Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/bc77fd2e-d005-3d71-a7c8-c30d5ca46ca9.roa
File:                     bc77fd2e-d005-3d71-a7c8-c30d5ca46ca9.roa (raw, json)
Hash identifier:          rvrl0/HMRzfOwnvZaX9tynVUgyKXT6TVURCuLHKl8Co=
Subject key identifier:   0F:77:E1:17:E8:5C:F0:A3:83:D4:9E:FE:7C:31:7C:E1:84:CC:58:46
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584CF6ECD577AB95A11FF0149A80
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/bc77fd2e-d005-3d71-a7c8-c30d5ca46ca9.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     13768
IP address blocks:        64.227.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:d5:77:ab:95:a1:1f:f0:14:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=78884f9e-cf28-49f6-9ea9-24e5ef20728a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5b:3c:bc:25:1f:fe:75:50:d8:38:5a:ba:5b:
                    9a:55:1a:44:e9:7f:0b:da:b9:cf:32:bc:57:d3:86:
                    9e:9d:31:10:e2:33:3a:92:64:45:c6:16:eb:07:4c:
                    7d:b1:b5:8d:bd:14:66:91:e1:f1:9a:b8:c5:54:60:
                    df:01:5d:4e:09:b3:22:91:16:e0:f2:f5:af:c4:fc:
                    0c:59:45:0c:d5:90:c1:12:42:ab:ae:d5:f0:92:c1:
                    7d:98:d6:f3:cf:bd:75:22:0f:1d:a7:b0:92:24:45:
                    1c:e8:2c:81:fc:dc:b1:9d:82:c4:2d:5c:d5:2c:86:
                    cd:52:9a:9e:1d:95:df:60:87:7b:ed:97:3d:49:8b:
                    5d:26:33:19:41:07:39:a6:00:23:40:7a:57:d9:e1:
                    f4:30:0b:b0:25:ec:f0:d0:e8:3f:b9:c3:a4:2a:5b:
                    f1:02:7e:52:9c:39:53:3d:85:48:b8:83:fb:cb:85:
                    43:ae:2b:e2:49:04:69:8d:75:2c:75:5b:19:71:05:
                    2d:dd:6e:75:24:17:6c:c1:30:34:21:7d:3e:b0:a8:
                    f2:f4:92:18:5e:13:20:19:34:80:09:dd:65:ca:ae:
                    53:0d:60:5b:88:9a:a3:f9:46:bc:18:98:f9:b0:b7:
                    d5:37:98:99:b6:9b:aa:89:7f:dc:9d:dc:a2:ea:8f:
                    f8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:77:E1:17:E8:5C:F0:A3:83:D4:9E:FE:7C:31:7C:E1:84:CC:58:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/bc77fd2e-d005-3d71-a7c8-c30d5ca46ca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.227.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:8d:15:96:90:64:b9:8d:3a:c3:4e:82:ff:89:fa:bd:07:c3:
         2a:43:55:3e:ad:8c:b2:cb:4c:d0:0a:d8:b9:40:cb:c3:69:04:
         1b:ac:6b:d6:23:17:1a:d8:9e:e9:39:2c:8a:a7:bc:b7:23:68:
         3c:b8:d0:d9:c0:06:d2:37:7a:b3:0d:5f:2a:c3:8f:e6:87:81:
         62:d0:6e:f9:aa:24:71:7c:ab:25:35:9e:df:52:42:0e:2f:b3:
         c8:8e:35:3f:92:e5:72:b0:17:b2:8f:f0:a5:cd:e4:65:87:c1:
         d5:db:a3:9c:fc:af:91:a5:43:c7:5c:0a:e9:d5:cd:01:3d:5c:
         1c:0b:fc:3b:95:f8:a0:b3:af:b4:88:18:b4:4a:d3:d1:e4:cd:
         e2:e5:06:33:9b:97:e6:ab:99:aa:9b:35:08:9d:4a:6a:b8:19:
         26:7b:29:12:d2:ed:0c:d9:01:ec:04:25:c4:fd:c6:87:4d:d1:
         a5:8b:7f:c6:f9:96:53:54:8b:1b:3c:f4:78:73:b0:a4:2f:fd:
         79:10:e4:b8:c4:e6:43:57:6d:4c:ec:0c:fe:6f:1c:d0:bc:93:
         a1:8d:62:42:7a:d7:60:03:28:9c:e9:06:eb:15:3b:8e:d7:ff:
         b5:85:5f:73:60:c0:3c:ef:0a:2a:a2:88:12:6c:e7:cb:bd:fb:
         f1:44:4f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 15:59:53 2026 by rpki-client