Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/bff72a2e-13a9-31ab-bb47-124e89b56abc.roa
File:                     bff72a2e-13a9-31ab-bb47-124e89b56abc.roa (raw, json)
Hash identifier:          7g/OCiO8f5ruX2p/Knbhht2g3liUvPRfndUchZZ03K0=
Subject key identifier:   E5:E9:5A:C8:37:82:0D:91:20:12:9E:E4:B2:2A:FC:0C:01:62:1C:2C
Certificate issuer:       /CN=8b860252-78e2-47ac-a6f1-f1dc5a900776
Certificate serial:       010D0C9F4328584F30526FC5282D7D48C508E680
Authority key identifier: 7F:81:D2:90:2A:22:41:3D:B7:67:62:4A:E2:47:51:3B:D7:0F:7B:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/bff72a2e-13a9-31ab-bb47-124e89b56abc.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     20099
IP address blocks:        192.44.70.0/24 maxlen: 24
                          2620:89:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:6f:c5:28:2d:7d:48:c5:08:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b860252-78e2-47ac-a6f1-f1dc5a900776
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=c574dc55-8972-4878-8291-21eacdaa965d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ba:a7:4d:8e:ac:ea:11:c1:ad:4a:f6:e3:c7:
                    84:de:68:4f:4e:a1:13:fa:42:fe:f5:4c:49:84:74:
                    3a:54:7d:f3:30:f9:78:0b:a3:85:e0:53:75:18:5e:
                    14:ae:fe:3f:c1:48:18:b3:76:d2:c8:9c:1a:45:60:
                    3e:0d:2b:f6:5e:91:38:08:57:13:52:ae:79:ff:7d:
                    0e:d1:c1:da:80:01:fa:32:23:6e:54:e8:32:5e:9b:
                    37:37:d2:42:db:48:9d:c7:e9:1c:8c:5b:cb:c2:2a:
                    23:80:b3:a8:56:f9:8e:0b:a8:66:f3:fc:67:e4:79:
                    62:6c:f7:86:f3:fa:38:1f:3c:91:c3:45:b7:10:c5:
                    44:fc:d3:62:25:0d:d3:fc:5a:1f:2e:37:f5:04:4e:
                    f9:b2:38:1b:2f:62:12:a2:de:f0:0d:1f:c8:e8:77:
                    7f:18:1a:43:56:72:f3:68:32:78:5a:e8:b0:f1:86:
                    bb:90:28:96:49:23:83:29:60:c8:1e:85:d9:c6:ed:
                    56:1b:b5:eb:67:ff:a1:a6:46:8f:2b:a9:75:4d:78:
                    dc:5d:59:69:f4:59:63:17:20:0b:94:14:d4:90:4b:
                    4b:f6:57:1a:df:f6:26:a7:46:12:5f:60:70:79:6d:
                    9d:c3:5b:90:d0:70:1f:65:55:ea:1d:8a:24:51:63:
                    ad:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E9:5A:C8:37:82:0D:91:20:12:9E:E4:B2:2A:FC:0C:01:62:1C:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/bff72a2e-13a9-31ab-bb47-124e89b56abc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.crl

            X509v3 Authority Key Identifier:
                keyid:7F:81:D2:90:2A:22:41:3D:B7:67:62:4A:E2:47:51:3B:D7:0F:7B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.44.70.0/24
                IPv6:
                  2620:89:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:9f:ea:76:d3:0e:f5:f0:66:3a:31:eb:9c:73:81:15:5c:3f:
         6b:a6:68:ba:e9:67:e7:66:94:56:cf:aa:25:04:27:56:40:ac:
         0d:1b:a5:65:4e:d8:2b:f0:bc:7c:d1:49:81:11:b8:14:7a:4c:
         91:e7:77:03:a4:da:ad:1d:bf:d6:c3:69:16:a4:4e:1a:83:ed:
         26:c6:dc:12:54:98:bd:93:62:05:eb:5d:59:dd:d1:6f:07:ca:
         a5:b0:e5:52:04:93:08:2e:2e:50:41:e6:2a:4a:1e:fb:4b:a7:
         5a:67:ab:b2:c1:5f:fa:8f:e2:47:7c:a8:c1:ab:1a:29:85:ae:
         d8:ca:71:37:62:14:1c:0d:ac:39:b9:86:ce:aa:9b:af:f7:49:
         66:74:66:2d:c6:96:df:61:ef:c8:f4:90:f4:70:3b:a8:46:91:
         64:e9:ee:65:a5:3b:8b:fd:18:7a:02:a5:24:b5:87:11:d9:ab:
         a2:48:59:4b:ba:fa:a4:a8:1c:b0:58:e8:69:df:59:41:27:52:
         f4:9e:fd:89:e0:d8:64:45:de:ce:31:ee:60:00:15:4a:06:26:
         60:81:26:5b:c9:94:a1:cd:58:41:b3:4b:be:ad:2d:0d:89:be:
         91:b8:b2:1b:ff:39:20:56:f0:7a:84:65:fc:51:cb:9a:a4:05:
         d5:6d:a2:d9
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE8wUm/FKC19SMUI5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI4NjAyNTItNzhlMi00N2FjLWE2ZjEtZjFkYzVhOTAw
Nzc2MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk
YzU3NGRjNTUtODk3Mi00ODc4LTgyOTEtMjFlYWNkYWE5NjVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbqnTY6s6hHBrUr248eE3mhPTqET+kL+9UxJ
hHQ6VH3zMPl4C6OF4FN1GF4Urv4/wUgYs3bSyJwaRWA+DSv2XpE4CFcTUq55/30O
0cHagAH6MiNuVOgyXps3N9JC20idx+kcjFvLwiojgLOoVvmOC6hm8/xn5HlibPeG
8/o4HzyRw0W3EMVE/NNiJQ3T/FofLjf1BE75sjgbL2ISot7wDR/I6Hd/GBpDVnLz
aDJ4Wuiw8Ya7kCiWSSODKWDIHoXZxu1WG7XrZ/+hpkaPK6l1TXjcXVlp9FljFyAL
lBTUkEtL9lca3/Ymp0YSX2BweW2dw1uQ0HAfZVXqHYokUWOtqwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFOXpWsg3gg2RIBKe5LIq/AwBYhwsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84Yjg2
MDI1Mi03OGUyLTQ3YWMtYTZmMS1mMWRjNWE5MDA3NzYvYmZmNzJhMmUtMTNhOS0z
MWFiLWJiNDctMTI0ZTg5YjU2YWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGI4NjAyNTItNzhlMi00N2FjLWE2
ZjEtZjFkYzVhOTAwNzc2LzhiODYwMjUyLTc4ZTItNDdhYy1hNmYxLWYxZGM1YTkw
MDc3Ni5jcmwwHwYDVR0jBBgwFoAUf4HSkCoiQT23Z2JK4kdRO9cPe3cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84Yjg2MDI1Mi03OGUyLTQ3YWMtYTZmMS1mMWRj
NWE5MDA3NzYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwCxGMA8E
AgACMAkDBwAmIACJwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAE5/qdtMO9fBmOjHrnHOBFVw/a6Zouuln
52aUVs+qJQQnVkCsDRulZU7YK/C8fNFJgRG4FHpMked3A6TarR2/1sNpFqROGoPt
JsbcElSYvZNiBetdWd3RbwfKpbDlUgSTCC4uUEHmKkoe+0unWmerssFf+o/iR3yo
wasaKYWu2MpxN2IUHA2sObmGzqqbr/dJZnRmLcaW32HvyPSQ9HA7qEaRZOnuZaU7
i/0YegKlJLWHEdmrokhZS7r6pKgcsFjoad9ZQSdS9J79ieDYZEXezjHuYAAVSgYm
YIEmW8mUoc1YQbNLvq0tDYm+kbiyG/85IFbweoRl/FHLmqQF1W2i2Q==
-----END CERTIFICATE-----
Generated at Wed Oct 14 04:34:38 2026 by rpki-client