Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/bccc7560-292f-3a9e-814a-ed55fc350847.roa
File:                     bccc7560-292f-3a9e-814a-ed55fc350847.roa (raw, json)
Hash identifier:          pEohych9jl2R9ANSP1LJxLiuroLhQPvOhsHai2kGjPc=
Subject key identifier:   13:E7:06:56:2C:5B:2F:7A:48:77:5A:52:FC:44:45:F4:17:7C:8D:51
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584D0D425DC3F94633AFB435DD80
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/bccc7560-292f-3a9e-814a-ed55fc350847.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     27539
IP address blocks:        64.68.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:5d:c3:f9:46:33:af:b4:35:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=4e05b7bb-7cbe-418e-8c23-c77ce748fc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:33:90:a4:22:2d:47:da:ed:a3:ef:7f:a8:82:
                    3f:fe:01:94:35:66:1e:f3:8a:f0:22:a9:86:7b:26:
                    35:39:84:cf:9b:95:fe:1f:2c:ef:79:8d:70:d3:e3:
                    84:74:7f:38:d6:46:09:4f:aa:3e:fa:11:c8:80:4b:
                    b6:4a:15:88:e5:b0:84:f3:25:8a:e4:2b:23:e5:39:
                    04:fc:6b:81:4a:10:29:30:4f:d9:78:93:62:8f:a4:
                    22:c4:98:ca:bf:a2:07:78:20:6f:18:88:29:6b:3b:
                    dd:e8:42:c8:d2:6a:b3:b3:8e:98:27:7f:e7:01:d1:
                    ca:8a:5a:aa:0d:95:e2:88:05:62:6b:51:f0:b4:6d:
                    98:26:17:38:42:0c:78:cc:47:a8:c5:c6:07:f2:cd:
                    76:d8:ed:ab:fc:ce:57:52:76:bc:1c:3d:13:10:ff:
                    0d:48:80:88:3d:00:6d:8a:2a:3f:3e:b7:1f:cb:61:
                    c7:c7:6e:57:f9:ae:61:df:62:05:0e:6b:63:00:7c:
                    cc:5a:df:8a:90:79:dd:d3:5b:fc:dd:7b:e7:08:7c:
                    44:68:39:cb:68:80:68:cd:ed:17:55:3a:d5:e9:72:
                    b1:c6:fb:3b:d5:42:86:d7:76:bd:0b:21:7c:5c:a5:
                    2b:e5:8a:b2:2a:7b:b2:0a:6a:dc:50:3c:f8:ae:ee:
                    1e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E7:06:56:2C:5B:2F:7A:48:77:5A:52:FC:44:45:F4:17:7C:8D:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/bccc7560-292f-3a9e-814a-ed55fc350847.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.68.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:63:55:de:14:22:79:0b:fa:5c:87:12:f0:3a:0f:80:c2:41:
         60:96:76:c8:aa:04:c8:f0:93:e0:13:02:8f:d1:e0:28:29:e5:
         11:be:dc:0c:88:13:37:7a:af:f6:e8:84:09:d8:a4:bf:91:38:
         40:77:34:b2:c2:1a:f8:f2:c5:99:a2:e1:08:2d:52:fb:47:0e:
         e4:2d:a3:20:df:39:be:44:44:09:64:a9:86:ae:e0:2d:39:83:
         a4:9d:b8:d0:ea:bd:2b:dd:b9:24:87:fd:42:4b:f9:da:86:2d:
         98:66:c3:eb:86:f4:6d:b7:80:cd:08:09:52:4a:4c:73:ea:15:
         e7:a0:a9:a9:b9:21:95:aa:2b:1a:fb:c9:79:e8:7c:fe:94:7f:
         04:e8:fd:cc:e1:18:3a:f2:6d:12:af:5c:e5:53:c6:91:71:42:
         77:4d:e3:af:89:1d:db:b7:2d:e4:84:c3:d0:34:1e:5b:43:e2:
         8d:ce:d4:6a:86:7c:76:56:27:fb:08:5a:7c:68:8c:fa:0a:ff:
         73:5f:0f:eb:e5:64:42:57:11:9c:db:83:9a:f6:b3:96:bf:8a:
         60:7e:e4:60:0b:6c:70:65:e2:2b:3e:64:59:2a:dc:e9:92:94:
         94:05:9b:f6:49:36:3a:f4:bd:b7:4a:23:47:c5:c7:6d:fa:e5:
         88:f3:80:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:36:37 2026 by rpki-client