Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf/bbf5c1df-a6de-3aef-8e6f-3ca0a226c46f.roa
File:                     bbf5c1df-a6de-3aef-8e6f-3ca0a226c46f.roa (raw, json)
Hash identifier:          GjYc8KtbTTaTcHIvWsXSgZ2lZNs25qe5bgfRMIj1myA=
Subject key identifier:   32:5E:DF:1F:88:35:1F:69:FA:85:F3:44:44:2D:F3:53:5F:99:04:37
Certificate issuer:       /CN=bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf
Certificate serial:       010D0C9F4328584DA11ABAC7BD24163A44B18200
Authority key identifier: 84:E8:EF:79:DB:A6:4A:86:A0:4D:00:AF:77:74:EB:DD:84:72:0E:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf/bbf5c1df-a6de-3aef-8e6f-3ca0a226c46f.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     16491
IP address blocks:        199.204.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:ba:c7:bd:24:16:3a:44:b1:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=055b3e55-e2e9-4668-bce5-ab5c24b0a725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:31:39:5b:8e:d6:99:87:53:14:5d:70:01:78:
                    74:eb:9c:74:48:fd:34:bf:6a:8b:de:01:2a:ee:a1:
                    54:96:89:92:07:ff:e5:04:73:9e:88:b2:9d:2b:43:
                    a1:56:91:b1:4d:ab:33:5c:b5:dc:40:b9:0d:15:65:
                    27:a7:3a:64:a7:0c:48:cb:0e:02:0e:ad:f6:4d:25:
                    0f:eb:8b:78:63:3c:77:89:dc:d2:e7:fb:de:33:f3:
                    a8:1f:50:06:f0:30:4c:b7:a0:21:ea:b0:34:87:6b:
                    a6:87:b5:a3:62:19:5d:d6:4c:2f:fc:f7:d8:ba:ed:
                    ee:78:0d:e4:82:73:59:1c:fe:a5:8a:3b:8e:45:82:
                    57:51:3a:11:bf:2c:69:55:6f:6e:de:f4:79:68:3e:
                    c7:c9:29:53:9d:35:d3:d4:ef:25:da:3b:49:89:17:
                    3c:3b:94:a7:5a:61:7a:f4:c4:e3:f0:78:5d:6c:51:
                    26:1e:89:0f:3e:c5:54:55:3c:77:03:e8:8f:26:70:
                    38:da:d9:5b:ed:e8:7e:96:f6:58:a0:79:59:d3:d5:
                    60:02:5c:75:44:06:61:d9:24:74:28:17:98:05:2e:
                    fd:1f:79:b8:da:ec:f7:48:8c:56:d5:33:17:b4:a3:
                    5e:b6:bc:34:b8:25:13:ab:38:35:43:78:45:a0:7c:
                    52:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5E:DF:1F:88:35:1F:69:FA:85:F3:44:44:2D:F3:53:5F:99:04:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf/bbf5c1df-a6de-3aef-8e6f-3ca0a226c46f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf.crl

            X509v3 Authority Key Identifier:
                keyid:84:E8:EF:79:DB:A6:4A:86:A0:4D:00:AF:77:74:EB:DD:84:72:0E:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.204.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:93:19:73:d9:04:b9:92:73:06:ca:60:37:1e:f0:95:19:74:
         a2:07:78:d4:47:ec:f7:61:d2:a0:ff:1f:d4:1f:be:bd:67:f9:
         83:95:0f:b2:23:35:bf:b8:e7:c0:e1:d8:58:84:0c:1d:f5:94:
         6f:03:37:d6:06:a8:74:77:33:76:24:6b:2a:bb:4f:00:1a:e0:
         ef:d1:0e:ec:29:48:37:77:d8:46:aa:cd:66:1b:a6:07:46:71:
         37:60:0f:cf:55:db:8c:98:d9:ee:36:94:42:6a:d3:48:05:bc:
         46:5a:e4:b9:1a:bb:63:f0:03:a8:b3:2a:4a:8e:eb:c2:70:68:
         eb:14:be:30:39:e5:b8:e4:04:de:50:4e:94:14:9b:0e:2f:23:
         27:57:1b:a0:af:a8:68:c4:54:3c:21:9f:b2:bb:f3:b0:96:ba:
         b5:cc:6e:b3:9e:09:5a:4c:a9:31:36:51:c6:b7:d3:ac:9a:01:
         77:52:1e:2a:d2:a4:03:d7:e0:60:d1:9f:45:db:10:41:96:1d:
         a3:41:b3:da:fe:23:59:bd:d5:90:21:f4:5a:71:e8:68:01:f1:
         47:30:80:9a:1c:0a:e1:8e:e6:76:c0:0b:bf:52:eb:92:93:64:
         93:d0:7e:b0:9f:40:81:0f:08:0d:e5:6e:7d:e0:a9:9b:b0:49:
         7c:a5:d0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 02:12:31 2026 by rpki-client