Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/24597156-139e-456b-b7b5-78502f61a0ca/bcc2a6ca-657c-364b-b65a-dc54978b018c.roa
File:                     bcc2a6ca-657c-364b-b65a-dc54978b018c.roa (raw, json)
Hash identifier:          //TBEH+w9GI7q0OlMeEGat9pnZi7mAF3ELxdGM/D7Xk=
Subject key identifier:   77:EB:CC:C1:0A:A4:A7:DF:C7:C7:C4:EC:46:B9:6C:60:25:21:3D:89
Certificate issuer:       /CN=24597156-139e-456b-b7b5-78502f61a0ca
Certificate serial:       010D0C9F4328584CC611F6DB4EF726F92D54C680
Authority key identifier: E1:2F:81:3A:39:44:92:EA:C1:93:2D:14:88:3B:97:E2:30:23:AD:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/24597156-139e-456b-b7b5-78502f61a0ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/24597156-139e-456b-b7b5-78502f61a0ca/bcc2a6ca-657c-364b-b65a-dc54978b018c.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     1002
IP address blocks:        207.174.40.0/24 maxlen: 24
                          207.174.41.0/24 maxlen: 24
                          207.174.42.0/24 maxlen: 24
                          207.174.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/24597156-139e-456b-b7b5-78502f61a0ca/24597156-139e-456b-b7b5-78502f61a0ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/24597156-139e-456b-b7b5-78502f61a0ca/24597156-139e-456b-b7b5-78502f61a0ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/24597156-139e-456b-b7b5-78502f61a0ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:f6:db:4e:f7:26:f9:2d:54:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24597156-139e-456b-b7b5-78502f61a0ca
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=944c76ec-70b5-4c3a-bc8d-a5507a4dadf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:15:1e:b3:72:12:84:71:5c:f3:8a:f6:88:bb:
                    f0:1a:b3:c7:ca:03:58:4f:8d:4d:94:f2:cc:ed:38:
                    74:4a:96:e4:c6:ac:c5:89:b2:3f:eb:35:a1:bd:0d:
                    b7:68:10:cc:26:4f:e4:1b:b6:67:5f:b8:19:13:dc:
                    8e:58:0c:8a:00:36:be:d0:11:1a:8b:3a:c2:eb:a1:
                    02:68:17:c3:f2:f3:3b:c4:aa:45:55:0e:8d:bb:ca:
                    58:66:71:8c:01:54:ca:38:79:8c:06:0d:5d:2d:1c:
                    0a:59:4a:b6:4d:52:17:23:cf:3a:88:24:fa:ad:7a:
                    90:3f:42:d7:c1:6f:87:da:5f:c8:cd:d6:bf:f4:2a:
                    77:d5:a6:4b:98:e2:8f:e2:e0:d3:1a:45:95:7e:86:
                    30:e2:8a:84:1c:38:0c:d0:37:bf:1e:22:9f:00:58:
                    dd:84:da:bf:fd:f6:a1:bf:5a:41:3c:f0:5b:c1:5f:
                    df:2d:36:e0:f3:4d:6b:59:7a:0e:c8:4f:da:20:1b:
                    80:4d:44:e7:4e:15:b5:bc:14:fa:0d:ef:cb:ce:de:
                    7d:d0:b4:d8:74:8c:97:ed:1b:c4:c8:c3:bf:4d:6d:
                    c0:85:44:b4:8d:4e:16:68:12:56:e9:ca:21:24:05:
                    fa:74:86:62:b9:ef:5f:4a:89:b5:d7:84:92:93:2e:
                    bf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EB:CC:C1:0A:A4:A7:DF:C7:C7:C4:EC:46:B9:6C:60:25:21:3D:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/24597156-139e-456b-b7b5-78502f61a0ca/bcc2a6ca-657c-364b-b65a-dc54978b018c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/24597156-139e-456b-b7b5-78502f61a0ca/24597156-139e-456b-b7b5-78502f61a0ca.crl

            X509v3 Authority Key Identifier:
                keyid:E1:2F:81:3A:39:44:92:EA:C1:93:2D:14:88:3B:97:E2:30:23:AD:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/24597156-139e-456b-b7b5-78502f61a0ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:d8:66:72:e3:56:15:c0:f8:60:e4:ee:a2:71:8d:31:74:ac:
         bf:32:cd:5a:44:8a:b1:7f:12:8c:7c:41:dc:0f:bd:7c:d9:eb:
         5b:cd:30:ff:f8:f9:8f:c6:c0:bc:4b:21:60:bc:73:ed:ec:1a:
         7a:7f:91:6a:66:63:9f:0b:69:5b:f9:8b:f9:18:6b:34:61:d9:
         bb:f4:58:0c:38:98:01:41:66:dc:47:f8:09:83:21:ba:88:37:
         d7:f0:d0:72:6e:da:f9:3b:9f:af:75:d2:bd:f6:f6:8b:de:a1:
         bc:b0:8d:13:fe:f3:07:0e:32:0e:18:60:0b:5b:af:df:5d:c2:
         fa:d4:55:75:ed:49:f6:a1:54:56:e1:bc:9c:dd:69:43:ee:ce:
         ba:9c:40:17:5f:20:29:f7:86:b8:77:90:f1:cc:83:69:c0:02:
         e8:5a:65:fe:6f:82:3d:81:a8:0d:db:bd:5b:ca:05:22:64:63:
         fb:6d:1f:dc:f0:71:df:ca:e6:30:86:ad:d9:ba:03:47:b5:d4:
         9f:90:58:33:89:7f:de:9f:cd:02:2e:1f:e5:1d:49:0d:93:f4:
         00:ec:14:23:74:89:17:fa:6d:42:c4:71:af:13:b8:b6:19:c3:
         26:80:f6:9e:8d:19:13:92:ac:e4:fc:ed:37:a5:51:4a:c3:7f:
         c6:41:18:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:54 2026 by rpki-client