Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/bc2cb9c6-7705-349c-9102-a6741ccef7bc.roa
File:                     bc2cb9c6-7705-349c-9102-a6741ccef7bc.roa (raw, json)
Hash identifier:          FFHLaGa3PLlO397+oWnc2nxfgdsNQUAfTdLbInCBiCg=
Subject key identifier:   58:5D:B9:9C:FC:B3:D6:62:BA:64:FD:22:2F:F5:FF:49:A6:20:B8:0B
Certificate issuer:       /CN=11c64f1a-22fa-4091-9f9d-42edbc6aefff
Certificate serial:       010D0C9F4328584EB2B1BC7B91CC0639ED60BB00
Authority key identifier: FF:F9:D5:A6:43:BF:DB:EF:1C:56:31:0D:DF:04:B8:1E:07:47:A0:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/bc2cb9c6-7705-349c-9102-a6741ccef7bc.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     400686
IP address blocks:        134.195.19.0/24 maxlen: 24
                          2602:2d6::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/11c64f1a-22fa-4091-9f9d-42edbc6aefff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/11c64f1a-22fa-4091-9f9d-42edbc6aefff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:bc:7b:91:cc:06:39:ed:60:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11c64f1a-22fa-4091-9f9d-42edbc6aefff
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=f42397bf-34d7-469a-b706-002460f5abe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0b:0d:e1:18:6b:1b:cb:98:ac:df:f3:47:87:
                    9d:52:a0:96:2e:4c:03:24:66:0c:cc:95:da:e9:cd:
                    c4:d9:8f:74:2c:03:7d:31:41:5a:f2:d2:ae:8e:9c:
                    6f:c2:cb:89:3b:8e:8e:8a:20:c2:54:81:b6:f1:78:
                    51:37:a1:9d:d8:87:bb:87:a5:c1:07:dc:7f:7e:49:
                    2a:1f:fd:45:e8:6e:a3:bc:6f:7e:aa:ae:b5:d0:7d:
                    3f:82:c2:74:ab:c4:99:3b:94:e3:8b:60:f9:69:27:
                    5d:e6:a2:b4:35:aa:2a:e2:8a:24:28:27:fe:f8:be:
                    7c:7b:d3:4e:de:a5:da:03:dd:fe:15:a4:1d:79:d2:
                    98:7d:ff:59:ec:45:9d:e7:56:d5:bb:63:f2:59:44:
                    47:41:10:dd:a9:d4:14:bf:ae:b4:40:02:45:d1:a3:
                    53:8c:2e:6f:2a:b8:3d:dc:e6:57:6a:f1:0b:c5:d1:
                    ce:ca:9c:de:ea:03:b5:c0:94:2f:56:c8:7a:9b:7a:
                    75:02:3f:c0:40:81:1a:30:be:93:92:1c:53:42:84:
                    6b:3d:b2:5c:d0:b3:6d:48:cc:4b:e7:58:29:21:33:
                    1d:02:44:29:7a:5a:de:25:03:63:8d:a0:cb:01:3d:
                    9f:6d:25:ac:f8:70:38:08:7d:31:43:0c:a7:87:8b:
                    e2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5D:B9:9C:FC:B3:D6:62:BA:64:FD:22:2F:F5:FF:49:A6:20:B8:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/bc2cb9c6-7705-349c-9102-a6741ccef7bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/11c64f1a-22fa-4091-9f9d-42edbc6aefff.crl

            X509v3 Authority Key Identifier:
                keyid:FF:F9:D5:A6:43:BF:DB:EF:1C:56:31:0D:DF:04:B8:1E:07:47:A0:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.19.0/24
                IPv6:
                  2602:2d6::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:5d:09:fa:1a:2d:52:36:97:95:36:a8:63:b6:4d:4c:da:6f:
         9f:8a:11:93:95:70:5c:92:84:2b:c2:8c:1f:a7:82:06:9c:f8:
         cd:d1:65:06:21:49:f4:c0:70:73:02:51:2f:98:d5:53:f2:dc:
         d0:42:85:29:13:99:57:52:56:8d:16:51:29:f7:15:d0:6a:75:
         aa:70:ee:4e:05:f0:8b:85:c4:45:fb:a6:3e:5a:3e:0a:4b:b5:
         2c:50:e7:77:f1:20:6a:3a:58:39:91:de:e6:d1:c6:f6:dc:3c:
         e6:4c:91:c0:35:03:ca:42:58:8e:e9:46:5c:de:b1:b1:13:45:
         94:7d:15:ad:0e:0a:d5:e1:6f:fa:79:92:3c:b6:a8:e3:8a:9e:
         e8:0e:84:1a:06:44:77:9b:8f:78:ee:e7:d4:06:32:27:b6:40:
         e5:d2:62:b0:1f:ca:b7:29:74:63:eb:79:dc:23:76:92:4d:d2:
         57:28:07:1a:9b:9d:96:56:27:63:7f:fa:13:9e:97:81:29:fb:
         4b:20:d2:15:bc:5a:d7:bd:97:0c:48:2e:24:e6:2d:30:47:5d:
         aa:08:25:e9:16:1e:d4:d9:09:7e:dc:98:3c:ca:13:e1:9c:cb:
         48:d1:1b:51:2e:90:01:ff:0a:f3:73:d6:a6:13:9b:82:5c:d9:
         32:5c:55:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 18:59:44 2026 by rpki-client