Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e00dd15d-6181-3c59-a11a-5013b07f681b.roa
File:                     e00dd15d-6181-3c59-a11a-5013b07f681b.roa (raw, json)
Hash identifier:          i9bYmkzsnvSFTWT0Ss/U+6YSZVTpw3FJHjrWxdynn3I=
Subject key identifier:   95:D5:F8:A7:9F:75:68:DF:38:9A:19:98:1D:0F:2C:ED:C7:43:79:E5
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584F698D7F6FFF13BED3E4113900
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e00dd15d-6181-3c59-a11a-5013b07f681b.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     396982
IP address blocks:        13.109.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:7f:6f:ff:13:be:d3:e4:11:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=8211270e-5009-4dc9-a634-b2dab2616498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:08:8d:dd:87:83:07:86:cd:bd:5a:d5:24:6b:
                    c0:8f:f6:81:0e:41:75:f0:c6:05:3c:26:ac:61:ad:
                    1a:fe:52:ca:e7:a0:67:c1:80:94:5e:b2:e7:fa:1f:
                    5a:47:3f:49:f9:6e:27:0b:3c:64:a5:82:e6:0e:6a:
                    e8:4e:f3:81:b1:71:c0:9a:a2:74:74:20:14:de:c7:
                    39:7b:b0:ae:ff:07:09:13:9e:fd:b6:4f:ee:f2:d5:
                    0d:51:a8:bf:da:ce:e6:c0:cb:74:0b:5f:1c:15:b9:
                    63:5c:66:ca:09:bc:aa:47:51:ab:cc:3c:37:cd:de:
                    a9:0b:b2:b7:2f:ab:4c:c3:84:ff:6f:b5:8d:ae:65:
                    33:c7:aa:2b:97:a5:55:81:c5:87:ce:23:36:51:90:
                    0f:7c:d7:68:ee:d6:7b:03:79:e3:5c:fb:45:2b:18:
                    bb:82:d0:13:c0:91:1b:d9:29:2e:1c:c0:9d:c1:8d:
                    64:02:2a:2d:c1:e0:98:0a:11:6d:b4:40:7f:af:98:
                    e2:19:ee:33:24:37:b3:53:be:2d:25:4c:92:4e:9c:
                    0a:30:2a:dd:32:f1:05:5b:79:7e:73:17:4b:e0:68:
                    aa:fe:ac:7f:24:af:21:fe:d4:f6:68:04:c1:e7:57:
                    f5:4f:f9:27:ea:7b:ab:8d:25:a0:21:20:c8:8e:1d:
                    9f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D5:F8:A7:9F:75:68:DF:38:9A:19:98:1D:0F:2C:ED:C7:43:79:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e00dd15d-6181-3c59-a11a-5013b07f681b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.109.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:59:48:f6:f5:d2:d8:ad:dc:9f:7c:02:19:93:4d:f3:d1:79:
         87:28:fd:1f:01:49:52:c7:09:c6:9a:ea:38:77:97:24:35:b3:
         e5:81:aa:0d:43:ef:dc:3c:c9:c2:2a:16:98:b7:31:69:bc:c3:
         fc:cf:c2:45:f0:e8:d9:3c:c2:8f:72:90:ec:1d:a4:cb:5f:c9:
         b6:81:25:d9:2e:38:2e:12:66:0f:db:d7:f9:38:d2:63:73:54:
         e0:2c:fd:ee:30:f4:58:24:7e:a3:55:46:a2:f8:ea:56:68:2b:
         4d:90:0c:38:fe:0a:bb:ef:f1:ca:fa:d7:19:aa:8c:3a:14:12:
         69:87:5c:ed:d1:07:a8:1a:f5:84:55:f5:ef:bb:dd:da:00:c2:
         e8:86:f2:ba:1c:16:86:9f:b4:1b:db:e0:04:16:0d:c1:dc:a4:
         8c:d1:06:d5:40:44:a2:50:5c:b2:bf:22:13:9f:3a:05:03:5f:
         fd:0d:3c:34:38:94:42:90:52:1b:ca:c8:2c:e8:8b:45:21:87:
         60:41:70:a9:c8:0c:07:4b:80:06:92:0c:2e:63:48:a1:88:39:
         70:6a:23:a9:96:45:07:30:72:7c:74:13:12:57:35:0c:2f:3d:
         c3:06:1c:96:9f:53:c7:02:a5:42:d0:a4:e8:86:b6:cd:95:e2:
         d5:0b:a7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:36:57 2026 by rpki-client