Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/bc0a08e4-1fdd-36f3-aa49-99dd057cae71.roa
File:                     bc0a08e4-1fdd-36f3-aa49-99dd057cae71.roa (raw, json)
Hash identifier:          X8KXpW9TF7F4BfCcBCJZ9FeuCVedYPr7Dps88ttDt9E=
Subject key identifier:   47:34:16:70:4F:E7:04:AE:E5:91:D3:8C:56:E2:F7:DE:3B:A1:82:4D
Certificate issuer:       /CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
Certificate serial:       010D0C9F4328584D15A26E2F0ADD845E850F3580
Authority key identifier: 7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/bc0a08e4-1fdd-36f3-aa49-99dd057cae71.roa
Signing time:             Sat 07 Mar 2026 02:00:32 +0000
ROA not before:           Sat 07 Mar 2026 02:00:32 +0000
ROA not after:            Fri 05 Jun 2026 01:00:32 +0000
asID:                     63201
IP address blocks:        213.159.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:a2:6e:2f:0a:dd:84:5e:85:0f:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
        Validity
            Not Before: Mar  7 02:00:32 2026 GMT
            Not After : Jun  5 01:00:32 2026 GMT
        Subject: CN=bcd985be-2085-4dbf-816d-cccdaea20765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3a:74:94:16:59:c8:da:4b:84:b0:b4:e3:c1:
                    f6:8f:ac:66:00:67:d2:4e:c0:ac:f6:9e:4f:61:2a:
                    ff:96:be:d4:f2:42:96:98:70:a4:dd:1f:34:37:7c:
                    a7:db:15:6f:15:bb:62:e9:79:b6:53:14:87:98:4c:
                    b4:c3:fa:70:00:60:9c:8e:61:c2:83:8e:42:ef:10:
                    32:c4:5c:65:5f:f4:f0:41:a6:fa:aa:01:c1:b2:2e:
                    c7:2e:65:84:a4:0e:57:6a:fd:8b:2f:27:d9:ce:6d:
                    45:5e:2e:cb:7d:4c:20:27:29:74:87:47:a7:91:c1:
                    2d:82:e8:16:67:a5:25:1c:c9:31:a1:62:5c:3c:15:
                    ed:71:e7:47:19:a5:79:20:56:26:31:e0:10:ad:4b:
                    4b:ae:aa:77:b3:88:5c:7e:47:5d:b2:d1:14:c9:d7:
                    f1:c1:c4:59:27:fe:48:27:68:54:b4:2a:96:18:d8:
                    3e:0c:1b:f1:c4:5e:c4:75:ce:9e:3c:92:98:ea:15:
                    13:15:85:82:eb:ad:e8:f1:95:3a:44:91:d9:39:84:
                    c2:24:ec:59:43:57:f5:27:77:59:5d:38:e2:78:3a:
                    8c:4b:e8:22:1f:fa:52:10:f0:45:fc:e7:a2:3e:46:
                    20:b6:18:c8:ae:b6:86:8f:a4:87:c7:81:0a:85:98:
                    b2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:34:16:70:4F:E7:04:AE:E5:91:D3:8C:56:E2:F7:DE:3B:A1:82:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/bc0a08e4-1fdd-36f3-aa49-99dd057cae71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl

            X509v3 Authority Key Identifier:
                keyid:7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.159.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:36:3c:d1:f9:7e:47:81:7a:19:73:ff:4f:e3:e5:ee:85:7c:
         2c:e8:2a:65:00:1b:4b:22:da:3f:74:68:7c:83:80:d0:5a:ec:
         e9:e0:f8:a9:5d:80:cf:f9:39:4c:6e:dc:89:88:58:43:12:5c:
         d5:1c:89:af:7c:05:7b:6b:0a:8a:d1:8d:6a:39:74:af:f5:40:
         5b:8e:a1:41:c1:c4:5f:de:bf:23:9a:e0:e7:97:32:ac:20:26:
         e1:9e:00:65:24:1e:5b:03:50:33:b6:4a:9d:46:fa:f8:b8:4a:
         a0:f8:d1:3c:bc:6f:59:0d:65:c3:cb:5d:62:e2:c3:94:02:e7:
         05:e0:b6:87:4d:8d:21:49:d7:65:db:50:1f:a3:e6:fe:4d:76:
         12:ba:b0:e5:cd:0a:55:31:3a:7e:bb:09:ab:7d:3b:e2:38:fd:
         b6:c7:b9:88:13:65:09:1c:73:4c:35:df:30:b7:1c:6a:02:a8:
         ba:d2:36:3b:30:7f:da:c7:77:10:84:96:74:f7:35:52:78:35:
         de:32:1b:03:04:2b:06:31:c2:89:2e:04:cd:3e:31:4d:67:fb:
         c0:d5:95:be:c5:d5:1c:a3:e5:b2:07:56:6e:a6:bb:f1:44:b6:
         8d:a4:3d:1a:2e:7e:62:07:02:44:8e:ec:8b:eb:cf:7f:11:3d:
         5f:1f:65:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:37 2026 by rpki-client