Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/9d79956b-2f09-31a1-9aaf-fa62de9fef1f.roa
File:                     9d79956b-2f09-31a1-9aaf-fa62de9fef1f.roa (raw, json)
Hash identifier:          UpdIn/EJxH1BVZuyNfe2DPnGnyb5tfiZWZWUA2gs+jI=
Subject key identifier:   C4:86:D8:92:5A:91:E5:75:24:17:49:12:17:AB:D2:18:9C:84:AF:0D
Certificate issuer:       /CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6
Certificate serial:       010D0C9F4328584F4972B28CC1F963BC8FEBAA00
Authority key identifier: 7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/9d79956b-2f09-31a1-9aaf-fa62de9fef1f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     398090
IP address blocks:        167.17.96.0/20 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:b2:8c:c1:f9:63:bc:8f:eb:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5bb8db3c-35de-4726-b60c-85bed9999521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:71:f5:9c:be:1a:91:69:07:17:b0:62:ac:f1:
                    66:f1:97:4c:2c:01:fa:c1:16:9a:dc:5a:df:b8:1a:
                    e6:e5:28:67:8a:45:bf:46:82:b7:8f:6a:41:84:ef:
                    95:6b:17:1f:64:02:64:58:5d:8c:e5:13:12:6f:d4:
                    bd:e3:a6:ca:51:64:6b:32:d9:59:a4:dd:51:c2:2b:
                    a3:95:df:91:3a:37:b5:46:e3:5e:7e:26:5e:a6:4c:
                    88:3f:74:68:c2:53:65:0a:5b:d6:5a:99:94:43:75:
                    32:3f:e2:7f:46:2b:be:84:ea:e8:41:30:b3:3d:4f:
                    9d:ad:ca:c4:44:d3:55:c3:e7:07:50:89:a1:b6:47:
                    4a:f2:f5:1d:52:2a:9d:26:ea:41:2c:fb:32:ab:dd:
                    63:99:0b:d7:cf:c6:15:b4:20:24:3f:b9:c7:58:f9:
                    0e:ee:11:f1:c3:ee:0a:0d:ba:3b:f7:7a:84:bf:b6:
                    4f:e2:e9:df:98:ec:81:57:c6:78:28:f5:66:b2:b1:
                    fb:57:b8:4c:36:2b:1f:0a:71:ef:a2:8c:ad:51:be:
                    58:81:3d:70:33:31:f0:3b:e2:dc:e4:60:f1:4e:6c:
                    00:ea:3a:de:65:12:e4:44:01:57:f6:a9:24:d2:9a:
                    e0:34:11:b2:15:9b:ed:6b:70:74:27:79:89:7f:d6:
                    db:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:86:D8:92:5A:91:E5:75:24:17:49:12:17:AB:D2:18:9C:84:AF:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/9d79956b-2f09-31a1-9aaf-fa62de9fef1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl

            X509v3 Authority Key Identifier:
                keyid:7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.17.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:8e:7b:04:dd:5d:5f:07:0d:0e:78:61:f0:f4:66:89:ff:60:
         71:24:d5:f8:90:5a:e4:60:36:de:6a:09:d9:29:7b:07:c6:d7:
         17:e9:6f:7e:42:24:17:89:7a:d5:b6:6f:f5:67:7f:e4:93:ed:
         a7:b9:08:5e:6f:48:bf:af:09:df:c1:9a:01:32:f0:3b:82:c0:
         84:1a:9c:1f:3a:ad:0e:0c:f8:39:58:74:4b:34:d2:54:7d:6c:
         5c:75:03:d3:ab:09:8c:6d:52:c9:87:0c:17:ca:45:5a:b0:ae:
         82:7f:b9:a9:c9:5c:dd:1a:55:f0:6e:70:62:06:94:e1:fa:85:
         af:27:71:e8:8d:c4:40:45:9b:cd:3c:81:c4:42:bf:6e:bb:b4:
         e1:85:f1:a5:d6:bb:04:46:ba:0a:26:a9:a1:7c:8d:f8:b5:a6:
         e9:9e:96:52:33:eb:bd:e7:2f:0f:c9:75:4b:b9:37:06:41:b6:
         aa:33:0a:28:d6:fc:dd:8e:25:2c:00:98:49:c1:f2:b9:58:12:
         b8:a1:2d:11:0d:3c:19:c2:9f:24:97:c3:39:4a:da:4a:38:bd:
         b0:80:d8:f9:2c:32:dc:93:b4:a2:ad:4c:17:1d:68:4c:41:2e:
         73:85:d3:6a:ab:3f:e9:eb:ad:0c:e6:4f:94:26:59:0e:03:21:
         33:7e:66:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:29:19 2026 by rpki-client