Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/bcf2cd0e-5c9e-3018-b460-0a4fd228b426.roa
File:                     bcf2cd0e-5c9e-3018-b460-0a4fd228b426.roa (raw, json)
Hash identifier:          Hg1RNBSwXBIGHQx5GVPeL79y1R/Y5NtRbeGPFtc7PPA=
Subject key identifier:   92:B9:89:40:60:F2:C9:CE:DB:8A:EA:58:48:AB:55:7E:FE:45:D4:DE
Certificate issuer:       /CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113
Certificate serial:       010D0C9F4328584D746FCA25934B0CFD25E47E40
Authority key identifier: C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/bcf2cd0e-5c9e-3018-b460-0a4fd228b426.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     11978
IP address blocks:        192.5.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:ca:25:93:4b:0c:fd:25:e4:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=4d275ce0-a792-4fe0-8fcc-527f99e5c18b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0c:62:73:92:fb:96:19:41:d9:f1:03:43:2c:
                    a4:78:45:cd:d0:69:b9:66:08:a4:89:ae:5d:36:ad:
                    d1:4c:38:f3:c5:f2:34:f3:79:38:c8:c8:2f:c8:dc:
                    cb:a1:05:f3:ce:47:03:e0:cd:72:c3:58:4a:65:5a:
                    96:2f:84:73:b3:77:a4:2b:0f:c5:ea:62:88:a1:71:
                    2e:08:2a:e5:57:87:27:03:60:30:f8:45:86:50:11:
                    c6:20:ad:b3:39:d0:d3:c8:47:29:c7:b9:77:b7:8f:
                    5c:1c:86:22:80:63:0b:49:47:18:b6:57:6d:de:ad:
                    75:a4:1e:b1:65:fb:51:3f:99:01:9c:bd:10:55:ff:
                    58:f1:80:1f:67:04:f2:74:89:60:38:ed:96:5d:9d:
                    1f:66:c9:e0:89:b6:d2:4e:92:2d:8b:1f:f8:9e:1d:
                    ad:45:3d:e1:d2:da:d7:eb:1f:81:28:50:05:b8:1b:
                    e0:05:d0:a5:1b:43:c3:93:41:31:b7:99:f8:7b:fe:
                    71:9f:c4:c6:47:04:59:69:07:44:6a:c8:68:a5:18:
                    ca:91:c8:75:41:4a:35:9a:d7:ba:9b:7e:d1:75:62:
                    bf:7c:d0:c8:1d:14:f1:4c:33:21:7b:d8:97:1c:97:
                    46:58:58:b8:98:3f:ca:ca:8f:6c:c3:3b:3b:89:ed:
                    77:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B9:89:40:60:F2:C9:CE:DB:8A:EA:58:48:AB:55:7E:FE:45:D4:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/bcf2cd0e-5c9e-3018-b460-0a4fd228b426.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.crl

            X509v3 Authority Key Identifier:
                keyid:C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:93:30:fe:d2:ba:3e:f0:20:49:dd:4e:28:75:39:11:22:08:
         26:b6:3f:05:ae:0f:f2:ca:a9:9f:e0:41:28:72:a7:25:2b:06:
         75:a9:12:f9:4b:da:21:14:6e:a6:06:c7:c7:ae:8a:3f:cb:c6:
         8b:2e:83:8a:87:d8:0a:be:48:8b:3d:24:b9:71:8c:77:06:c9:
         30:95:1c:7a:17:25:8c:bf:35:25:6c:7a:a0:f2:af:b5:73:e7:
         4d:a0:0c:29:5e:1d:93:29:52:19:6e:f4:a6:a4:c4:d6:ec:5e:
         2a:ed:d4:6c:3d:3a:4e:e2:e7:53:e9:aa:30:f7:ce:f1:90:df:
         f3:71:9b:cc:33:8d:14:02:63:b7:15:d2:f8:43:7e:b7:4e:71:
         64:6f:2c:e3:77:cd:e9:99:61:b8:e0:3a:f6:69:bc:34:96:03:
         b4:8b:1c:64:00:73:61:92:d2:ad:26:b1:78:8a:f5:90:b7:5f:
         9f:cb:8d:c0:17:64:c4:d9:c0:ca:e1:78:4c:55:f9:f6:d4:81:
         80:6b:30:7b:1e:a5:6b:dc:fd:3a:62:e5:14:29:3f:ef:b8:b4:
         fd:53:0a:32:4f:04:b2:46:22:bd:6b:2f:63:68:ee:47:cc:ef:
         ce:29:23:f8:bb:86:7e:8f:56:a8:d8:bd:10:9c:f6:13:33:60:
         c8:aa:7f:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b8olk0sM/SXkfkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjBiNDVmNzktNjEyZC00YzdlLThjMjQtNWY2NGFjNzVj
MTEzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk
NGQyNzVjZTAtYTc5Mi00ZmUwLThmY2MtNTI3Zjk5ZTVjMThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogxic5L7lhlB2fEDQyykeEXN0Gm5Zgikia5d
Nq3RTDjzxfI083k4yMgvyNzLoQXzzkcD4M1yw1hKZVqWL4Rzs3ekKw/F6mKIoXEu
CCrlV4cnA2Aw+EWGUBHGIK2zOdDTyEcpx7l3t49cHIYigGMLSUcYtldt3q11pB6x
ZftRP5kBnL0QVf9Y8YAfZwTydIlgOO2WXZ0fZsngibbSTpItix/4nh2tRT3h0trX
6x+BKFAFuBvgBdClG0PDk0Ext5n4e/5xn8TGRwRZaQdEashopRjKkch1QUo1mte6
m37RdWK/fNDIHRTxTDMhe9iXHJdGWFi4mD/Kyo9swzs7ie13fwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJK5iUBg8snO24rqWEirVX7+RdTeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mMGI0
NWY3OS02MTJkLTRjN2UtOGMyNC01ZjY0YWM3NWMxMTMvYmNmMmNkMGUtNWM5ZS0z
MDE4LWI0NjAtMGE0ZmQyMjhiNDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjBiNDVmNzktNjEyZC00YzdlLThj
MjQtNWY2NGFjNzVjMTEzL2YwYjQ1Zjc5LTYxMmQtNGM3ZS04YzI0LTVmNjRhYzc1
YzExMy5jcmwwHwYDVR0jBBgwFoAUwgDCOnzJSSzO95wp7F6dYJdYYncwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mMGI0NWY3OS02MTJkLTRjN2UtOGMyNC01ZjY0
YWM3NWMxMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAVJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABWTMP7Suj7wIEndTih1OREiCCa2PwWuD/LKqZ/gQShypyUrBnWpEvlL
2iEUbqYGx8euij/Lxosug4qH2Aq+SIs9JLlxjHcGyTCVHHoXJYy/NSVseqDyr7Vz
502gDCleHZMpUhlu9KakxNbsXirt1Gw9Ok7i51PpqjD3zvGQ3/Nxm8wzjRQCY7cV
0vhDfrdOcWRvLON3zemZYbjgOvZpvDSWA7SLHGQAc2GS0q0msXiK9ZC3X5/LjcAX
ZMTZwMrheExV+fbUgYBrMHsepWvc/Tpi5RQpP++4tP1TCjJPBLJGIr1rL2No7kfM
784pI/i7hn6PVqjYvRCc9hMzYMiqfwU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:39:04 2026 by rpki-client