Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/9c801b14-9640-3531-8c71-50821022e72c.roa
File:                     9c801b14-9640-3531-8c71-50821022e72c.roa (raw, json)
Hash identifier:          NIOQbbBuC4WQg0PfBXQ2N/O96ao2/OTZrPaKEe42BB4=
Subject key identifier:   76:10:8C:36:E1:96:A3:E6:87:4E:89:07:77:2E:6E:57:B8:7D:BF:5D
Certificate issuer:       /CN=bbc10cdd-c548-4bd0-aafb-ae57822b4599
Certificate serial:       010D0C9F4328584E48248C9F1502BA1BD314F000
Authority key identifier: BC:F8:A0:07:28:56:E3:62:62:B3:92:B7:99:FD:3E:20:EB:18:6F:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/9c801b14-9640-3531-8c71-50821022e72c.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     397260
IP address blocks:        167.253.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/bbc10cdd-c548-4bd0-aafb-ae57822b4599.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/bbc10cdd-c548-4bd0-aafb-ae57822b4599.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:8c:9f:15:02:ba:1b:d3:14:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbc10cdd-c548-4bd0-aafb-ae57822b4599
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=ce052a27-7901-4293-8ecc-743cbd11bdcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3e:88:59:9e:91:8e:91:9f:3e:00:6e:55:39:
                    d5:71:db:b2:b2:a8:40:7f:1f:e2:74:26:fe:46:4f:
                    60:60:0d:c7:98:c1:25:7e:0d:16:f4:75:cf:89:3d:
                    31:5f:49:a7:e6:1f:a9:18:fe:5a:b6:e0:3e:b8:28:
                    3a:77:0e:8c:ea:a2:43:7b:c0:3a:75:e7:e1:ee:5d:
                    e3:de:7d:e0:ae:6f:eb:25:f2:66:a2:c2:cd:ee:c7:
                    06:eb:08:74:e1:b2:68:1c:6a:5a:46:8b:dc:14:1c:
                    20:cc:bc:c1:30:80:a1:a6:8a:97:5b:0b:2c:48:49:
                    75:48:3f:26:5d:7e:98:4c:73:bd:d3:23:00:91:da:
                    d4:c1:97:ae:8a:83:d6:ce:ca:a5:d4:f0:0f:1d:b9:
                    46:19:54:fe:94:40:20:eb:45:f8:b6:6d:b6:97:f0:
                    94:99:de:37:a3:b5:83:47:d7:bf:4e:0c:7d:4f:ae:
                    f8:13:80:30:2c:5e:0b:c1:c2:55:be:5b:7c:32:4c:
                    f9:6b:44:d4:74:ed:0c:c7:4c:61:45:05:a2:da:91:
                    ab:01:27:31:aa:af:c2:de:76:e4:90:32:66:94:d7:
                    ed:78:14:a0:83:c5:e4:20:20:41:db:a5:88:e1:14:
                    00:fc:16:13:e0:d1:74:bd:e7:d9:5b:bc:0a:29:ae:
                    43:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:10:8C:36:E1:96:A3:E6:87:4E:89:07:77:2E:6E:57:B8:7D:BF:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/9c801b14-9640-3531-8c71-50821022e72c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/bbc10cdd-c548-4bd0-aafb-ae57822b4599.crl

            X509v3 Authority Key Identifier:
                keyid:BC:F8:A0:07:28:56:E3:62:62:B3:92:B7:99:FD:3E:20:EB:18:6F:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:fa:26:22:21:0e:2d:af:9a:3c:50:18:29:77:7c:92:40:b3:
         d6:8a:5e:3b:98:69:87:99:ba:ee:b2:f4:8b:8f:de:69:6e:1e:
         b8:31:2e:d7:f7:b3:f4:74:0d:ef:3f:71:e7:43:16:55:5d:94:
         c0:87:a0:b2:82:1f:8b:25:1b:18:06:b5:27:8b:ea:57:26:d4:
         2c:b2:a8:45:65:23:3c:91:86:c9:82:17:89:d3:2f:90:02:d0:
         ba:aa:a9:01:e3:64:16:68:e3:c2:a6:53:ac:c6:b8:6d:3e:bf:
         81:cc:55:ba:ac:0c:44:99:1a:0b:c0:4e:9c:60:0d:9b:e0:7c:
         6c:cd:2a:50:24:e5:61:53:c6:b3:0b:41:d3:8b:c7:b8:6c:47:
         83:ea:e9:e7:d1:26:62:58:0d:19:fb:16:13:53:38:ad:8c:fa:
         5e:18:ea:52:1d:ad:a4:3c:61:6c:54:80:45:79:dc:af:cf:cf:
         8f:8a:96:90:35:a7:27:98:d0:a2:31:c1:4a:e2:c2:4f:7a:86:
         71:b8:f1:55:b3:ee:80:ec:f8:b4:12:a5:41:2e:e0:3b:e2:0a:
         b0:3b:d7:26:cb:cf:fa:00:62:49:5c:fc:74:c7:24:40:44:50:
         d4:fe:71:03:92:cd:1b:09:f4:a5:b1:b3:4b:eb:d2:cc:20:f8:
         a8:db:13:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:13:16 2026 by rpki-client