Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bf1cad3a-76f4-33f5-a7af-41818b9bd825.roa
File:                     bf1cad3a-76f4-33f5-a7af-41818b9bd825.roa (raw, json)
Hash identifier:          zcBXIcerALHRAsY/8eWQ4XrNPGIUP9NLK3cVTrFYDi8=
Subject key identifier:   E0:03:49:E4:EA:A1:A7:22:B2:FB:FE:F6:98:E7:72:AF:DC:A8:9E:17
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584ED1671D6237099B3F06951300
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bf1cad3a-76f4-33f5-a7af-41818b9bd825.roa
Signing time:             Thu 13 Aug 2026 01:00:11 +0000
ROA not before:           Thu 13 Aug 2026 01:00:11 +0000
ROA not after:            Wed 11 Nov 2026 02:00:11 +0000
asID:                     0
IP address blocks:        154.62.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d1:67:1d:62:37:09:9b:3f:06:95:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 13 01:00:11 2026 GMT
            Not After : Nov 11 02:00:11 2026 GMT
        Subject: CN=55a70a42-a971-4e8c-a2ec-cafd36c68c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bf:cb:42:0b:1a:69:e3:c1:f8:3b:be:12:80:
                    59:e7:41:53:a5:c8:5e:94:6b:09:25:1e:a8:a7:60:
                    17:01:13:c7:90:68:2c:fd:24:1d:98:b5:7c:4d:41:
                    50:eb:9b:78:55:2f:be:54:79:12:b5:77:e2:86:f8:
                    8e:26:58:eb:05:83:bc:a4:cc:d9:72:ea:ee:06:e5:
                    3b:bc:25:36:77:eb:89:0f:94:ae:e3:98:3d:cd:03:
                    31:92:12:d5:5b:33:dd:b1:fb:9a:e3:b6:72:21:06:
                    9d:45:38:ac:43:f8:c6:01:d5:b8:bb:b2:60:99:f3:
                    4b:f7:15:0e:4f:e0:26:08:e0:51:0c:cc:0e:9b:5d:
                    84:85:ba:72:5d:49:67:f5:70:1f:64:15:e3:ed:b3:
                    f4:cb:aa:22:c8:d4:ca:2d:92:84:1b:69:fd:e3:d9:
                    79:a9:4e:d5:d9:8e:4e:94:a0:40:1d:fe:30:09:87:
                    83:29:8c:e0:63:d7:cc:f1:84:19:11:5a:38:54:55:
                    cb:6a:ed:09:d0:fe:07:23:60:c6:55:d9:69:3b:8e:
                    74:aa:b9:78:8e:64:cc:28:c5:9d:1f:bc:9e:97:8a:
                    74:a6:2d:18:fd:b6:a3:37:97:59:c6:4b:22:39:d2:
                    f3:c9:c2:c6:89:ad:14:17:23:0e:3f:51:c1:b7:b5:
                    9a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:03:49:E4:EA:A1:A7:22:B2:FB:FE:F6:98:E7:72:AF:DC:A8:9E:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bf1cad3a-76f4-33f5-a7af-41818b9bd825.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.62.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:4a:d2:12:cc:ad:16:29:01:37:7f:e8:f4:e8:4e:d7:bd:77:
         f7:d3:61:d0:be:07:b4:60:2b:2f:61:60:6a:b8:2b:7e:85:af:
         59:72:14:dd:6d:63:99:e0:34:2d:b5:4c:d0:df:67:a0:02:9c:
         a7:19:75:0a:76:fe:c0:b2:ff:5b:15:a0:e3:76:5f:0f:c9:fe:
         c4:1f:5c:b0:1c:33:7e:2d:d3:0a:e1:5c:17:e6:60:3b:45:6e:
         7a:f8:39:16:90:54:0a:42:52:e6:fa:86:fe:72:c7:4a:1e:4c:
         64:1e:4c:6c:7b:04:df:bc:f7:c1:0b:89:d0:b5:73:a9:07:b9:
         c7:48:8b:15:1b:6f:14:ac:49:dd:5b:48:a8:16:b7:b0:88:0f:
         21:28:f7:14:68:4c:e5:dc:56:0e:b4:87:01:b5:c7:ed:93:1d:
         f8:fe:52:16:73:30:f1:7b:52:54:36:c1:be:db:63:a0:e7:95:
         94:2e:9b:dc:f1:37:22:e8:fb:49:a3:0b:83:fc:f6:12:26:a1:
         b7:cb:36:1a:f5:6e:f8:35:75:73:e1:80:fb:41:0f:e8:a4:8b:
         10:44:2d:fa:08:ae:15:f2:2e:dd:30:e7:df:e9:bc:2d:99:30:
         89:a8:2a:2d:f8:fc:65:0c:40:b5:41:98:0b:8f:42:1a:71:7a:
         3e:9e:e0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:31:50 2026 by rpki-client