Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/bdc78d67-27a7-3f7e-ae1f-f0278af87586.roa
File:                     bdc78d67-27a7-3f7e-ae1f-f0278af87586.roa (raw, json)
Hash identifier:          8psVG1apGIxOUueVnAHw8j9ajBMAJkVy2b0hh8GBHtk=
Subject key identifier:   E2:1C:8C:D4:C7:6E:8D:52:DD:89:92:CF:C7:34:00:AE:25:89:1D:67
Certificate issuer:       /CN=3e43e154-e174-4a6b-a09a-e289bd92a034
Certificate serial:       010D0C9F4328584E86F50C0EC6E3305FACEECC80
Authority key identifier: 97:96:02:D9:DB:30:9E:19:CF:D3:9E:A5:42:80:AE:FE:8F:F9:9B:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/bdc78d67-27a7-3f7e-ae1f-f0278af87586.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     14872
IP address blocks:        69.67.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/3e43e154-e174-4a6b-a09a-e289bd92a034.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/3e43e154-e174-4a6b-a09a-e289bd92a034.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f5:0c:0e:c6:e3:30:5f:ac:ee:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e43e154-e174-4a6b-a09a-e289bd92a034
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=7459ed53-c42d-4578-984d-f2c83eb0e4e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c7:b2:5e:c3:61:b0:97:cb:e2:16:fb:2d:55:
                    44:ad:c6:66:39:f9:6a:f0:f0:12:fb:d1:ac:d7:87:
                    82:82:86:83:11:94:8d:b6:a4:a3:59:c9:d1:71:93:
                    d5:94:b8:0d:92:f6:af:1a:8b:e5:b0:d6:79:1b:e8:
                    ec:db:53:88:2f:dc:4d:6d:13:a7:12:06:c6:66:2a:
                    a0:9c:69:36:28:a2:9c:c4:9b:f6:fb:dd:aa:5f:6b:
                    02:a3:e6:90:80:55:82:5c:1e:68:dc:b9:54:13:c9:
                    c9:e3:cc:2b:1d:43:91:85:88:2d:1a:57:79:57:ab:
                    58:4c:56:74:ec:c4:b2:db:1f:10:fb:b6:af:41:b6:
                    3a:e8:f0:ee:4f:7f:1f:35:a1:ca:d7:26:86:aa:a7:
                    ef:65:f7:05:62:2a:b7:87:bb:bd:e2:2e:e2:d3:28:
                    9d:47:89:b0:cc:46:90:4c:e0:fd:73:25:06:1e:47:
                    77:5b:2e:d2:00:98:11:6f:e7:9d:04:32:a0:a0:7f:
                    c0:c4:c1:93:e0:25:3c:9e:8d:ee:7c:a1:1a:a3:af:
                    5d:14:e1:31:94:e4:5a:da:eb:ba:13:33:22:8c:2b:
                    06:a9:49:9a:07:23:1a:a2:e0:81:75:0d:cc:3f:3c:
                    a4:0b:30:c2:2f:6c:06:88:96:1b:4c:09:3d:82:22:
                    51:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1C:8C:D4:C7:6E:8D:52:DD:89:92:CF:C7:34:00:AE:25:89:1D:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/bdc78d67-27a7-3f7e-ae1f-f0278af87586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/3e43e154-e174-4a6b-a09a-e289bd92a034.crl

            X509v3 Authority Key Identifier:
                keyid:97:96:02:D9:DB:30:9E:19:CF:D3:9E:A5:42:80:AE:FE:8F:F9:9B:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.67.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:81:d4:a8:1e:77:11:45:24:3d:9f:b2:a2:97:1a:1c:f3:65:
         29:9f:e1:77:3c:3e:a7:34:eb:15:22:6c:a8:65:c3:8e:84:7b:
         a6:60:7d:9a:99:30:47:ac:46:30:eb:c9:46:e3:2d:54:cf:13:
         88:f5:6b:60:9c:35:bc:a2:f9:56:46:ab:e7:99:3d:3d:3d:d8:
         1a:05:b2:89:af:31:c1:5e:c2:04:f2:04:f5:ea:7b:f5:d4:e6:
         44:b9:c3:04:b5:72:32:40:ea:0b:59:13:4b:08:fe:53:f2:90:
         cf:a8:aa:21:9e:08:95:92:6f:68:82:7f:9b:62:37:72:c9:c2:
         d2:6d:d7:14:80:5a:5e:a1:ee:37:8a:eb:68:11:7e:87:e9:d9:
         ed:ab:90:19:67:3e:ad:ca:0a:a3:38:73:d8:70:31:c3:e5:09:
         f4:02:be:c7:74:06:3b:21:54:19:93:1d:81:c9:be:a0:1d:46:
         bc:fb:a7:f1:ab:0f:fe:60:53:64:c0:e6:45:78:23:b7:f6:65:
         c0:ba:57:1e:91:e7:00:e2:4c:f8:b8:e1:29:a7:d4:fb:4c:60:
         93:19:de:e2:9f:e1:8b:09:11:6b:98:1b:c5:8f:86:be:1b:06:
         d4:9d:75:a8:2a:23:24:d1:ce:dd:91:8d:25:cc:0d:65:37:7d:
         c1:f4:2a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:04:15 2026 by rpki-client