Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/bc7894b0-13bb-3996-a597-d19d7ca6829d.roa
File:                     bc7894b0-13bb-3996-a597-d19d7ca6829d.roa (raw, json)
Hash identifier:          LGa/WiheThyOYebfUHNN6cOi0GfaD5FTKWI6Zw2SQbs=
Subject key identifier:   28:9F:49:70:B1:8B:55:2E:05:9D:B1:BB:70:CB:F2:55:BB:B6:7D:21
Certificate issuer:       /CN=a9d7f902-cc00-4175-951a-fe3a50c0ceab
Certificate serial:       010D0C9F4328584E534F3B6DF59444ED4854C100
Authority key identifier: 1D:73:A1:35:22:04:D1:AE:15:99:37:C8:C5:00:CA:79:91:AC:3B:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/bc7894b0-13bb-3996-a597-d19d7ca6829d.roa
Signing time:             Sun 28 Jun 2026 21:00:11 +0000
ROA not before:           Sun 28 Jun 2026 21:00:11 +0000
ROA not after:            Sat 26 Sep 2026 21:00:11 +0000
asID:                     397978
IP address blocks:        216.234.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/a9d7f902-cc00-4175-951a-fe3a50c0ceab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/a9d7f902-cc00-4175-951a-fe3a50c0ceab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:53:4f:3b:6d:f5:94:44:ed:48:54:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d7f902-cc00-4175-951a-fe3a50c0ceab
        Validity
            Not Before: Jun 28 21:00:11 2026 GMT
            Not After : Sep 26 21:00:11 2026 GMT
        Subject: CN=f70c9c02-5d43-42f9-81d7-47e56a568d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0e:bb:ad:e4:0a:83:ef:5c:70:b3:fe:0f:e1:
                    7f:70:cc:6c:99:22:b9:b5:cc:db:af:11:cb:36:cb:
                    e7:7c:16:75:1b:26:a2:a3:46:bf:6a:4b:d3:77:95:
                    f5:ce:60:2a:78:17:10:28:8d:1a:c4:6f:25:a4:71:
                    a2:93:4d:b9:8e:d5:92:11:06:3c:cf:03:f6:29:3a:
                    d6:6f:6a:ac:28:8c:f0:58:0e:45:96:f1:b1:e1:ea:
                    19:f8:4f:5d:08:90:ed:63:6f:ec:11:d4:cc:7b:2d:
                    0c:b4:1e:c9:7e:61:78:bb:ef:e3:38:f6:0f:b5:c2:
                    09:c3:51:a9:32:6f:8f:77:02:38:4c:9f:94:ca:8a:
                    bb:1e:1d:02:e7:40:7b:1a:5c:97:89:80:a3:f6:f4:
                    e4:c5:cc:d9:20:40:69:c2:5e:89:ef:c8:b4:58:67:
                    d0:a4:0a:3e:d8:d1:67:cf:5b:13:18:eb:ff:76:74:
                    00:88:36:fd:84:53:9c:fc:02:06:be:b7:5e:01:f0:
                    fc:49:e0:35:d3:85:b6:6b:81:b7:54:15:3d:f8:fc:
                    d8:55:b4:22:fc:14:94:8b:fb:2f:b8:d1:2c:11:ba:
                    aa:6c:77:4a:06:71:2d:50:70:54:58:69:7f:d2:c6:
                    ec:f5:04:bd:e7:a7:bf:c5:d7:4d:19:d0:10:9a:1a:
                    54:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9F:49:70:B1:8B:55:2E:05:9D:B1:BB:70:CB:F2:55:BB:B6:7D:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/bc7894b0-13bb-3996-a597-d19d7ca6829d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/a9d7f902-cc00-4175-951a-fe3a50c0ceab.crl

            X509v3 Authority Key Identifier:
                keyid:1D:73:A1:35:22:04:D1:AE:15:99:37:C8:C5:00:CA:79:91:AC:3B:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:1d:a1:24:2c:14:0c:59:de:d6:f4:22:c2:c6:43:97:38:a1:
         43:42:e1:51:6d:d3:44:5e:42:01:56:dc:fc:65:f0:45:e1:79:
         07:b0:df:fe:30:e8:20:ba:17:46:3e:55:7f:dc:f6:b8:9a:bb:
         3e:93:37:4d:67:33:39:67:46:dd:ed:6a:70:3a:b4:2d:62:70:
         15:9c:4b:07:0e:07:fc:17:18:76:46:ba:a7:25:29:cc:d6:bc:
         b5:52:74:1f:e0:58:be:6a:7b:ad:94:66:49:5b:b3:4c:5e:ce:
         a8:b3:1c:a8:a5:d5:ff:90:1d:07:5d:2e:bb:d1:a4:fd:3e:10:
         9f:5a:11:a1:76:7c:3c:f6:dd:0c:d0:48:b8:42:94:73:2b:e5:
         15:6c:66:96:ec:c6:ca:cc:61:c7:d6:d9:96:93:46:69:74:67:
         a9:b3:fb:8d:f6:cb:54:3b:ae:60:39:5e:3a:81:a0:47:7d:9c:
         97:ea:0a:8c:9f:fb:ac:6b:8e:a1:47:8e:5e:e2:95:e7:39:6f:
         10:d5:9b:74:60:1c:9c:30:dc:65:d3:ae:9f:01:3f:67:ce:18:
         f8:54:28:99:9e:c3:fb:d7:a9:57:c5:c8:90:99:df:56:52:0b:
         0d:5a:23:fa:6a:e2:53:a6:b2:ff:3c:7c:40:85:34:c2:74:d4:
         e8:4e:2d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:48:56 2026 by rpki-client