Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b/bc5fd552-dc9b-366b-904e-869bc33fa12e.roa
File:                     bc5fd552-dc9b-366b-904e-869bc33fa12e.roa (raw, json)
Hash identifier:          /Jh5m45lZbtYEE4DHxCcPMMtHtZNBFaQP2hYppz9NeA=
Subject key identifier:   67:12:46:96:01:EA:C8:93:F7:8B:9A:B8:8C:06:FB:04:E8:6B:61:4B
Certificate issuer:       /CN=ad92f21a-d22e-4072-8a4c-fdc4c6483e4b
Certificate serial:       010D0C9F4328584DC6CB11CB4D0053682642C6A0
Authority key identifier: C2:D7:54:E2:08:4D:12:16:19:38:CB:B9:B1:2C:95:E6:93:41:1D:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b/bc5fd552-dc9b-366b-904e-869bc33fa12e.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     395743
IP address blocks:        208.95.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:cb:11:cb:4d:00:53:68:26:42:c6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad92f21a-d22e-4072-8a4c-fdc4c6483e4b
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=63ef16bd-b57d-4985-85b0-4b8fee89c229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:12:15:dc:ad:a7:8e:12:f7:0f:bb:ec:17:32:
                    de:14:86:54:8d:61:d3:ba:f3:73:4d:27:7d:34:91:
                    92:93:f0:0e:00:79:dd:4a:a2:22:ce:b8:be:3d:5d:
                    f7:53:94:3c:ff:26:aa:34:b3:82:d8:54:a4:2f:38:
                    87:ab:2c:0e:9a:bf:eb:33:75:cd:03:01:9a:22:0d:
                    09:c8:73:c8:09:b7:9e:ad:ad:bb:15:71:2b:b7:b4:
                    d7:4b:41:36:94:0e:f1:9a:0d:00:5e:60:6d:9d:1e:
                    95:bd:e9:c3:d4:0b:a3:40:08:1d:ce:5c:c4:12:c7:
                    57:51:18:09:ff:f8:1b:3b:d5:0c:8c:71:77:08:5c:
                    30:8f:49:b4:34:35:24:97:8c:01:77:2a:ad:c8:9f:
                    72:29:24:93:94:dd:08:57:fa:ea:49:cd:7c:c9:49:
                    0c:8b:e7:15:6f:3c:66:c7:e9:ce:7c:96:1d:89:c3:
                    59:3e:7b:e3:71:f5:11:e9:14:20:99:56:d6:7e:71:
                    7d:4f:b3:85:94:99:c3:ee:a6:30:38:44:23:92:3c:
                    a8:b1:f2:2d:51:7f:2b:7c:59:5d:2d:60:9a:41:7b:
                    1d:73:3c:8e:ee:20:39:e7:8b:a9:60:69:ab:cd:dd:
                    9e:f2:b8:01:7a:e0:67:59:34:c5:98:39:04:78:40:
                    e6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:12:46:96:01:EA:C8:93:F7:8B:9A:B8:8C:06:FB:04:E8:6B:61:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b/bc5fd552-dc9b-366b-904e-869bc33fa12e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b.crl

            X509v3 Authority Key Identifier:
                keyid:C2:D7:54:E2:08:4D:12:16:19:38:CB:B9:B1:2C:95:E6:93:41:1D:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.95.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ba:7e:93:c0:65:e1:25:31:44:c7:ce:d4:c8:e1:1b:21:25:
         38:c7:0c:4f:60:0c:31:0c:bd:63:b8:fe:bd:2d:8e:71:26:14:
         ed:ac:b4:ed:03:d9:0c:fa:70:b4:f7:b4:7f:ee:06:10:98:2c:
         0c:88:e6:69:ce:22:2d:c3:1d:6a:c2:af:b7:c7:f3:af:c3:61:
         b6:3c:42:07:2c:2b:81:7d:81:41:3d:f7:ea:9f:3f:f0:10:a5:
         16:fb:d2:46:99:ba:03:e2:56:37:20:b3:38:97:61:e3:a6:92:
         ce:3c:f4:f4:97:a9:c1:2f:fe:5d:1b:01:02:4a:21:6c:75:72:
         25:b5:9a:eb:56:29:fa:d8:9d:f5:4d:bf:dc:f8:2c:74:35:47:
         05:c0:5b:19:dc:59:77:c5:12:c8:1a:e1:4f:bc:dd:31:75:b5:
         cc:d4:54:9d:62:d1:de:4b:a0:d2:cc:7d:27:cb:27:73:84:b7:
         57:3f:ff:15:09:fd:8b:24:73:ed:d3:cc:2b:3a:9b:59:24:6f:
         c2:75:ff:72:ee:6d:11:58:fd:81:2f:50:3a:14:43:6b:81:89:
         66:ed:80:93:90:ff:e0:7d:4a:29:b9:40:e7:97:0e:70:22:cd:
         96:08:17:c8:d5:70:6a:82:5f:db:77:85:13:f7:f3:4c:ba:cc:
         8d:cb:27:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:58:02 2026 by rpki-client