c1:1f:cf:5e:bd:d5:b2:2b:34:ce:94:ef:
         18:ce:b1:b7:1d:48:bd:bf:61:32:0e:90:97:4c:23:7b:3a:e3:
         03:dc:5d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 23:01:04 2026 by rpki-client