Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/8502a5d8-1f65-37e7-b178-fc309fc8688f.roa
File:                     8502a5d8-1f65-37e7-b178-fc309fc8688f.roa (raw, json)
Hash identifier:          egYgo6Q/KTPNZeK5ghlSnOb9KViARhiYSXmHU78/DzI=
Subject key identifier:   01:68:1A:15:2F:5A:82:8D:D9:D0:F7:30:CD:FD:D9:6E:A0:D0:43:A0
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584D93254751D762678CD4EA0840
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/8502a5d8-1f65-37e7-b178-fc309fc8688f.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        155.226.208.0/20 maxlen: 24
                          155.226.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:47:51:d7:62:67:8c:d4:ea:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=e27d0ab0-fd69-478f-a068-c82a1387f6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:99:c3:20:69:b9:dd:55:45:6a:52:45:6d:d7:
                    1f:05:66:6e:f2:cc:fb:2e:54:47:35:f7:58:10:f1:
                    01:07:30:33:08:0b:8c:d1:b2:09:97:59:d1:a7:17:
                    b9:9a:09:a7:4d:33:62:7d:44:01:40:b6:47:4c:bd:
                    4b:cb:55:57:46:64:a6:29:2a:c9:3e:de:ab:41:0b:
                    11:e4:d9:43:68:5e:ba:60:63:dc:b2:d2:68:d9:83:
                    01:40:f4:5f:6d:e3:1e:e4:93:bd:23:c2:54:63:e4:
                    91:a5:4a:40:6c:3d:60:1e:19:0d:18:18:a5:5d:80:
                    94:80:2d:00:be:f6:ff:81:1e:a4:a4:dd:11:7d:56:
                    0c:6b:23:ec:bf:4c:8a:f4:16:bd:09:64:1d:4e:93:
                    1c:58:7b:fc:6a:d2:7f:a8:fb:35:d0:bf:0e:31:d4:
                    73:05:2d:36:fe:e1:e2:83:5d:99:01:24:40:20:f6:
                    e5:7b:c6:0c:1c:13:a1:39:a1:a2:52:6a:bf:87:98:
                    1f:21:7a:c3:dc:c3:7b:9b:44:c1:f5:04:51:57:1e:
                    47:76:9b:0f:04:ac:05:ea:67:74:d8:7c:3a:2a:ad:
                    e5:42:c4:fa:e1:ad:b4:d4:54:c8:3e:cb:64:2b:78:
                    d6:b9:22:6a:9e:40:43:55:e0:64:16:d1:f2:27:08:
                    97:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:68:1A:15:2F:5A:82:8D:D9:D0:F7:30:CD:FD:D9:6E:A0:D0:43:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/8502a5d8-1f65-37e7-b178-fc309fc8688f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.226.208.0-155.226.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:89:82:a0:a4:e8:6e:73:f8:3a:26:da:89:da:3b:ca:04:9c:
         fa:8a:b9:05:24:de:c5:c7:99:5e:05:49:41:15:10:2c:71:2a:
         13:16:33:59:f4:05:85:aa:11:8a:43:f8:8f:81:ca:50:6d:29:
         44:5e:d8:c2:4a:f7:89:46:d5:01:7f:9e:0f:7b:3b:72:87:31:
         ec:17:56:3e:45:0b:16:ba:1e:8e:e6:96:d9:de:2b:63:2c:8e:
         0e:a2:c1:96:1f:e4:d8:72:a3:91:7b:c4:4b:70:0b:3d:48:e2:
         db:eb:22:94:c9:a6:00:3e:c4:a7:79:57:38:b3:02:83:09:6c:
         aa:74:f0:3a:6e:3a:1e:51:93:72:1a:d0:b3:ad:72:a7:a5:f6:
         6d:94:d0:9b:a5:82:da:54:2f:a0:fe:1e:ba:f0:f2:2c:f8:b5:
         a5:1e:eb:d1:ff:97:f1:a6:db:60:92:c9:0e:3a:99:20:93:e4:
         c2:1a:c9:a4:7f:49:04:69:a1:4b:01:ed:66:67:4c:01:2f:f0:
         56:1b:69:2c:81:f0:a1:9c:ee:eb:8b:68:e0:3a:97:5b:c7:74:
         0c:ef:92:8b:12:d5:59:29:d2:9e:45:c0:13:99:03:0c:d0:c5:
         c4:37:47:45:9a:fd:da:b8:8e:0c:35:e0:d7:1b:1e:68:b8:62:
         60:42:e5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:47:47 2026 by rpki-client