Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/bcee3f9a-fb54-3888-bdbb-334b8f0d46a8.roa
File:                     bcee3f9a-fb54-3888-bdbb-334b8f0d46a8.roa (raw, json)
Hash identifier:          MnCpC4gq+ja3ScUWybzqwtdS4Hq1w+UTNnHel+mUU0Y=
Subject key identifier:   EA:A1:5F:DB:5C:C9:A4:A0:26:7C:75:FE:2A:77:DF:E0:C7:5C:B7:56
Certificate issuer:       /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Certificate serial:       010D0C9F4328584DADAAD65B2EA9A9F27E11A780
Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/bcee3f9a-fb54-3888-bdbb-334b8f0d46a8.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     14618
IP address blocks:        69.80.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:d6:5b:2e:a9:a9:f2:7e:11:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=b10b5cb7-8625-4f60-84d3-7a2c0340d5cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ca:d6:01:cd:c9:cd:33:b8:cd:ea:20:f6:61:
                    ef:9a:e0:35:e6:a9:fb:7e:2e:a6:9d:a6:db:e3:34:
                    3a:03:ca:03:94:63:9d:22:1a:bb:c3:e7:0f:dd:1c:
                    23:c3:02:b8:d0:ee:87:f5:a4:8f:a2:4c:86:d7:59:
                    a4:57:09:51:99:c7:17:36:c2:42:96:76:1b:76:5d:
                    0d:e2:09:f9:30:07:07:a3:e2:02:ae:eb:8b:b5:f0:
                    32:a2:6e:92:3b:f3:15:7d:33:81:15:15:f0:07:9e:
                    c6:b2:33:75:b8:3b:4f:fa:dc:98:cf:1a:db:64:71:
                    32:64:86:9c:9d:1c:96:9c:eb:fc:2e:93:a4:0a:66:
                    58:dc:7e:15:29:fc:7c:60:ba:79:6f:bd:e2:17:3e:
                    42:86:97:aa:98:c6:e4:ac:8e:39:d7:68:ee:e0:a6:
                    77:31:8e:8b:69:a7:0c:d8:b7:0e:76:81:be:a5:54:
                    57:e0:f6:05:18:ee:23:56:81:a8:dd:9b:61:43:e9:
                    18:66:03:17:49:dc:a1:16:06:af:81:4c:04:8a:75:
                    b4:02:55:0d:fa:d6:46:d0:6d:01:6f:84:9e:e0:c0:
                    15:4c:d3:47:40:16:dd:c6:26:ca:29:d8:5b:0e:73:
                    79:42:b0:4b:66:b4:2d:f9:cb:c4:40:ea:f2:3d:47:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A1:5F:DB:5C:C9:A4:A0:26:7C:75:FE:2A:77:DF:E0:C7:5C:B7:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/bcee3f9a-fb54-3888-bdbb-334b8f0d46a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl

            X509v3 Authority Key Identifier:
                keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.80.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:1c:bc:ad:b0:37:ff:71:a7:ee:52:7c:f8:be:25:d7:54:b4:
         1d:64:ea:97:8a:4a:69:c0:f1:de:f7:74:9c:ca:cb:14:cc:d7:
         49:40:a6:f7:95:57:4d:b4:eb:45:b2:cc:a2:22:46:c1:52:54:
         26:3f:ec:b2:98:28:b9:49:a7:c5:59:f4:e0:e5:bf:2b:a6:52:
         30:d9:df:9f:01:c7:6d:0b:eb:f3:20:b1:c0:35:52:84:81:28:
         01:31:dc:b3:ed:8c:2f:65:60:43:f2:aa:da:6b:ab:8c:b4:1c:
         aa:63:eb:66:91:ba:a9:c5:54:4c:cf:a5:09:b0:c1:8f:9c:a5:
         27:2f:d1:4c:6e:08:22:03:e7:a9:b4:b3:df:81:96:ed:86:1e:
         57:36:7a:a0:db:d8:9a:bc:6c:a1:47:da:6a:e2:96:20:eb:04:
         81:d6:e9:4a:a2:82:a7:1b:52:05:56:8f:87:16:f2:5f:1b:00:
         3e:98:ce:e1:5a:79:d9:27:73:34:ab:54:8d:71:95:93:4e:f4:
         f0:a4:80:40:c8:dd:1b:42:43:d8:8f:30:0c:ae:2c:e6:a6:1d:
         09:a7:1f:9a:9e:33:34:e2:ce:91:e1:5b:14:25:ce:56:43:2c:
         1d:df:74:db:5b:64:3d:34:8e:1e:bf:48:05:a0:8f:a8:dd:0f:
         aa:ba:fe:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:02:04 2026 by rpki-client