Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/11059267-bb4b-4d4a-b948-7f3b41b6b702/bf49d202-0e97-382d-bffb-1342fd87b3ec.roa
File:                     bf49d202-0e97-382d-bffb-1342fd87b3ec.roa (raw, json)
Hash identifier:          1Ere15JG6om4J4jgv/Cr+qLPtw9n+xSPoWv2tIXuGdw=
Subject key identifier:   0E:B7:37:44:09:5D:2C:5F:C7:47:A2:84:BB:4E:7A:DD:B0:1C:D3:F2
Certificate issuer:       /CN=11059267-bb4b-4d4a-b948-7f3b41b6b702
Certificate serial:       010D0C9F4328584F43DD78C187549F103F56AD40
Authority key identifier: E6:67:35:61:53:E6:4B:C0:04:DB:69:41:E6:4C:50:9D:73:DB:7D:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/11059267-bb4b-4d4a-b948-7f3b41b6b702.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/11059267-bb4b-4d4a-b948-7f3b41b6b702/bf49d202-0e97-382d-bffb-1342fd87b3ec.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     213954
IP address blocks:        216.40.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/11059267-bb4b-4d4a-b948-7f3b41b6b702/11059267-bb4b-4d4a-b948-7f3b41b6b702.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/11059267-bb4b-4d4a-b948-7f3b41b6b702/11059267-bb4b-4d4a-b948-7f3b41b6b702.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/11059267-bb4b-4d4a-b948-7f3b41b6b702.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:78:c1:87:54:9f:10:3f:56:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11059267-bb4b-4d4a-b948-7f3b41b6b702
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=179c41fb-9c53-4c05-b250-9952050e4606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7d:a5:53:f2:ad:16:10:4b:a5:a7:92:b6:9b:
                    1e:44:53:dc:04:3b:83:80:b5:b3:d7:ff:8c:87:6e:
                    01:88:55:a6:7c:b9:dd:50:f4:17:d5:07:16:85:7f:
                    ad:d0:df:20:bb:98:ab:20:43:64:d0:31:58:88:32:
                    0b:23:94:d8:87:49:28:6e:98:fa:2e:86:ae:f7:6b:
                    f4:cb:7b:93:00:a3:50:41:c6:2f:4e:0a:f6:7c:bc:
                    58:e6:a9:53:98:d3:67:9a:06:52:81:18:11:3e:d8:
                    ff:df:00:a8:4e:86:30:02:b7:63:da:50:cd:36:de:
                    bd:c6:34:3f:8d:62:a6:5b:a0:20:c4:7c:aa:c8:f9:
                    18:c8:77:1f:4c:3c:0f:c0:46:0e:de:bf:25:8d:12:
                    aa:de:2e:1e:e8:05:a1:70:ae:c5:fa:8f:10:52:2e:
                    ae:95:0b:b8:2a:be:1a:a4:86:f6:99:72:82:63:9f:
                    d7:4d:3c:85:11:e1:8a:ca:00:15:0c:60:4e:fe:90:
                    e6:01:40:70:14:d3:2f:d6:47:44:18:42:52:36:cc:
                    b9:08:c5:a0:5f:2a:71:21:af:2f:fe:f4:3f:e4:36:
                    88:d7:98:36:37:30:4e:d7:65:fd:af:70:2e:11:be:
                    fd:ac:3b:53:7d:bd:aa:00:d4:f7:a9:83:4e:79:33:
                    2d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B7:37:44:09:5D:2C:5F:C7:47:A2:84:BB:4E:7A:DD:B0:1C:D3:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/11059267-bb4b-4d4a-b948-7f3b41b6b702/bf49d202-0e97-382d-bffb-1342fd87b3ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/11059267-bb4b-4d4a-b948-7f3b41b6b702/11059267-bb4b-4d4a-b948-7f3b41b6b702.crl

            X509v3 Authority Key Identifier:
                keyid:E6:67:35:61:53:E6:4B:C0:04:DB:69:41:E6:4C:50:9D:73:DB:7D:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/11059267-bb4b-4d4a-b948-7f3b41b6b702.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.40.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:c0:16:c7:d2:f5:8d:4f:bc:0d:e7:10:4f:4a:69:2f:1a:52:
         9c:1e:03:c6:db:73:d8:41:7f:c0:d8:7d:f2:36:af:90:ac:03:
         3a:f9:79:00:c2:b3:2d:e4:87:79:ff:54:69:f8:12:11:d5:45:
         88:53:cb:7d:1a:cd:f4:8a:9c:f5:fd:10:d6:d1:2e:0c:cd:16:
         44:79:fe:6a:a8:be:dc:12:67:8a:25:ed:d5:4d:cb:dd:3f:de:
         89:04:be:d9:2a:d8:6e:53:a3:d4:f9:c7:ea:5a:a5:78:15:6d:
         13:02:ed:37:c9:fb:a1:9a:b9:0b:97:1e:f3:8d:14:2d:70:16:
         20:ef:4d:17:4e:56:d1:39:50:e3:59:bf:1d:61:e0:d6:33:97:
         c8:36:77:97:89:65:3e:d3:5c:ea:c8:9a:71:55:0d:86:69:e8:
         31:cf:08:77:0d:35:9f:db:d8:10:08:09:2b:d6:f8:a7:51:94:
         94:5a:22:33:68:d3:25:81:00:ae:c5:db:34:82:20:2a:14:37:
         00:93:f4:9d:e1:85:eb:cf:1a:c2:be:eb:9f:13:b4:16:0f:27:
         b8:23:b6:54:90:53:e0:c7:de:1f:77:4c:71:3d:04:5f:05:66:
         b0:0d:e4:34:26:f1:5b:81:fd:f3:16:07:b3:bb:50:ee:00:b2:
         b5:b0:10:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:32:44 2026 by rpki-client