Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/bff72a2e-13a9-31ab-bb47-124e89b56abc.roa
File:                     bff72a2e-13a9-31ab-bb47-124e89b56abc.roa (raw, json)
Hash identifier:          kmcpSC4BlC25DZSdoRwte9zWpqhBKpjErDrYCmjXOh4=
Subject key identifier:   DD:D2:E7:7E:27:4A:54:B0:E1:2F:79:61:0B:B0:EC:81:FA:23:A9:A7
Certificate issuer:       /CN=8b860252-78e2-47ac-a6f1-f1dc5a900776
Certificate serial:       010D0C9F4328584E8DEF9CE0DA0F8804F9FA9200
Authority key identifier: 7F:81:D2:90:2A:22:41:3D:B7:67:62:4A:E2:47:51:3B:D7:0F:7B:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/bff72a2e-13a9-31ab-bb47-124e89b56abc.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     20099
IP address blocks:        192.44.70.0/24 maxlen: 24
                          2620:89:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:9c:e0:da:0f:88:04:f9:fa:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b860252-78e2-47ac-a6f1-f1dc5a900776
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=7e4eca2f-c2a3-4689-951c-8d116d0505d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5c:55:bc:65:a4:6f:a3:47:12:a3:c2:ae:72:
                    75:16:9a:05:68:87:f1:77:67:03:9e:47:9d:64:d8:
                    ad:49:b7:7e:53:77:df:f7:91:fb:3e:1f:67:5f:e8:
                    97:d8:43:db:85:c3:5f:af:b5:f2:c3:c4:58:16:66:
                    b4:9a:6a:f7:18:cc:45:c2:60:67:d2:be:e8:e0:6e:
                    73:79:e1:f6:55:fa:d7:a2:c9:5d:10:b0:43:a7:0e:
                    88:de:d6:3c:b1:29:18:69:0f:47:ce:16:0b:a0:ae:
                    67:a2:44:3d:7d:0a:d9:e0:44:b3:49:cf:ee:54:b3:
                    c2:ca:41:34:2a:11:77:72:8b:04:f3:0c:b2:cf:5d:
                    51:aa:56:b2:eb:d0:0d:ae:cf:06:3d:d6:c1:d2:83:
                    ca:bb:a3:7b:78:6d:dc:a2:27:b6:ac:71:39:a0:9e:
                    4a:9d:44:9e:0a:7f:27:72:25:46:f8:c3:88:02:ab:
                    10:55:b2:c5:80:f7:4f:e6:cb:21:96:bd:9e:6e:4e:
                    d3:20:4a:c9:51:e5:a7:db:06:7c:c3:a4:8a:05:47:
                    e5:73:e4:74:71:d5:f8:7a:54:87:00:6e:1d:b5:2e:
                    1f:60:f7:a9:c7:3a:59:80:47:7d:a5:10:a5:b1:44:
                    ca:e6:ae:b1:71:96:81:47:c8:67:df:3f:7f:a9:f6:
                    f7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D2:E7:7E:27:4A:54:B0:E1:2F:79:61:0B:B0:EC:81:FA:23:A9:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/bff72a2e-13a9-31ab-bb47-124e89b56abc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.crl

            X509v3 Authority Key Identifier:
                keyid:7F:81:D2:90:2A:22:41:3D:B7:67:62:4A:E2:47:51:3B:D7:0F:7B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.44.70.0/24
                IPv6:
                  2620:89:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:75:cd:98:f2:ac:ee:dc:dd:71:d3:2a:fb:2e:0d:9e:5b:a4:
         96:05:58:58:6b:2e:bd:38:44:fb:86:0e:10:5b:4b:c3:90:09:
         6d:4c:cd:9f:08:ba:42:4a:38:0a:4e:e5:44:e2:d4:20:5d:71:
         a8:e7:6a:a0:39:7a:a1:21:2c:d2:a8:6f:73:e4:b0:33:49:da:
         02:81:55:c6:7e:2c:fd:ea:1b:24:18:c0:0c:87:46:a2:a4:79:
         25:be:74:8a:55:83:2c:e9:21:a6:79:ce:92:7e:fe:28:d3:59:
         7b:a7:9e:2b:23:53:9d:3c:06:d7:e9:92:d5:e3:31:5d:46:af:
         f9:03:c0:ec:70:20:53:87:32:a5:65:9a:22:55:70:23:30:90:
         61:4c:32:a7:3f:12:3b:38:57:06:9e:b0:d3:a3:9d:7c:39:4e:
         63:f6:95:91:85:55:9f:d0:4a:02:2d:3b:21:22:38:92:31:59:
         6d:62:5c:3e:31:39:a9:07:0a:55:ff:62:ef:12:88:84:f2:9a:
         39:7b:4f:0c:9b:36:6d:cb:21:53:c1:1b:5e:07:92:5e:48:34:
         a6:7c:44:4d:49:38:14:49:2b:3f:a8:73:7a:63:35:ba:95:40:
         c2:0a:62:0c:52:e7:ff:3b:8d:88:35:cc:9e:86:89:82:d7:aa:
         87:99:20:d2
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE6N75zg2g+IBPn6kgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI4NjAyNTItNzhlMi00N2FjLWE2ZjEtZjFkYzVhOTAw
Nzc2MB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk
N2U0ZWNhMmYtYzJhMy00Njg5LTk1MWMtOGQxMTZkMDUwNWQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilxVvGWkb6NHEqPCrnJ1FpoFaIfxd2cDnked
ZNitSbd+U3ff95H7Ph9nX+iX2EPbhcNfr7Xyw8RYFma0mmr3GMxFwmBn0r7o4G5z
eeH2VfrXosldELBDpw6I3tY8sSkYaQ9HzhYLoK5nokQ9fQrZ4ESzSc/uVLPCykE0
KhF3cosE8wyyz11Rqlay69ANrs8GPdbB0oPKu6N7eG3coie2rHE5oJ5KnUSeCn8n
ciVG+MOIAqsQVbLFgPdP5sshlr2ebk7TIErJUeWn2wZ8w6SKBUflc+R0cdX4elSH
AG4dtS4fYPepxzpZgEd9pRClsUTK5q6xcZaBR8hn3z9/qfb3WQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFN3S534nSlSw4S95YQuw7IH6I6mnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84Yjg2
MDI1Mi03OGUyLTQ3YWMtYTZmMS1mMWRjNWE5MDA3NzYvYmZmNzJhMmUtMTNhOS0z
MWFiLWJiNDctMTI0ZTg5YjU2YWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGI4NjAyNTItNzhlMi00N2FjLWE2
ZjEtZjFkYzVhOTAwNzc2LzhiODYwMjUyLTc4ZTItNDdhYy1hNmYxLWYxZGM1YTkw
MDc3Ni5jcmwwHwYDVR0jBBgwFoAUf4HSkCoiQT23Z2JK4kdRO9cPe3cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84Yjg2MDI1Mi03OGUyLTQ3YWMtYTZmMS1mMWRj
NWE5MDA3NzYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwCxGMA8E
AgACMAkDBwAmIACJwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfHXNmPKs7tzdcdMq+y4NnluklgVYWGsu
vThE+4YOEFtLw5AJbUzNnwi6Qko4Ck7lROLUIF1xqOdqoDl6oSEs0qhvc+SwM0na
AoFVxn4s/eobJBjADIdGoqR5Jb50ilWDLOkhpnnOkn7+KNNZe6eeKyNTnTwG1+mS
1eMxXUav+QPA7HAgU4cypWWaIlVwIzCQYUwypz8SOzhXBp6w06OdfDlOY/aVkYVV
n9BKAi07ISI4kjFZbWJcPjE5qQcKVf9i7xKIhPKaOXtPDJs2bcshU8EbXgeSXkg0
pnxETUk4FEkrP6hzemM1upVAwgpiDFLn/zuNiDXMnoaJgteqh5kg0g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:50:11 2026 by rpki-client