Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc2ecd40-9d55-4ab1-8df6-7395a80279a8/bc93b2b4-d41f-3bd9-919b-9053712773e8.roa
File:                     bc93b2b4-d41f-3bd9-919b-9053712773e8.roa (raw, json)
Hash identifier:          3B7AG3GB91KUUQjaa5r6HXsE7NdBGi+Bj5sXkEkn1Dw=
Subject key identifier:   D8:B0:56:B6:5C:62:2E:BC:F5:D2:A2:8D:57:7B:92:84:77:10:13:14
Certificate issuer:       /CN=dc2ecd40-9d55-4ab1-8df6-7395a80279a8
Certificate serial:       010D0C9F4328584DE88092F11A587A4E3DD20E80
Authority key identifier: 9C:EE:7A:9D:DD:DA:BB:C8:7D:F0:32:84:F3:0E:33:EE:93:42:31:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc2ecd40-9d55-4ab1-8df6-7395a80279a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc2ecd40-9d55-4ab1-8df6-7395a80279a8/bc93b2b4-d41f-3bd9-919b-9053712773e8.roa
Signing time:             Thu 21 May 2026 14:48:10 +0000
ROA not before:           Thu 21 May 2026 14:48:10 +0000
ROA not after:            Wed 19 Aug 2026 14:48:10 +0000
asID:                     27560
IP address blocks:        66.242.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc2ecd40-9d55-4ab1-8df6-7395a80279a8/dc2ecd40-9d55-4ab1-8df6-7395a80279a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc2ecd40-9d55-4ab1-8df6-7395a80279a8/dc2ecd40-9d55-4ab1-8df6-7395a80279a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc2ecd40-9d55-4ab1-8df6-7395a80279a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:80:92:f1:1a:58:7a:4e:3d:d2:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc2ecd40-9d55-4ab1-8df6-7395a80279a8
        Validity
            Not Before: May 21 14:48:10 2026 GMT
            Not After : Aug 19 14:48:10 2026 GMT
        Subject: CN=3ff19b93-5bc7-4ccd-b2bb-39cf50c4397e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:94:6f:f6:e6:54:c3:ce:d8:e0:77:0d:8e:59:
                    14:05:0c:65:29:c7:53:4f:1e:20:ec:3b:bb:36:da:
                    b4:ba:90:c7:06:d2:99:79:1c:2d:3c:f1:8c:c9:ed:
                    3c:53:84:71:ed:9b:0a:15:f6:56:cb:cd:22:9a:d2:
                    49:f9:ac:59:99:a6:60:4a:30:13:ad:63:81:dd:67:
                    c5:1e:e7:f7:15:08:73:38:36:96:23:d5:77:12:4a:
                    19:51:72:ba:07:f6:2e:a6:02:6a:bb:0a:93:c3:bf:
                    2f:69:e4:f6:11:67:38:d2:45:80:f4:c3:bd:03:84:
                    a3:e4:ab:c8:a3:06:69:1f:42:cd:a8:a2:a6:ad:01:
                    67:97:17:42:4a:7f:71:75:00:7c:e2:79:fb:d2:26:
                    7d:1d:77:96:23:dd:ed:50:5c:5f:bc:9d:a2:db:26:
                    4e:d6:b3:fd:f4:64:09:cb:49:5b:ba:7a:65:b5:55:
                    0e:1d:b4:73:07:7c:53:40:6a:21:22:50:8a:42:78:
                    5c:12:92:1c:3b:5f:3d:84:38:a0:cf:5b:16:d0:c1:
                    7d:cd:9d:73:3a:05:af:9e:f3:95:5a:db:8a:ce:bb:
                    11:34:e0:cd:8c:7c:73:49:b0:7f:1f:31:33:02:d7:
                    d2:0a:c9:b2:c2:f4:8e:58:6f:c6:2b:68:1e:23:04:
                    03:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B0:56:B6:5C:62:2E:BC:F5:D2:A2:8D:57:7B:92:84:77:10:13:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc2ecd40-9d55-4ab1-8df6-7395a80279a8/bc93b2b4-d41f-3bd9-919b-9053712773e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc2ecd40-9d55-4ab1-8df6-7395a80279a8/dc2ecd40-9d55-4ab1-8df6-7395a80279a8.crl

            X509v3 Authority Key Identifier:
                keyid:9C:EE:7A:9D:DD:DA:BB:C8:7D:F0:32:84:F3:0E:33:EE:93:42:31:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc2ecd40-9d55-4ab1-8df6-7395a80279a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.242.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:3b:7b:5e:f9:b5:72:08:4a:05:b5:c6:90:55:bc:c3:d7:53:
         71:3d:70:0a:8c:52:58:e0:4c:4c:45:b2:26:a2:8b:93:f4:fb:
         c7:a4:40:47:00:f6:0b:6a:f9:7d:36:62:5a:eb:b1:0a:a6:10:
         fb:0c:b2:3d:fa:9f:d5:c2:95:e9:2d:be:05:ea:a3:0c:7d:25:
         4b:33:27:2d:e4:ea:c1:3b:a5:57:88:ad:2f:89:ea:d1:79:70:
         fc:14:d3:e3:45:cb:f9:f1:3b:7c:12:f9:09:02:2c:28:31:0d:
         a5:18:83:54:fa:1d:1e:5a:83:82:09:4c:ff:1c:90:73:b5:a0:
         d5:58:61:ca:8b:97:ee:7e:88:7a:00:42:84:a1:c1:9d:ff:d3:
         7c:c1:be:90:19:b9:62:06:83:3b:a9:82:b2:6c:cc:2c:d6:dc:
         7c:08:a7:db:e4:4a:9b:b7:5c:9e:e4:1f:de:73:55:c3:73:de:
         77:c3:92:d2:40:83:41:5a:c0:ba:c7:9a:1c:29:60:1b:67:d9:
         80:d1:c0:83:15:cb:52:56:e9:57:d7:0b:e2:be:43:5e:c0:7b:
         6f:02:9c:b6:39:e0:02:66:29:2e:04:10:33:7e:b5:11:6e:76:
         3e:09:63:58:c1:1d:0e:4f:dd:23:06:c8:9e:88:81:4c:ee:2d:
         34:6a:5c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:48:19 2026 by rpki-client