Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/003cbce7-7084-47e7-b8fa-f465431b3623/bd7e9823-aef8-3b9b-aa5a-4d7874f2f462.roa
File:                     bd7e9823-aef8-3b9b-aa5a-4d7874f2f462.roa (raw, json)
Hash identifier:          BOZm572GbJ5lqFDmjlKoZlUCIMWTNglFdq3crrW4sII=
Subject key identifier:   99:EA:B1:5C:CC:46:16:E3:7C:3B:0A:EF:69:DD:03:7B:61:B1:33:05
Certificate issuer:       /CN=003cbce7-7084-47e7-b8fa-f465431b3623
Certificate serial:       010D0C9F4328584EFE121BB252A017D38DA3EA00
Authority key identifier: 4F:7E:BF:1D:75:7C:9A:E7:6B:3F:99:03:9D:DF:5E:52:BA:8D:0D:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/003cbce7-7084-47e7-b8fa-f465431b3623.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/003cbce7-7084-47e7-b8fa-f465431b3623/bd7e9823-aef8-3b9b-aa5a-4d7874f2f462.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     26527
IP address blocks:        173.237.192.0/22 maxlen: 32
                          173.237.196.0/23 maxlen: 32
                          173.237.205.0/24 maxlen: 32
                          173.237.206.0/23 maxlen: 32
                          2606:b600:100::/46 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/003cbce7-7084-47e7-b8fa-f465431b3623/003cbce7-7084-47e7-b8fa-f465431b3623.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/003cbce7-7084-47e7-b8fa-f465431b3623/003cbce7-7084-47e7-b8fa-f465431b3623.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/003cbce7-7084-47e7-b8fa-f465431b3623.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:1b:b2:52:a0:17:d3:8d:a3:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003cbce7-7084-47e7-b8fa-f465431b3623
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=2a1b6371-9766-4511-bbdb-28240bce0c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:da:82:bb:0c:3d:f0:f6:b5:9a:17:01:1b:8e:
                    52:38:71:f6:5b:a7:9c:fa:35:87:f0:97:81:0d:10:
                    ce:59:84:c9:c9:49:5c:41:05:55:42:b5:42:95:cc:
                    76:91:8a:56:14:87:37:f5:34:58:a2:3b:80:ab:7d:
                    0e:b2:a4:f9:af:fd:b4:0b:ad:55:da:42:f1:16:81:
                    d2:19:ac:43:28:7c:b4:c7:64:24:20:bb:3e:e0:73:
                    db:01:b6:f5:e6:41:e6:fe:72:e2:5d:ce:a7:d9:2f:
                    c8:ea:02:a3:9f:ba:ef:6c:7a:33:ae:8e:d2:fd:ab:
                    89:43:86:2e:83:84:63:85:f1:7b:ed:40:2a:0a:39:
                    0b:a1:92:39:aa:a0:3d:39:6c:a6:0a:83:e9:d5:5e:
                    ed:c5:b0:b9:50:30:80:bc:3a:1e:a1:6b:37:89:e5:
                    44:b0:9d:f4:62:2f:49:3b:02:9c:2c:a6:ca:58:aa:
                    b3:fd:64:35:c7:cd:52:42:c2:9d:48:be:42:9f:c9:
                    08:e2:c0:04:7c:54:a6:4b:62:b4:9a:36:b3:55:df:
                    97:8e:21:f5:34:78:48:5b:a8:15:c4:70:ea:44:6d:
                    fd:24:40:1d:90:a1:ed:4e:33:84:11:45:ad:34:17:
                    8a:fd:74:c5:29:f4:d1:50:a7:a4:ce:55:08:b9:9c:
                    74:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EA:B1:5C:CC:46:16:E3:7C:3B:0A:EF:69:DD:03:7B:61:B1:33:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/003cbce7-7084-47e7-b8fa-f465431b3623/bd7e9823-aef8-3b9b-aa5a-4d7874f2f462.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/003cbce7-7084-47e7-b8fa-f465431b3623/003cbce7-7084-47e7-b8fa-f465431b3623.crl

            X509v3 Authority Key Identifier:
                keyid:4F:7E:BF:1D:75:7C:9A:E7:6B:3F:99:03:9D:DF:5E:52:BA:8D:0D:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/003cbce7-7084-47e7-b8fa-f465431b3623.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.237.192.0-173.237.197.255
                  173.237.205.0-173.237.207.255
                IPv6:
                  2606:b600:100::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:82:47:c0:c8:30:79:7a:ff:3c:f0:07:df:d4:26:b3:85:09:
         c0:09:6d:46:18:ed:fe:20:e6:15:d0:ef:54:9a:57:3e:dd:26:
         2f:06:f1:24:0b:d9:5f:05:5c:61:c1:86:50:e8:ae:eb:6b:22:
         44:5a:69:a9:d7:52:3b:a2:8b:83:65:7b:b3:44:cc:aa:9f:d1:
         95:0e:e6:9f:c2:56:71:4c:60:51:88:21:73:81:41:c0:32:85:
         23:8f:d4:e3:e4:2d:08:86:19:b7:09:b8:26:b5:6e:ad:57:4d:
         f3:1e:bf:31:d9:df:c4:90:4a:5b:08:e5:98:99:f5:36:fa:8b:
         d8:bb:92:1a:dd:3d:2f:b9:61:a1:bb:25:d9:e1:e5:a5:e6:d4:
         f7:4d:e4:c5:18:d6:8d:49:81:ea:a9:ab:0e:17:76:cc:51:5f:
         47:0a:f8:fd:5e:1e:2a:2d:1b:11:90:44:1e:17:fa:75:a6:5d:
         a2:49:c3:52:bb:c1:41:f8:0f:29:f2:72:35:bc:0a:04:96:31:
         b2:e0:19:19:64:1a:ca:82:e9:4e:24:12:c7:62:c4:9c:be:c1:
         18:de:a0:dd:33:15:b9:57:7e:e2:30:b6:e6:08:11:1e:ef:6c:
         8a:18:a0:4b:d4:1e:16:15:43:4b:8d:d2:eb:8f:3b:10:18:81:
         da:14:3a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:43:27 2026 by rpki-client