Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/c185bc49-3533-373b-bbc3-00f946055c50.roa
File:                     c185bc49-3533-373b-bbc3-00f946055c50.roa (raw, json)
Hash identifier:          VPrthBFAY8aKrb8fAVEM6y/ZG3C9sk/UhyemkznHHl8=
Subject key identifier:   C3:42:03:D1:86:80:58:DA:A0:4D:52:8A:D2:07:F3:CF:43:A3:E4:66
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584E4AEF3F311F7AF3138BB48D00
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/c185bc49-3533-373b-bbc3-00f946055c50.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     22606
IP address blocks:        66.231.80.0/20 maxlen: 24
                          68.232.192.0/20 maxlen: 24
                          136.147.128.0/20 maxlen: 24
                          136.147.176.0/20 maxlen: 24
                          198.245.80.0/20 maxlen: 24
                          199.122.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:3f:31:1f:7a:f3:13:8b:b4:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=3f52fa4c-2ba4-4b7b-aeab-46bcb311215b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6a:ea:17:ce:4b:f7:19:d8:be:c9:2a:a3:c4:
                    f7:16:a9:78:8d:c9:b9:98:c8:f9:a5:36:82:2b:57:
                    05:9f:72:a2:c5:90:ee:b0:ad:da:bc:ac:26:8c:7d:
                    03:e1:24:3f:2b:f0:e2:eb:12:c1:29:eb:0b:ce:2f:
                    7c:07:a7:4b:e4:5e:f1:22:48:c4:da:0a:c7:cf:1e:
                    4c:19:ab:3a:63:93:e0:9b:e5:92:6d:5a:5c:63:b9:
                    79:f0:c8:1f:02:e6:ba:a9:ee:7b:83:00:98:19:94:
                    ee:93:9d:2a:d6:a6:1a:27:3b:3d:4e:0c:d3:17:1b:
                    53:a0:93:e8:35:c1:7d:79:2e:fb:84:51:03:17:08:
                    63:88:ed:c5:62:43:31:64:e9:5b:2f:fa:94:80:46:
                    0c:c9:12:82:59:bb:d4:58:d4:df:7d:2e:d1:71:83:
                    68:64:fc:68:26:f7:98:bf:5a:9f:3e:b5:b3:9e:65:
                    fa:35:65:b3:58:ca:ca:cc:b3:df:40:d5:38:2d:d0:
                    d7:39:8c:20:68:5f:e1:f6:09:da:96:4c:47:d5:8b:
                    27:95:96:14:be:1c:50:a2:9e:e7:4d:60:26:7f:f3:
                    da:82:4e:cc:f0:fe:9b:6e:f7:eb:ed:6d:be:b0:d1:
                    2a:af:70:c9:18:83:c5:6e:34:14:47:67:d4:50:4e:
                    8e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:42:03:D1:86:80:58:DA:A0:4D:52:8A:D2:07:F3:CF:43:A3:E4:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/c185bc49-3533-373b-bbc3-00f946055c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.80.0/20
                  68.232.192.0/20
                  136.147.128.0/20
                  136.147.176.0/20
                  198.245.80.0/20
                  199.122.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:d4:e5:df:f3:bd:85:47:8b:be:3f:bd:79:58:df:90:9b:cd:
         90:2f:c1:b4:c4:3f:f3:ff:db:5c:3f:a9:3f:ec:61:ae:b6:8d:
         27:ef:85:61:94:21:0e:c8:79:e1:d4:98:f6:ed:6b:65:91:c7:
         f9:01:4a:6d:e5:6e:6e:20:df:ba:42:0e:c3:2c:1f:ee:0b:38:
         bc:7b:a7:4c:b9:86:c9:b4:ed:7d:59:c3:50:71:bf:36:26:82:
         11:30:9c:ba:ab:78:8f:65:95:63:87:49:7a:9e:2a:ab:ce:71:
         fd:fa:b3:bc:d2:b6:ac:c7:43:c6:bc:a5:24:f3:69:f5:d8:c9:
         4a:ed:71:e9:74:1c:f7:44:74:6a:ef:c9:62:94:fb:6b:ae:d3:
         89:c4:4d:ca:14:1e:ed:8d:70:ec:fc:da:5c:db:36:7f:ea:d4:
         0f:41:2b:dc:9e:34:d1:aa:45:d9:05:b3:3a:61:bb:c4:da:ff:
         69:3b:12:22:12:7b:f0:c8:d9:d4:52:74:dd:7e:f6:75:ba:7c:
         6d:14:e1:04:59:b2:dd:fc:00:76:1b:8c:94:a8:3b:92:06:72:
         1e:42:9c:c5:35:12:af:91:c0:8d:9a:44:d3:35:37:37:8c:bb:
         e3:05:62:1e:03:f4:89:e1:a8:01:bd:80:6b:a3:89:02:94:67:
         9c:e2:88:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:56:00 2026 by rpki-client