Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/bf5e62e5-92c5-3f09-9051-299422a6cc1a.roa
File:                     bf5e62e5-92c5-3f09-9051-299422a6cc1a.roa (raw, json)
Hash identifier:          LzmKP2i1W98XNH4YwpKwgojQ2FoRSqyh2Wiv2JDDCa8=
Subject key identifier:   D9:98:4B:40:54:A9:B7:7F:DC:EB:84:D8:93:CD:10:F5:44:A5:4D:CF
Certificate issuer:       /CN=5587bc0d-775f-4b49-89c0-0d12d8bddc05
Certificate serial:       010D0C9F4328584ED4325AD79536B1372E203100
Authority key identifier: CA:F0:6F:96:E2:6B:1D:87:C6:FA:5F:BD:41:58:09:13:18:4F:3E:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/bf5e62e5-92c5-3f09-9051-299422a6cc1a.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     0
IP address blocks:        69.58.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/5587bc0d-775f-4b49-89c0-0d12d8bddc05.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/5587bc0d-775f-4b49-89c0-0d12d8bddc05.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:32:5a:d7:95:36:b1:37:2e:20:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5587bc0d-775f-4b49-89c0-0d12d8bddc05
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=ea30c219-f0f6-417c-a5a3-ed7d0c55cff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:46:7d:e6:c2:6f:fc:67:d5:71:1d:3c:ae:1d:
                    db:c0:b3:da:f3:59:88:bb:06:b5:bf:65:e3:b8:4b:
                    b9:48:49:6d:b3:82:4f:d0:66:bb:67:37:ea:54:12:
                    66:4b:1b:3b:42:89:f3:56:25:46:68:2e:90:7a:97:
                    e0:ee:8b:92:84:f0:0b:62:bb:b9:70:6d:4a:1a:f6:
                    02:cd:e8:b8:9e:af:ef:a0:99:0b:00:c2:be:91:a5:
                    25:48:f6:5d:03:3c:55:d9:19:00:e3:da:63:07:c7:
                    67:2d:df:53:07:8a:41:62:ec:3b:13:5e:f7:1a:bb:
                    a6:ab:6d:28:d0:0c:11:aa:99:48:95:01:87:37:ac:
                    6e:0b:1b:bf:83:9d:59:ce:fa:65:47:ea:1d:09:ea:
                    20:0f:d9:ca:fc:3f:28:0f:be:b2:f4:75:35:db:31:
                    32:a8:ac:bd:ea:e4:5d:5d:25:61:ac:ab:3a:b4:af:
                    13:df:f8:7b:2f:2e:b3:85:d9:ac:95:8c:ce:43:c0:
                    72:90:6e:28:9b:06:30:11:ba:d5:35:3e:8d:55:f4:
                    ca:ec:94:3b:8c:41:3e:59:22:98:cc:1a:c0:e3:91:
                    46:39:df:f1:b4:86:ae:18:0c:33:48:af:54:45:aa:
                    6a:4b:21:ae:89:28:01:b6:39:7d:96:bb:5d:6d:78:
                    4e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:98:4B:40:54:A9:B7:7F:DC:EB:84:D8:93:CD:10:F5:44:A5:4D:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/bf5e62e5-92c5-3f09-9051-299422a6cc1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/5587bc0d-775f-4b49-89c0-0d12d8bddc05.crl

            X509v3 Authority Key Identifier:
                keyid:CA:F0:6F:96:E2:6B:1D:87:C6:FA:5F:BD:41:58:09:13:18:4F:3E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:c0:24:74:36:00:c6:c2:a8:8f:81:24:4d:6a:54:79:67:a1:
         43:0c:05:e6:6c:3e:6b:ea:ad:fd:c1:c1:da:6e:46:4d:31:94:
         01:d5:11:f6:10:82:4b:c6:86:fc:86:76:8e:aa:50:91:59:85:
         22:12:3a:44:2b:31:9c:72:a0:49:2d:8b:62:3a:f9:dc:29:48:
         dd:30:0b:1f:e9:e1:84:b5:39:f0:bc:41:02:7f:ea:27:e1:6a:
         d1:9a:bc:ac:fd:f1:67:03:fa:92:86:96:47:17:1e:1f:44:7e:
         42:f1:22:2b:b6:02:fd:ce:8c:ed:01:9b:8e:e7:52:b1:85:78:
         21:7e:09:ea:9f:6f:e2:49:f1:2b:85:78:25:4f:6c:4c:b3:e7:
         39:49:9a:fa:e1:58:e2:c4:8a:5a:69:32:93:2f:72:8f:5a:bd:
         d5:01:f0:70:32:10:ca:f7:1b:3c:b6:15:d3:e0:17:f1:73:e3:
         1e:6c:74:8d:78:22:fb:e9:a4:bc:d1:b4:64:93:ce:b7:f9:7d:
         10:91:48:b2:07:03:05:86:23:76:10:bc:26:22:40:f8:a4:11:
         78:78:a6:12:11:e8:c0:d7:e3:2b:d6:60:91:4e:74:1e:b7:52:
         26:67:e7:23:97:c4:c1:eb:e4:b2:b3:16:2f:8d:7c:29:3b:3d:
         bf:b5:76:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:01:58 2026 by rpki-client