Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bcf1b888-c923-3d46-bfa7-1335cea8a3f6.roa
File:                     bcf1b888-c923-3d46-bfa7-1335cea8a3f6.roa (raw, json)
Hash identifier:          Y3LkzPBZoMrYEw4BEtTBg5YPpu7GOvI1MS4+r3/vUbs=
Subject key identifier:   A4:6F:57:5D:46:D9:BE:16:66:F4:AC:F6:10:99:D8:3E:27:BB:C9:DB
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584EA6158EE355003630141D90A0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bcf1b888-c923-3d46-bfa7-1335cea8a3f6.roa
Signing time:             Tue 28 Jul 2026 12:36:08 +0000
ROA not before:           Tue 28 Jul 2026 12:36:08 +0000
ROA not after:            Mon 26 Oct 2026 12:36:08 +0000
asID:                     208185
IP address blocks:        192.253.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a6:15:8e:e3:55:00:36:30:14:1d:90:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jul 28 12:36:08 2026 GMT
            Not After : Oct 26 12:36:08 2026 GMT
        Subject: CN=82fdc9cd-2347-4cd1-8a6c-340fe9afdf95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:76:dc:f0:ff:dd:ab:39:db:7e:4c:d7:d3:3d:
                    d7:f1:85:3e:a7:3b:68:10:18:89:38:50:ff:50:91:
                    c2:3f:c4:14:b8:95:af:47:c7:6a:1e:ec:38:a6:97:
                    fe:4c:2b:08:de:b7:bd:12:86:6e:ca:52:5e:60:4f:
                    3f:e6:7f:f1:f9:c2:e5:b7:c1:bd:93:de:0d:0a:76:
                    b9:d2:10:31:f8:b9:67:1d:80:67:b4:f1:db:48:7e:
                    97:0e:98:0d:3a:84:6f:94:46:f1:70:0e:6a:03:e6:
                    74:0c:4a:ba:b1:a5:9b:60:1f:fb:dc:1c:84:fa:6f:
                    80:95:ff:cb:06:df:d8:c9:b8:29:a9:b0:13:c5:40:
                    b6:39:60:da:ea:b3:cb:a4:6f:37:a5:f8:2c:6c:1b:
                    49:34:d1:08:ba:cd:b7:68:2a:91:c1:05:1e:8c:d1:
                    ca:37:00:49:ea:a1:d8:94:49:96:c1:4f:71:b2:2b:
                    01:50:c8:b1:c7:b3:be:53:d1:7d:11:5c:68:78:1a:
                    05:db:97:c0:b3:39:00:f6:08:d4:50:bc:17:21:c6:
                    db:19:83:3c:1e:20:4b:4f:b1:fa:10:7e:70:18:6d:
                    79:86:ac:18:8c:d1:4d:4b:ae:9c:73:dd:99:98:49:
                    c0:0c:75:e9:8a:b8:37:14:1a:17:c9:57:bd:29:91:
                    db:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6F:57:5D:46:D9:BE:16:66:F4:AC:F6:10:99:D8:3E:27:BB:C9:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bcf1b888-c923-3d46-bfa7-1335cea8a3f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.253.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:c5:0d:5d:fa:f2:35:c0:26:29:c3:b2:a4:f9:4b:d2:3a:a6:
         fe:14:52:c4:43:52:32:27:c4:56:0e:30:ea:97:e2:fe:98:b2:
         43:2a:b9:1f:5e:4a:d5:ff:2c:f6:41:16:fd:0a:e5:72:2b:0b:
         1a:91:aa:4a:21:90:60:f3:58:cc:f0:a4:ee:d9:f9:03:20:b4:
         f8:f6:c9:03:2c:84:34:23:f4:ef:1a:92:5a:4e:e6:6b:5d:bc:
         aa:57:1f:28:bc:7d:fa:58:0b:db:f2:8b:14:2c:11:1c:80:2e:
         95:6d:33:c3:4e:f9:fa:09:ee:06:e9:ee:27:43:f7:b1:98:f5:
         83:89:6e:03:00:0c:fc:0f:2c:7b:b8:ac:c5:05:81:8d:3a:14:
         86:4a:c5:64:fb:32:94:8c:51:b5:6f:69:22:52:e6:f7:12:25:
         c7:cd:5c:4a:82:83:53:78:28:b3:33:33:0a:16:f4:d6:3e:6f:
         81:93:2e:31:2b:58:85:4b:c5:9f:b7:86:9c:47:0e:f2:30:e7:
         4a:43:55:ad:4e:ef:a5:0b:3e:a0:4f:68:40:c9:42:54:92:51:
         67:3e:bc:e1:e0:a3:ad:70:52:a0:48:eb:3e:96:92:77:37:28:
         09:11:02:17:84:78:d4:23:3d:16:e9:a7:59:62:b4:15:90:25:
         e2:40:c4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:24:55 2026 by rpki-client