Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/bc77fd2e-d005-3d71-a7c8-c30d5ca46ca9.roa
File:                     bc77fd2e-d005-3d71-a7c8-c30d5ca46ca9.roa (raw, json)
Hash identifier:          vuNHD4x2muVnd7ne6AVJsRYt5zKwwWFOhAdaODDoMUc=
Subject key identifier:   88:07:0B:BE:BC:7B:F5:AF:3E:F6:F7:CC:7B:C1:52:36:B4:37:CA:BC
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584DD78B1993D086D71C36CB78E0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/bc77fd2e-d005-3d71-a7c8-c30d5ca46ca9.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     13768
IP address blocks:        64.227.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:19:93:d0:86:d7:1c:36:cb:78:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=65303e0a-950d-42e7-9487-2ba4e4bf9d61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e6:ac:d4:96:79:1f:69:88:bf:70:98:ba:7d:
                    b8:83:7a:4f:b2:f2:01:14:e3:4d:34:76:f2:20:19:
                    8c:4d:0c:3f:d2:85:ce:4c:3b:16:2b:bf:52:f0:6c:
                    e4:e2:70:47:4b:00:bd:24:ec:c3:23:96:7d:d6:3c:
                    58:1e:c9:1b:38:e8:81:b9:4b:a4:ab:1b:c3:60:b7:
                    67:61:6d:aa:cd:0e:7f:c6:c6:96:ed:1e:74:81:dd:
                    3f:56:1e:a7:f6:b2:36:3a:d0:80:1e:5f:d8:e7:1b:
                    a1:d9:23:46:2e:40:7a:2d:41:38:04:da:a4:8f:30:
                    8d:6e:a4:5c:3e:6f:e1:72:fa:ec:08:0f:32:39:08:
                    75:10:94:be:7d:3a:c2:07:42:6d:6d:73:68:71:8a:
                    95:31:00:91:05:64:40:80:2f:3b:2f:d2:a9:91:1a:
                    e3:1f:60:9b:6d:a3:e4:e1:e6:35:b4:a2:9f:11:17:
                    91:f9:5d:6d:66:21:06:fe:80:08:da:9d:68:1f:c0:
                    db:ca:cf:3a:7f:7b:13:f1:c7:90:ad:ae:0d:11:8d:
                    5e:cd:ae:55:95:af:0f:42:50:8e:59:54:11:73:9a:
                    6e:ee:9f:21:66:da:01:27:ef:28:93:02:ae:94:93:
                    ea:8c:67:d1:ee:20:9c:90:97:a8:d3:8f:ed:92:cf:
                    cf:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:07:0B:BE:BC:7B:F5:AF:3E:F6:F7:CC:7B:C1:52:36:B4:37:CA:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/bc77fd2e-d005-3d71-a7c8-c30d5ca46ca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.227.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:ba:45:cc:2a:c1:74:c5:02:d0:77:7e:96:59:27:c4:ef:6a:
         e8:a4:be:e9:29:1c:71:01:6e:00:46:39:56:76:43:e9:db:43:
         06:41:19:4a:a8:37:6c:4a:f8:1c:45:b7:87:b4:0f:20:4c:d2:
         7a:2d:f2:15:da:06:cc:32:a0:b7:cc:cf:7e:79:47:6a:1f:88:
         1b:3c:80:9a:5b:4a:b4:28:18:cf:c9:35:b9:17:48:02:a3:ba:
         dc:da:ff:9e:b6:61:ff:90:bf:73:c3:8e:03:8b:db:d7:73:8b:
         39:f4:bf:ad:36:45:49:a4:f6:88:86:7a:00:9e:a3:c3:85:5f:
         53:c7:d3:95:e6:91:ab:e2:ba:ea:df:02:1e:87:51:fd:ec:4b:
         b8:a5:d7:cc:05:9d:02:55:40:98:56:ce:53:56:4a:76:52:f6:
         e2:f2:ef:f4:96:87:6e:fc:6b:14:5a:c6:42:82:74:f8:a8:fc:
         d2:36:d0:f0:b0:b0:e0:a8:e7:a7:d3:67:21:fe:1b:12:37:1a:
         b6:3e:83:06:c4:2f:be:69:b1:06:24:3b:91:80:1e:58:f2:70:
         36:78:55:c2:86:06:16:56:a6:5f:bb:1c:d1:fe:6b:c8:ef:00:
         d7:90:b1:9c:df:d1:16:26:13:f0:7f:20:e2:ab:a8:4a:18:40:
         57:4f:6b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:57:49 2026 by rpki-client