Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/bcc360fd-fd8d-3a2a-b4f1-98de604bd41e.roa
File:                     bcc360fd-fd8d-3a2a-b4f1-98de604bd41e.roa (raw, json)
Hash identifier:          CLpEmJP0I/LJ9k6PjkOHWyl3LTSVxHsuxmbLiuVxsdM=
Subject key identifier:   F1:07:62:A6:D7:44:0A:13:45:67:1F:89:CF:66:1D:CC:30:57:A4:6A
Certificate issuer:       /CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
Certificate serial:       010D0C9F4328584EA7976E9289A52CB2252AA300
Authority key identifier: 54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/bcc360fd-fd8d-3a2a-b4f1-98de604bd41e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     214026
IP address blocks:        23.129.68.0/24 maxlen: 24
                          2602:f7a7:ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:6e:92:89:a5:2c:b2:25:2a:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=dcf868b9-c7ea-4ab5-aeaa-0cc89659fb85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:47:ce:2a:0e:69:06:0d:e6:f0:ec:36:5e:f9:
                    48:86:75:44:84:af:a3:6c:d1:e4:9b:94:6d:1c:3e:
                    9a:ba:ee:0a:94:c3:20:75:12:7a:4a:4f:db:df:84:
                    83:97:98:af:df:c9:6f:b9:90:69:56:b4:c5:76:b6:
                    1e:07:d4:77:f8:52:e1:cb:9f:66:37:e6:e6:8c:34:
                    a1:77:31:04:88:13:44:0c:b3:c1:d1:95:7f:52:df:
                    b9:f0:a0:d8:4f:cc:8f:f3:e9:e1:18:15:6f:eb:54:
                    cb:30:57:25:48:e2:6f:5a:03:65:df:d2:d9:61:9b:
                    59:4c:46:9f:e9:c5:f1:17:fc:fb:1f:ce:db:05:03:
                    0d:ed:b4:f0:ba:eb:07:09:b0:1c:89:2a:01:01:05:
                    31:33:d2:97:71:43:10:2e:a7:1f:93:62:13:6b:0f:
                    75:bc:76:60:43:e0:ea:14:24:e2:95:b3:a9:a2:3b:
                    12:6a:00:32:ac:73:55:8f:de:62:4c:8c:bf:59:7d:
                    54:2a:3c:ff:00:76:d8:56:d7:99:b2:82:27:b9:32:
                    33:7f:3e:a2:2b:e5:62:5c:8c:c3:0e:43:59:aa:e4:
                    7f:99:ae:7c:2f:97:c0:4b:ef:9b:0f:63:25:bc:b2:
                    8b:03:7b:d1:a8:a9:be:e0:bc:5b:3f:11:32:57:2a:
                    53:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:07:62:A6:D7:44:0A:13:45:67:1F:89:CF:66:1D:CC:30:57:A4:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/bcc360fd-fd8d-3a2a-b4f1-98de604bd41e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl

            X509v3 Authority Key Identifier:
                keyid:54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.68.0/24
                IPv6:
                  2602:f7a7:ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:35:71:5c:a2:20:da:96:b8:04:30:e4:06:4c:56:c7:2c:dc:
         70:c2:6d:7a:f9:99:02:b1:c5:c3:f0:cd:21:4e:8e:f7:be:3f:
         b0:54:d3:24:ab:00:91:f1:26:b7:c5:be:b7:e9:29:8d:d7:8b:
         3f:0b:fc:9e:14:06:8a:2f:e1:3a:f3:9c:29:5a:e5:10:7a:37:
         7b:c5:fc:17:48:10:3a:ff:c2:71:2a:4a:9f:d3:4a:b4:57:f8:
         56:27:ac:3d:d5:cf:a1:c3:65:a2:60:85:c9:65:fa:dc:35:e3:
         9c:f4:33:32:7b:18:67:c3:88:24:5a:a5:e3:b8:91:35:f8:f9:
         49:7c:70:d7:9f:db:9c:69:90:c5:0c:a7:76:fd:d2:8a:21:cd:
         6a:db:b4:bc:be:1b:4e:1f:92:72:db:c0:0a:b5:8a:80:b6:51:
         30:f2:0d:d3:b7:e3:37:4e:1a:12:32:90:4f:05:52:01:07:30:
         e0:54:30:9c:ac:ab:bf:50:c1:ff:f8:58:c5:c4:ee:8c:da:df:
         dc:1e:ff:f8:60:fb:fc:94:7f:e3:7f:d9:31:52:27:5c:df:fe:
         3e:16:8c:fc:88:61:96:51:7b:12:80:21:54:ff:11:d8:e0:c6:
         ad:94:eb:ba:15:3c:1f:26:58:e4:06:bf:34:bd:21:2a:74:96:
         1d:6b:27:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:07:44 2026 by rpki-client