Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/68dae09f-47df-3c08-b3d6-68592a6158bf.roa
File:                     68dae09f-47df-3c08-b3d6-68592a6158bf.roa (raw, json)
Hash identifier:          GR70WIIdEWJGvgtGPUnDIx7YgHbUg6xewohcTEqEXtA=
Subject key identifier:   88:C7:18:8D:AC:54:21:B1:C7:C3:D7:12:0A:53:C8:DA:0A:F1:9F:87
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584E4AEF3F252AF64B6D9A3EC900
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/68dae09f-47df-3c08-b3d6-68592a6158bf.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     14340
IP address blocks:        13.110.0.0/16 maxlen: 24
                          96.43.144.0/20 maxlen: 24
                          96.43.152.0/23 maxlen: 24
                          136.146.0.0/16 maxlen: 24
                          136.147.0.0/17 maxlen: 24
                          136.147.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:3f:25:2a:f6:4b:6d:9a:3e:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=55dfa4e1-5e6d-4e65-9b66-32ede58de717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c8:aa:51:ee:33:10:37:e7:2e:b7:fd:14:19:
                    33:ed:e8:cd:32:6c:73:16:7b:72:61:b2:d6:80:f0:
                    40:44:cb:3b:ae:17:78:5a:90:8d:af:23:70:01:43:
                    70:ba:7c:66:be:1d:b3:c7:03:ce:3a:2e:bf:c9:44:
                    c3:5d:a0:ed:c3:4a:ff:20:28:e7:a5:9d:40:50:ff:
                    5f:61:c6:ce:78:59:65:28:2a:b7:7c:ad:3f:72:ab:
                    b5:10:4e:af:9b:6a:11:6a:74:05:bc:17:87:52:21:
                    82:0b:3f:b3:22:27:d2:c3:8c:12:8d:d0:b7:54:90:
                    84:bd:8b:e5:4d:5b:4e:c4:55:28:ea:20:3b:59:68:
                    e4:82:cf:50:ae:0c:6d:0c:98:e3:5a:17:1d:00:cf:
                    64:51:1c:ce:db:d2:db:e8:c6:3c:5e:1a:1f:4e:51:
                    9e:4e:d6:fe:21:7b:0e:12:81:f1:8d:1c:a8:a0:16:
                    3e:8d:28:0a:7a:02:56:9c:0e:ad:e2:3a:7b:fe:45:
                    67:ec:64:89:5a:fb:e0:c3:f8:e7:dc:9f:9d:d6:9e:
                    9a:89:c4:d5:14:b0:48:3b:da:eb:d9:db:57:cc:a2:
                    7b:97:0c:e4:ac:59:ad:71:2c:8d:ec:9b:45:c6:9b:
                    13:4d:49:44:87:2e:27:72:1d:6a:26:5b:0b:5b:57:
                    20:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C7:18:8D:AC:54:21:B1:C7:C3:D7:12:0A:53:C8:DA:0A:F1:9F:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/68dae09f-47df-3c08-b3d6-68592a6158bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.110.0.0/16
                  96.43.144.0/20
                  136.146.0.0-136.147.127.255
                  136.147.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:e8:95:3f:a9:37:1d:fb:00:1b:4c:da:b0:a0:71:fc:8a:d8:
         9a:d5:5d:0e:40:a7:37:1a:18:43:4d:99:b0:f3:67:c7:c2:df:
         66:63:d7:81:07:08:34:d9:b5:c5:22:3d:04:60:21:28:30:b8:
         87:89:51:89:ee:7d:c3:73:50:81:80:48:f1:f5:2e:31:7a:40:
         4a:6a:56:db:9c:3d:a6:0a:a1:52:c1:c1:96:93:e6:f5:6c:5d:
         55:70:61:04:af:05:ca:be:87:b8:ae:6f:d4:a8:a9:b3:c8:d6:
         ce:71:17:67:c1:ac:fd:0c:cc:36:3c:ee:fc:d9:13:f8:34:50:
         02:30:bf:f9:fb:29:fc:ba:ca:e4:c0:a9:7d:f6:37:9b:f2:65:
         7a:ec:67:b6:8a:54:15:ff:fd:5f:f6:e9:dd:50:4c:b6:57:25:
         28:38:59:2a:68:1f:ce:fb:05:18:8c:0f:ec:12:0c:8f:d0:3c:
         9e:8f:59:1c:88:af:f9:94:a6:1e:28:2c:cd:71:60:38:2c:3b:
         4f:cd:bc:93:6e:ee:88:e9:e2:5f:5e:bc:40:37:a0:1d:fe:08:
         a2:b6:e5:cc:ee:f7:c4:2a:1b:de:62:97:88:b8:e5:46:52:70:
         6c:7e:b8:3d:d2:f0:01:1c:66:08:44:ab:9a:ba:58:9e:28:c9:
         10:30:ba:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:54:48 2026 by rpki-client