Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/8095ccdf-f60f-36d8-b2ee-6622e2bfac7a.roa
File:                     8095ccdf-f60f-36d8-b2ee-6622e2bfac7a.roa (raw, json)
Hash identifier:          P1DBumj/UkqqOGUAPh5WVHUd4eZ7opBAWkjgk+T1Zjo=
Subject key identifier:   33:1F:C5:1E:2E:8A:9F:B9:4F:E1:B6:8C:F5:50:A6:AD:83:DB:3B:66
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584EBC771A5056F15AE4711DF500
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/8095ccdf-f60f-36d8-b2ee-6622e2bfac7a.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        31.99.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:1a:50:56:f1:5a:e4:71:1d:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=011721e3-afb2-4712-a33f-68c74ac63eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:75:ab:14:e3:15:3b:3e:04:ba:40:5b:4b:08:
                    04:42:29:36:2a:ab:e4:a1:f4:b6:4f:69:d2:40:ec:
                    23:c1:5e:0d:9e:e9:e2:28:ed:13:a4:7a:61:ce:15:
                    9d:b9:6d:5e:7c:d4:94:37:81:3f:af:a5:2f:d0:20:
                    7f:c1:24:85:4c:d2:1b:be:47:13:fa:06:10:2b:25:
                    a1:0f:19:66:62:51:54:da:07:9a:11:a2:6d:7c:8f:
                    9b:71:18:ed:4a:ea:5c:73:fd:7c:03:37:9e:49:26:
                    f9:24:47:64:6c:c2:7a:6a:ff:b2:3e:6d:9f:93:f7:
                    6b:3a:e0:0b:84:91:64:e4:4e:a5:f2:91:9f:66:09:
                    2c:d5:70:02:40:73:2a:3f:9b:b0:bf:98:ce:b9:81:
                    93:9d:b9:f7:05:b2:fd:00:ce:ab:99:79:66:c1:c7:
                    2f:3d:36:17:f3:8e:37:11:eb:4b:d0:0d:8e:92:55:
                    cd:f1:66:ca:d0:3e:8d:54:30:67:c7:c2:db:28:0b:
                    d7:42:77:1d:82:00:13:4c:e7:6e:55:51:3d:eb:44:
                    53:1e:e4:68:83:0d:94:ae:33:68:a6:f5:ec:43:df:
                    ab:41:f9:e2:36:aa:e8:f7:cc:fb:a3:ff:17:e0:97:
                    28:1e:19:05:df:0b:c4:62:ac:c2:d8:7f:2c:7f:0b:
                    d7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1F:C5:1E:2E:8A:9F:B9:4F:E1:B6:8C:F5:50:A6:AD:83:DB:3B:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/8095ccdf-f60f-36d8-b2ee-6622e2bfac7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.99.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:6d:14:8d:f6:7e:25:57:ef:dd:2f:47:6f:1f:d7:c2:ef:e7:
         60:34:6c:04:0d:ea:3f:e2:51:56:e0:cc:3f:e2:01:6f:76:c8:
         88:76:33:de:32:6a:16:46:6b:27:31:85:bd:4f:d0:8f:9d:a8:
         fc:0c:50:d7:00:8b:13:2d:6d:58:38:c6:41:f6:64:5a:9b:4d:
         1f:3f:43:05:26:73:32:17:2e:85:25:63:44:67:f6:e2:c7:91:
         6a:a0:f1:2f:0f:82:8b:a8:22:83:dc:d3:b5:77:07:ee:28:0b:
         bd:25:70:f3:2f:3e:8c:c8:47:5c:58:d0:83:d2:9a:4e:65:13:
         1e:8d:8b:cf:4c:23:16:6f:97:ab:02:86:ee:2c:e9:51:6e:cb:
         9a:a7:22:42:0f:aa:ce:e0:51:64:3b:aa:f7:b8:a4:e8:e1:3b:
         22:f2:f4:d4:45:33:43:46:26:0a:32:28:43:0b:19:6d:ec:4b:
         ac:29:93:2a:35:0c:1f:9b:41:70:73:a9:e9:fa:00:89:fb:d5:
         6c:b5:3e:93:1f:f4:f9:20:14:d6:f5:0b:77:58:36:ce:86:2d:
         c8:11:27:80:df:ea:0b:12:09:2e:be:a7:ef:4e:77:ab:b7:d9:
         a7:40:2a:79:97:80:15:9c:39:83:ab:3f:e8:7d:b8:0c:1c:53:
         69:2a:6d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 00:39:10 2026 by rpki-client