Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/bc4b86a7-645a-3d24-8aff-b3f366c5c5f8.roa
File:                     bc4b86a7-645a-3d24-8aff-b3f366c5c5f8.roa (raw, json)
Hash identifier:          qKbxDMwXbhA6K4BMnoXIQD5GPwIs6gsOrYocKurwsX8=
Subject key identifier:   C9:6B:A3:EE:FC:7E:2B:3E:F0:C0:8A:63:CF:68:19:56:3E:31:3E:C1
Certificate issuer:       /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
Certificate serial:       010D0C9F4328584F374D215B2A62727C055E6EC0
Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/bc4b86a7-645a-3d24-8aff-b3f366c5c5f8.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     26967
IP address blocks:        199.15.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:21:5b:2a:62:72:7c:05:5e:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=3409a046-a226-47fa-b937-c008f696c1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1a:5e:dc:81:b4:08:8f:70:7c:8e:ea:c4:fd:
                    45:54:4e:aa:9a:ee:ab:a8:7a:a4:72:99:63:a1:07:
                    41:0b:46:d9:bd:d8:4c:ca:42:85:23:8e:d2:e6:72:
                    e6:da:21:a9:c9:c8:35:dc:3b:e6:d6:c1:0b:7a:24:
                    00:f2:ae:e6:c6:76:cf:18:e4:c7:36:ca:a9:b8:51:
                    28:9f:6e:2a:87:8e:30:a9:52:b6:29:b9:ef:96:6a:
                    f1:53:a9:25:d5:de:34:ff:99:5a:f9:ee:c4:57:1e:
                    18:36:6d:67:50:d6:95:5a:97:10:4c:fa:22:35:5a:
                    e6:cb:07:58:1d:a6:d3:b3:7e:9d:bc:c0:c4:8a:31:
                    c1:28:88:96:a8:e7:0b:3e:c9:32:0a:f2:23:9e:fa:
                    5b:bb:44:fd:5b:17:7e:19:a0:73:83:16:45:04:3b:
                    d4:b0:7b:3d:03:ae:90:f6:2a:40:1e:e8:59:6e:32:
                    88:a3:3f:ad:09:6a:cb:df:0c:eb:bd:39:fa:6d:79:
                    94:d4:62:ec:0d:74:fc:3d:6c:74:c5:52:e7:39:78:
                    a2:bd:cd:ec:fb:97:0a:a0:bc:02:59:20:a3:74:bb:
                    73:ae:37:0e:8f:aa:1b:81:93:ea:2a:0b:44:a3:1d:
                    ab:5c:b1:ee:59:19:bb:ed:74:35:95:be:88:c2:a4:
                    76:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6B:A3:EE:FC:7E:2B:3E:F0:C0:8A:63:CF:68:19:56:3E:31:3E:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/bc4b86a7-645a-3d24-8aff-b3f366c5c5f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl

            X509v3 Authority Key Identifier:
                keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.15.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:60:8e:10:79:31:83:0c:b4:47:2a:9a:57:4f:2d:c7:a6:87:
         8a:08:1f:7b:c4:80:2f:dd:4f:a7:6e:c2:46:23:65:af:c4:0e:
         b2:87:6d:8f:ab:86:19:c8:79:18:e8:45:99:de:24:1c:cb:c6:
         51:fa:f0:1e:4a:52:0a:fd:e0:c2:3a:93:46:b8:a1:14:08:e1:
         d1:92:61:b2:d0:86:81:46:73:7b:ac:52:03:0c:04:86:bd:8b:
         cd:5e:a6:17:91:a7:d0:12:04:df:b0:7b:69:5d:f3:46:26:29:
         46:08:2e:3a:d0:96:5f:25:24:00:ed:36:0c:70:6e:9c:e7:8e:
         1a:85:46:19:61:f4:62:e2:33:98:72:ed:a6:b1:5f:55:2d:bc:
         a4:bf:34:69:05:20:16:bb:6d:d7:be:37:c6:2f:4d:e6:74:3f:
         7f:c3:4d:5d:14:63:bc:ad:2b:a1:3e:f9:e4:bd:93:5b:27:06:
         f7:7c:6d:fc:c6:ef:55:c6:85:57:c2:cb:20:19:90:3d:f9:44:
         ea:73:4e:d0:ec:72:86:61:b0:dd:1c:57:e9:1e:0e:5a:ea:14:
         cf:d0:7e:f2:fa:06:38:3a:7c:f6:0a:eb:85:ef:c2:f1:70:65:
         e5:bb:e6:7e:56:7b:53:2d:e9:54:2c:5c:18:7b:6b:10:e7:f2:
         5e:b8:52:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:04:41 2026 by rpki-client