Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/bbf45412-6bbb-3bec-929d-bf255998ed53.roa
File:                     bbf45412-6bbb-3bec-929d-bf255998ed53.roa (raw, json)
Hash identifier:          rbGppM1ezYHubc02BGIEGMo0kEesAJT8JqBEsqPRCng=
Subject key identifier:   BB:6B:C8:5A:4F:3F:F5:4D:42:D8:5A:E3:8B:76:91:C4:52:23:E1:BC
Certificate issuer:       /CN=8ee8b7f9-2148-4099-8192-6428b14301be
Certificate serial:       010D0C9F4328584E577F47C9B7399BBC629AE980
Authority key identifier: 84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/bbf45412-6bbb-3bec-929d-bf255998ed53.roa
Signing time:             Tue 30 Jun 2026 09:00:12 +0000
ROA not before:           Tue 30 Jun 2026 09:00:12 +0000
ROA not after:            Mon 28 Sep 2026 09:00:12 +0000
asID:                     54302
IP address blocks:        199.88.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:57:7f:47:c9:b7:39:9b:bc:62:9a:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee8b7f9-2148-4099-8192-6428b14301be
        Validity
            Not Before: Jun 30 09:00:12 2026 GMT
            Not After : Sep 28 09:00:12 2026 GMT
        Subject: CN=1bcd05d9-b718-453f-a7eb-859a480654ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ba:86:5b:22:11:30:4b:31:9a:ac:c3:85:42:
                    1f:b0:43:21:96:9f:b4:0b:82:34:ed:93:7d:7b:7a:
                    8f:fd:92:43:d9:32:a8:34:a2:84:1a:e1:7d:bc:00:
                    6d:2b:11:8d:d1:7a:ce:9c:a9:18:19:2a:c5:bf:9c:
                    be:81:ab:16:af:9d:ca:13:d1:2f:06:2d:a9:f1:aa:
                    b7:ed:83:bc:58:0d:49:76:f3:5d:ba:5d:56:c6:8e:
                    7f:4b:27:d4:fd:c1:8b:c9:d4:86:2f:70:a1:d9:aa:
                    d2:81:90:21:81:e1:40:e3:54:7f:f5:62:76:b7:c3:
                    24:07:82:7f:10:7d:d4:c0:a5:e0:26:4e:f1:4c:46:
                    29:14:e8:32:bf:d7:cb:56:f5:74:14:4f:e9:ff:ba:
                    a9:e9:17:78:41:25:8f:13:47:b5:96:65:83:01:97:
                    8b:14:04:28:f1:fe:f9:8c:1b:84:a0:a8:50:e6:f8:
                    51:c6:d9:ba:94:1b:7c:61:bc:de:de:bd:0b:f0:b7:
                    97:83:d0:a4:a5:63:ed:89:7d:c3:bd:fb:be:0a:5a:
                    12:58:2a:f1:eb:4a:4e:e4:db:63:8f:cf:ad:bf:78:
                    81:94:bf:9f:1c:0d:01:a4:9a:f8:94:52:f6:d3:b0:
                    c9:10:af:6f:8b:c5:4e:60:e3:d3:24:04:5c:82:96:
                    92:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6B:C8:5A:4F:3F:F5:4D:42:D8:5A:E3:8B:76:91:C4:52:23:E1:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/bbf45412-6bbb-3bec-929d-bf255998ed53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl

            X509v3 Authority Key Identifier:
                keyid:84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.88.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:b6:0a:1c:ec:12:26:b4:65:a5:d7:cf:a4:85:ee:16:5c:aa:
         db:46:36:c1:18:98:4b:ca:b5:19:f6:ce:01:65:30:dc:87:09:
         40:7c:4e:f5:97:87:ca:6a:65:17:5f:21:6b:1f:93:6b:5a:16:
         96:3e:bc:9e:d9:03:8f:54:a1:53:22:b8:e9:68:f7:46:fb:db:
         71:f4:9c:20:19:d8:4c:58:e3:85:f1:89:5c:29:15:ce:0f:4a:
         8b:f5:48:f3:e6:b1:09:13:be:6c:e6:39:00:ec:51:d0:d8:61:
         ac:3c:22:c9:79:d1:65:34:46:68:ca:4c:2a:f8:27:4b:a2:f4:
         74:86:23:7b:94:ed:d3:b8:d5:f3:36:75:a4:c1:41:f2:57:90:
         f1:49:86:1b:8f:b7:46:66:a9:9b:b5:be:43:ef:76:14:61:d5:
         50:d3:cb:80:af:30:23:37:49:c3:fe:d3:1f:86:68:d6:26:86:
         14:00:8b:b7:6b:bd:1c:72:84:37:7d:70:2c:46:1e:fb:af:cf:
         d3:e7:0a:f8:b9:91:1f:12:23:c3:c3:07:e1:d7:a3:7d:d3:e9:
         1a:2c:fd:ac:e5:d4:48:b4:4c:c6:db:b2:88:3d:2d:11:67:34:
         86:83:1c:f1:a2:6b:76:c9:86:6b:d2:68:35:3d:d1:ba:1d:eb:
         48:7f:57:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:51:41 2026 by rpki-client