Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/bc2cb9c6-7705-349c-9102-a6741ccef7bc.roa
File:                     bc2cb9c6-7705-349c-9102-a6741ccef7bc.roa (raw, json)
Hash identifier:          8B0s5uURRNfJ8/Tnng+uMmz3lIL4WSPdlPtQqIuJ9Og=
Subject key identifier:   69:03:D2:77:32:CD:39:9E:97:BB:54:FA:38:AC:74:0D:32:C1:B5:90
Certificate issuer:       /CN=11c64f1a-22fa-4091-9f9d-42edbc6aefff
Certificate serial:       010D0C9F4328584B715CB3CCBA4B6D8F855F7280
Authority key identifier: FF:F9:D5:A6:43:BF:DB:EF:1C:56:31:0D:DF:04:B8:1E:07:47:A0:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/bc2cb9c6-7705-349c-9102-a6741ccef7bc.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     400686
IP address blocks:        134.195.19.0/24 maxlen: 24
                          2602:2d6::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/11c64f1a-22fa-4091-9f9d-42edbc6aefff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/11c64f1a-22fa-4091-9f9d-42edbc6aefff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:b3:cc:ba:4b:6d:8f:85:5f:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11c64f1a-22fa-4091-9f9d-42edbc6aefff
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=5706f066-10b4-4a2b-a641-e24a02de5e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:01:4e:67:72:8e:23:7a:42:de:fd:ec:28:0c:
                    91:83:df:46:0f:21:fa:e9:55:19:d0:70:53:d2:45:
                    b5:44:d6:62:46:38:e6:c0:f9:30:73:5f:8a:f2:9e:
                    47:a2:34:5a:e4:a3:dd:7c:2b:06:3a:af:75:0d:02:
                    a9:bf:1e:8d:95:90:5a:7d:ee:90:d7:72:2f:b8:d6:
                    71:bd:74:86:b4:19:ca:c3:fa:0e:c2:f5:1d:9a:a2:
                    8d:88:36:d8:cf:12:31:49:4b:42:4d:4b:5d:bd:d4:
                    51:e9:8c:67:be:e6:1e:94:8c:51:4d:71:27:82:44:
                    5f:6b:e0:8e:ae:14:ad:bb:2d:11:50:ee:4c:05:e4:
                    a1:02:ab:d0:17:53:d6:81:f8:f4:c4:79:66:7c:68:
                    99:0b:06:b3:85:33:57:f2:5b:c1:e2:d5:74:89:5c:
                    5e:8a:29:ea:b9:42:ac:35:74:4d:02:79:aa:2d:9c:
                    cc:9f:4b:c8:f8:7f:e9:ac:b0:53:96:d4:03:ff:cb:
                    c4:96:0a:2e:d9:97:af:27:ba:b2:75:ba:0e:f5:da:
                    0b:e2:41:76:d0:2a:a4:62:05:46:72:a1:9e:f0:ed:
                    b3:f7:70:fb:35:f0:7e:00:ed:55:ff:97:53:0d:5c:
                    56:fc:0c:8d:06:7e:f4:63:46:54:71:bf:65:10:82:
                    d7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:03:D2:77:32:CD:39:9E:97:BB:54:FA:38:AC:74:0D:32:C1:B5:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/bc2cb9c6-7705-349c-9102-a6741ccef7bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/11c64f1a-22fa-4091-9f9d-42edbc6aefff.crl

            X509v3 Authority Key Identifier:
                keyid:FF:F9:D5:A6:43:BF:DB:EF:1C:56:31:0D:DF:04:B8:1E:07:47:A0:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.19.0/24
                IPv6:
                  2602:2d6::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:af:fc:13:72:89:4b:f4:b5:d3:a1:3c:c0:18:12:17:0f:9d:
         32:44:a9:50:d5:d8:7d:97:33:f0:38:4e:81:94:63:5c:e7:b6:
         e7:bd:91:40:e3:88:68:fe:66:75:02:a0:a1:2c:22:1b:6d:4d:
         ee:18:3f:d9:e9:f4:9a:7b:34:5e:9f:b3:5a:1b:6e:40:f5:09:
         47:10:16:7a:6f:44:11:9e:d9:a0:e5:fb:33:45:17:18:51:71:
         76:22:39:b6:78:85:7d:69:11:e3:6c:8a:d7:58:b9:ae:26:56:
         32:7c:8d:49:0d:5c:80:e0:90:41:8d:6f:76:9b:07:9f:18:3b:
         02:24:8f:1f:dc:e1:d2:b5:57:1c:9f:c7:8b:a6:a6:6b:72:77:
         17:9b:c5:5e:33:97:8e:d4:7f:0c:99:f9:5a:97:29:68:93:9e:
         5e:02:70:b9:b7:c7:c2:67:87:23:f2:42:82:b7:a5:d7:17:86:
         6b:96:a9:07:a2:91:8e:5d:84:cc:df:87:70:74:72:5b:7f:df:
         1b:49:86:09:91:38:ed:95:c3:db:ae:b8:c3:7c:8c:88:f0:0a:
         23:c4:fe:d3:0b:e2:49:73:96:cb:0b:55:b1:ae:48:bf:85:a3:
         28:5a:4f:65:df:88:a7:3a:5f:50:bf:81:61:5d:0e:07:c0:88:
         91:fb:0f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:10:53 2025 by rpki-client