Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/69e7bb45-303a-3a64-b6aa-813f620b77b9.roa
File:                     69e7bb45-303a-3a64-b6aa-813f620b77b9.roa (raw, json)
Hash identifier:          o9/89xCBX3QgI3d2WNCdKrs9DzBmJ5OCaTOUDbxZ3D4=
Subject key identifier:   6E:AD:2F:12:F1:31:BA:89:1E:4E:B0:7E:B9:E6:E0:26:10:F9:E6:18
Certificate issuer:       /CN=bca48ad0-f613-4c66-b07a-6473d8a5aa26
Certificate serial:       010D0C9F4328584E4559D3617372C6708A7F2E80
Authority key identifier: 95:5B:53:3D:4E:AA:A3:E9:E0:E7:45:FD:FC:E6:48:59:27:4B:2D:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/69e7bb45-303a-3a64-b6aa-813f620b77b9.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     11260
IP address blocks:        67.58.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:d3:61:73:72:c6:70:8a:7f:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca48ad0-f613-4c66-b07a-6473d8a5aa26
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=3d96b459-c49c-4ac2-a11b-ffa6abd6a9aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0f:ee:d3:a2:c8:c4:55:70:96:d0:29:3c:00:
                    83:26:30:de:8f:74:c3:a5:45:66:d4:eb:9c:a5:25:
                    ff:1f:06:c7:aa:71:54:9e:07:b7:6d:80:e5:e6:ea:
                    d4:b1:71:a4:26:fe:da:a3:bb:ec:cc:6e:9a:2d:f3:
                    0a:3f:a0:9e:7c:2b:35:ae:1f:77:3f:67:8e:65:af:
                    17:57:d7:61:06:e6:bd:cc:79:57:79:33:27:b0:bb:
                    76:99:d0:2a:85:82:5e:90:b1:60:f7:1c:07:35:62:
                    88:72:90:de:39:0a:f1:43:e4:ef:f5:8f:c8:1b:30:
                    d2:c8:26:5d:91:84:49:42:f5:0d:0f:13:23:29:f3:
                    00:c7:6b:8a:06:8f:a0:c7:9a:63:76:40:19:70:bf:
                    b8:f6:cb:78:4e:02:32:55:c4:f6:71:1f:38:94:da:
                    61:b0:d4:0a:36:3e:58:ef:e5:fb:20:5e:de:5d:42:
                    d9:c2:b6:af:62:97:87:d7:05:44:b0:3d:d2:61:dc:
                    f3:e1:f8:63:13:65:cc:85:69:31:89:22:eb:da:d6:
                    de:03:39:48:c0:cf:fb:81:f8:cd:ce:cd:68:19:78:
                    67:f1:57:b8:d4:93:0c:35:6b:8d:62:b5:e4:ee:e1:
                    be:58:14:f8:c9:55:7d:52:06:b4:ad:c6:18:f9:aa:
                    5e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AD:2F:12:F1:31:BA:89:1E:4E:B0:7E:B9:E6:E0:26:10:F9:E6:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/69e7bb45-303a-3a64-b6aa-813f620b77b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.crl

            X509v3 Authority Key Identifier:
                keyid:95:5B:53:3D:4E:AA:A3:E9:E0:E7:45:FD:FC:E6:48:59:27:4B:2D:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.58.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:a1:89:48:a4:98:6e:58:64:e4:f7:f9:95:92:39:07:7f:74:
         0c:69:d4:12:7e:f6:60:bd:81:44:fb:84:06:68:67:bf:a7:5b:
         86:68:e4:6c:65:93:fa:d9:aa:ce:cc:87:6d:44:7c:01:66:18:
         18:d3:aa:59:90:25:d0:ab:2e:38:77:86:c2:a3:f8:a2:93:25:
         8e:15:3f:9e:6a:b4:75:11:cd:6d:5c:50:08:a8:e5:a3:48:9e:
         d9:fb:cd:32:ea:c6:71:26:73:33:72:54:98:1c:e4:00:12:d6:
         8a:b5:cd:8d:de:7a:39:fd:b0:18:5e:4c:0f:30:3d:13:1d:01:
         a9:4b:66:b2:96:b8:82:06:d1:d6:83:85:3c:af:48:43:01:cd:
         13:d3:3a:7c:6d:74:11:03:bd:02:81:ce:e6:5f:ac:eb:a0:57:
         9a:45:c4:48:1c:2d:0b:26:64:9e:cc:79:08:d4:39:cc:8e:7c:
         c9:83:0c:87:fc:e7:83:3f:43:b3:d0:70:51:3a:ea:f7:51:76:
         3b:f5:c8:7d:61:c2:c2:d1:d8:ed:c0:ac:fd:3d:26:aa:74:88:
         d4:0d:88:86:08:0d:db:48:65:91:1a:d2:73:b5:db:a2:9f:bc:
         37:81:fc:2d:62:dd:8c:e5:6d:07:25:94:8d:fa:c5:98:53:8a:
         89:e6:d3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 06:06:20 2026 by rpki-client