Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/19870c50-7c53-32d6-9fe0-5e430a6d1704.roa
File:                     19870c50-7c53-32d6-9fe0-5e430a6d1704.roa (raw, json)
Hash identifier:          D+7SxO5/JPcRxjxV9EZeDVPnG3xo6c+qC5BHpwKiP+g=
Subject key identifier:   EF:5C:24:ED:61:35:4A:1E:55:35:AA:0E:79:D0:F0:A2:35:D8:E7:A4
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584E4129DE84CE257390C810EBE0
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/19870c50-7c53-32d6-9fe0-5e430a6d1704.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     16509
IP address blocks:        155.226.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:de:84:ce:25:73:90:c8:10:eb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=77e9df98-960e-454d-8421-6dda6494a90d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:67:1d:4c:6e:6d:a7:1b:e9:7b:96:88:70:53:
                    d4:38:2e:a9:59:2f:d8:c9:bd:7f:a0:d2:16:4c:28:
                    5a:0d:3f:e5:c3:0b:94:73:4c:f2:00:cd:4b:6c:34:
                    37:09:d9:a8:bb:06:37:40:eb:15:4e:16:b6:8f:27:
                    d6:03:fb:b2:d0:5f:fc:03:6e:04:a3:49:24:dd:a7:
                    87:db:89:5a:86:b3:e9:ae:e0:b3:93:66:71:37:8f:
                    5d:3e:e6:e3:58:3d:14:85:5d:5c:64:f4:1a:57:ad:
                    50:1b:ce:33:32:18:10:7d:0b:71:59:9b:d1:32:4d:
                    41:6a:30:7d:be:9d:e7:22:74:fb:11:6b:7b:b0:a0:
                    65:fa:79:39:7e:63:2f:94:e9:d2:23:6e:18:d0:3c:
                    1e:8e:da:a3:49:a3:37:6b:87:03:20:a8:b1:cc:39:
                    c1:df:a1:fb:28:66:49:28:52:38:3a:8e:c6:4a:4a:
                    6a:a0:fc:d0:e2:09:6d:7a:58:b4:87:35:f3:76:24:
                    35:fb:3f:a7:52:28:06:42:7e:e5:5e:da:dc:dc:69:
                    21:ac:13:27:bc:d4:75:78:33:ce:b2:ef:54:0f:1f:
                    ad:97:4a:1b:79:01:1c:79:fe:78:20:6d:16:06:c9:
                    49:c7:ff:a7:77:fc:d2:aa:b9:89:e0:a6:f3:85:ee:
                    cc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5C:24:ED:61:35:4A:1E:55:35:AA:0E:79:D0:F0:A2:35:D8:E7:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/19870c50-7c53-32d6-9fe0-5e430a6d1704.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.226.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:2b:ea:27:dc:b1:8a:09:aa:a6:cc:e8:50:2e:91:70:8f:1e:
         36:ef:fb:be:eb:1a:68:8e:9c:ea:b2:38:4a:72:41:8c:88:ef:
         cb:4d:31:d8:92:c5:31:0b:61:14:08:c2:59:db:40:48:b8:07:
         8d:74:bd:b7:88:2b:4a:37:bd:35:25:69:ca:bf:c6:4b:48:79:
         b4:f1:89:3b:61:ea:70:f9:9e:f6:e1:34:13:d0:df:c7:66:a4:
         68:65:b8:7f:a1:2c:38:8b:b1:08:85:4a:c0:2c:41:2f:cc:04:
         65:fd:7c:13:3e:6c:8b:b4:db:f2:53:4b:5c:80:61:71:3e:14:
         ba:cb:a5:18:c7:d4:13:38:fa:a2:6e:9a:d7:97:76:80:12:fa:
         60:a9:fb:34:e3:0e:3a:e0:b0:8c:79:43:b5:0f:0c:19:90:a3:
         f7:1e:a9:2b:19:7b:16:3f:15:a9:cb:cc:c0:1f:b3:4a:0f:27:
         38:8c:6c:3a:42:70:24:36:ac:fd:bf:90:dd:60:dc:33:9f:c0:
         54:93:77:da:89:de:bb:fc:aa:e3:43:dc:7c:61:f0:e4:b4:0e:
         a6:35:fe:67:19:a3:f0:08:cb:85:2e:26:a7:33:1b:e5:cd:78:
         2b:8b:37:f2:b4:ef:f3:c2:9c:ad:26:99:0e:bb:d5:74:99:b6:
         26:e5:a8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:27:44 2026 by rpki-client