Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/33d4d00a-952d-3bbc-9d17-2eaf22032eee.roa
File:                     33d4d00a-952d-3bbc-9d17-2eaf22032eee.roa (raw, json)
Hash identifier:          SWR2QwX39UZ4g3/c3YiwxD35XerSByVAd/1JHmLclhI=
Subject key identifier:   7E:0B:64:BC:5E:10:00:A4:6A:6F:16:6D:8C:67:7F:54:2A:84:B7:50
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584E3E5F3AF4202F4B0322D3EC80
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/33d4d00a-952d-3bbc-9d17-2eaf22032eee.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     53508
IP address blocks:        142.79.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:3a:f4:20:2f:4b:03:22:d3:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=73500271-3a94-40ca-8655-af8a8aab4408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:98:b8:24:63:9f:b7:3e:f5:a8:63:2a:fa:9d:
                    7f:32:25:a7:21:71:34:23:55:8d:30:d7:a4:56:e9:
                    6a:9b:77:4f:08:4c:9a:1c:6d:45:a4:8a:e9:8f:14:
                    f8:64:d7:25:92:df:74:dd:5c:4e:f1:ff:d1:56:ba:
                    9e:7d:55:7b:0a:a5:80:7f:6a:a3:04:c4:da:a9:30:
                    86:b6:7f:c7:3e:f8:41:ce:da:6a:76:90:93:81:b8:
                    61:10:bf:12:a5:1c:07:62:d5:23:28:75:93:39:66:
                    44:80:25:8d:c7:f0:c5:a8:bf:dc:2f:7e:95:49:77:
                    85:30:9e:da:17:a0:f4:e9:09:a9:20:25:6f:d1:4f:
                    ab:40:3b:3c:99:12:7f:31:15:9f:ff:12:cc:00:37:
                    fe:f6:ab:9d:26:9e:ba:14:67:93:68:d6:4d:05:a2:
                    30:3c:67:94:1c:a2:a7:ee:42:53:be:f3:32:02:28:
                    48:c4:37:ff:f0:74:d5:50:5e:ed:88:6a:80:b8:df:
                    cf:65:1f:d8:7b:c3:14:19:c9:ae:fa:96:01:ba:ea:
                    d9:16:63:94:09:9f:b5:be:21:74:0f:e9:e4:f4:10:
                    a3:43:96:37:8c:83:12:c1:3b:70:29:9a:1f:6d:83:
                    7c:8c:df:a1:f8:a8:da:1e:c2:bc:a2:8a:87:22:75:
                    3e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0B:64:BC:5E:10:00:A4:6A:6F:16:6D:8C:67:7F:54:2A:84:B7:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/33d4d00a-952d-3bbc-9d17-2eaf22032eee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.79.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:fb:0d:1f:b4:ef:0b:fb:8e:04:7b:50:56:c0:3b:5b:0a:44:
         14:d0:85:45:03:1c:ab:f8:25:c9:c6:43:c8:cb:4a:99:f1:19:
         31:b4:7e:98:b2:31:f4:06:17:b1:ac:60:16:2d:8f:51:e8:c7:
         31:2c:81:c3:25:23:d4:94:68:d2:0c:60:af:bf:7f:42:9e:37:
         8b:ad:c5:d0:a5:30:f8:6a:2b:26:ba:28:45:73:0a:a1:61:c3:
         f9:8d:88:be:ae:4e:e6:da:3a:85:4f:17:f5:ae:32:0d:28:26:
         a3:54:1d:9c:72:14:a9:4a:7f:69:e0:b6:4d:cc:ec:c1:22:e5:
         f4:bf:94:f4:80:4c:1c:18:ca:7d:67:e3:8c:a4:12:29:6a:d5:
         f9:26:70:18:cc:ee:24:55:e8:91:14:9b:bf:02:ad:95:24:c3:
         58:77:5d:9a:af:2c:af:37:94:e2:03:ad:ae:3b:c1:c9:2b:d0:
         93:a8:6b:ad:50:84:be:7b:15:07:5a:71:6f:ea:12:c5:4a:4c:
         5d:e0:80:1a:8a:c5:50:1c:8a:f4:a9:0a:7d:8f:c7:ca:69:70:
         00:b7:5d:48:5d:0c:4a:c9:a7:02:ac:bb:5a:fe:b7:1f:7d:11:
         b3:07:a4:8c:87:32:72:04:7e:01:6f:69:8c:cd:e6:57:c6:28:
         63:30:95:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 03:42:20 2026 by rpki-client