Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/bc90a123-68b1-322a-9457-bc94097ef1ea.roa
File:                     bc90a123-68b1-322a-9457-bc94097ef1ea.roa (raw, json)
Hash identifier:          mmhx2vhjUmLh+cmqaHSmVgI6qs/k+zn5jepmGrbD0qo=
Subject key identifier:   79:FC:46:DD:A1:20:E7:F9:7B:6E:3A:23:6C:67:14:19:60:83:64:96
Certificate issuer:       /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial:       010D0C9F4328584D8AC547FFBB35AA0F10CFD480
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/bc90a123-68b1-322a-9457-bc94097ef1ea.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        198.29.16.0/22 maxlen: 24
                          198.29.22.0/24 maxlen: 24
                          198.29.23.0/24 maxlen: 24
                          198.29.24.0/24 maxlen: 24
                          198.29.25.0/24 maxlen: 24
                          198.29.26.0/24 maxlen: 24
                          2602:f9e7:20::/45 maxlen: 48
                          2602:f9e7:28::/46 maxlen: 48
                          2602:f9e7:2c::/46 maxlen: 48
                          2602:f9e7:40::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:47:ff:bb:35:aa:0f:10:cf:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=7109aada-1b9e-4692-95d0-dbbe6e96ac1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8b:b2:8e:48:9a:3f:2a:69:df:42:18:f2:fd:
                    f5:b0:f5:18:c5:6d:d7:12:1b:51:2d:3a:07:a2:1d:
                    f2:47:44:85:95:e8:46:0a:2d:1d:22:42:7e:c2:fe:
                    37:82:fb:95:59:98:56:ec:be:ef:60:be:eb:9f:06:
                    92:ff:7d:0b:04:73:53:15:a4:0d:9c:1f:74:d3:25:
                    45:d2:b9:41:18:a0:a6:51:3f:13:5c:d2:c1:a9:ad:
                    8b:49:1e:ce:a0:0a:52:0a:cd:02:0b:f6:57:87:ac:
                    1d:ee:72:ea:a4:96:13:2d:07:a2:ca:93:d4:1a:96:
                    4b:fa:04:81:38:83:29:27:d5:f2:ba:23:0b:01:85:
                    cf:cd:fd:50:ae:29:89:5c:4f:24:71:1f:04:95:10:
                    97:19:e9:97:0c:ba:32:06:8e:07:c4:8d:00:c3:6a:
                    47:60:5a:69:b8:81:10:d6:80:cf:c1:c3:e0:54:36:
                    aa:f9:0b:cc:93:1f:dc:a1:85:e0:c4:d3:15:09:b1:
                    f3:ef:be:b1:2d:ef:f4:8f:36:67:a9:91:d6:6b:ef:
                    1d:75:c9:c9:04:4b:5e:49:7c:78:f8:fd:bd:45:fe:
                    37:ed:2e:28:73:6b:d4:21:86:89:ed:2b:77:e6:b0:
                    d7:11:bc:da:80:c2:94:f7:b0:7f:47:7b:cb:0a:c3:
                    7a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FC:46:DD:A1:20:E7:F9:7B:6E:3A:23:6C:67:14:19:60:83:64:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/bc90a123-68b1-322a-9457-bc94097ef1ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl

            X509v3 Authority Key Identifier:
                keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.29.16.0/22
                  198.29.22.0-198.29.26.255
                IPv6:
                  2602:f9e7:20::/44
                  2602:f9e7:40::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:18:db:ab:7c:85:f1:0a:14:9e:1e:b7:f4:1a:1e:53:88:3a:
         26:d6:80:5b:33:02:88:94:40:56:b9:3e:c9:6b:dc:a6:0d:9c:
         3c:78:36:fe:67:4f:31:2f:93:7e:68:6f:8c:ba:0d:8d:47:d7:
         56:dd:b3:6a:87:f5:b7:c4:e7:98:52:43:76:8f:a7:a0:d2:ef:
         f6:98:bc:1a:41:30:06:b2:5f:ac:16:0c:36:bb:de:cc:1b:f2:
         ba:da:21:c0:2f:bd:2e:1c:99:be:41:fc:65:17:a9:ee:7d:fc:
         cb:0b:27:b5:be:cc:5f:90:da:64:b3:35:9c:58:09:0f:16:31:
         60:88:4a:8a:39:44:21:ad:b0:14:0a:3c:94:f9:33:e2:b0:b5:
         a3:49:06:9c:8a:3c:e9:eb:f0:5c:bd:c3:cb:d7:0a:33:34:2a:
         0c:d0:9e:2a:23:4b:81:97:ff:7d:e3:b5:f3:d3:60:39:76:63:
         5f:d2:4f:c4:39:47:b2:68:10:5a:29:09:04:b8:52:a4:06:f4:
         e1:2e:43:f6:5e:e5:ca:4b:0a:72:d4:b1:7f:30:9d:1b:e1:4a:
         fb:3b:5b:d8:97:79:84:0f:2f:98:00:81:77:41:77:49:e0:f6:
         a1:cc:86:2d:2d:6d:15:3b:56:e6:ed:16:fd:4b:19:e5:89:0b:
         8d:d1:71:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:12:53 2026 by rpki-client