Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/02c12ca8-25b3-31de-a2a1-2d44c982ff9c.roa
File:                     02c12ca8-25b3-31de-a2a1-2d44c982ff9c.roa (raw, json)
Hash identifier:          YTcQtlQuvPXC77FeZzQq+RNLW27uwGjx3Oiy0KVN3Fw=
Subject key identifier:   03:70:7D:29:3A:A7:86:A0:0C:92:33:27:86:D9:73:C5:A8:E7:C5:AA
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F4328584F4976C5DA5FDDE708D8FD7400
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/02c12ca8-25b3-31de-a2a1-2d44c982ff9c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     46450
IP address blocks:        216.158.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:c5:da:5f:dd:e7:08:d8:fd:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=33641c2f-be40-476a-a0d6-0dd3652d57b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:96:73:7c:c6:38:5e:32:be:08:74:7c:8a:b1:
                    d4:2b:1e:99:60:98:47:b5:7a:ad:43:4b:10:e3:13:
                    17:2d:26:59:f5:71:f1:6a:5f:72:9a:37:c5:69:72:
                    b4:c0:62:66:b7:57:7c:6e:4f:59:d2:8c:7f:d0:4a:
                    3e:92:92:66:43:ee:03:b4:db:1d:cb:a1:8a:2e:21:
                    38:b9:53:7b:12:e9:df:3f:5c:83:c8:72:8d:ce:01:
                    db:2e:6a:22:87:31:e4:74:0d:58:1c:ee:de:b3:2b:
                    41:6d:af:5b:1a:3f:a4:22:58:6d:71:97:33:e9:6c:
                    4d:7c:be:51:5a:c2:15:a5:84:55:07:09:6e:ac:4b:
                    a5:cb:1a:b5:e0:e9:00:7d:71:f8:09:90:e0:16:41:
                    eb:99:b7:b2:97:d8:af:52:4d:a7:88:79:73:14:98:
                    ea:35:ac:be:99:31:6f:67:68:20:bc:a3:f3:db:f7:
                    e9:b9:f8:8b:95:3c:06:13:94:7c:30:9d:4b:3c:e5:
                    6f:4c:70:ce:69:15:bb:51:f8:ce:80:2d:f1:86:98:
                    be:7e:e2:d8:6e:b0:f8:9f:bb:cb:62:78:c4:d0:21:
                    c3:6e:3f:cf:9a:a8:c1:f3:2f:2c:b3:12:e6:1b:5a:
                    27:4f:71:7a:aa:21:5e:8a:3a:4d:7f:db:5c:c3:ad:
                    93:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:70:7D:29:3A:A7:86:A0:0C:92:33:27:86:D9:73:C5:A8:E7:C5:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/02c12ca8-25b3-31de-a2a1-2d44c982ff9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.158.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:1b:c6:87:c8:fe:86:6f:c9:43:7e:eb:53:e5:3c:4d:db:91:
         46:f6:07:66:fb:cf:46:9a:c3:c1:df:0a:ba:91:df:7a:72:93:
         22:81:0c:88:e6:b8:7c:68:fd:a3:59:7f:7b:18:c5:c8:c2:c3:
         13:ce:37:07:6e:a1:7d:e0:88:3c:5f:87:90:81:71:39:f0:e0:
         a6:9b:0f:63:eb:a6:24:83:4b:15:2d:3f:9a:4a:76:31:ff:00:
         29:28:58:dc:a9:5b:0f:1c:fa:7d:7f:81:9b:a6:fa:e2:b2:73:
         86:2b:1b:4a:b7:a3:65:8e:98:51:93:01:dd:53:67:9a:eb:10:
         71:ad:16:22:c3:cc:cb:27:44:a3:d2:10:0a:61:bb:d7:67:c2:
         f6:41:c4:6b:86:32:f4:c5:1f:5e:d1:63:a6:42:0a:51:d5:87:
         b5:6b:40:64:b7:d3:f4:ca:68:b5:17:41:c3:c2:83:07:0a:52:
         0c:91:b2:4f:76:ae:6d:0a:bd:af:73:28:18:fc:7e:ef:35:d8:
         32:e2:96:fb:4f:af:84:e2:14:ed:e9:18:34:d5:63:0a:e5:97:
         9f:6e:a8:4e:8e:2c:7e:b2:35:e0:08:0d:c6:a0:2b:fb:14:00:
         0e:78:9b:60:df:c7:80:74:7b:36:db:de:73:0e:54:3f:1a:24:
         4f:e7:db:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:08:02 2026 by rpki-client