Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/d8ec290c-925e-31d6-8996-1edd8ee927ed.roa
File:                     d8ec290c-925e-31d6-8996-1edd8ee927ed.roa (raw, json)
Hash identifier:          Xf+LavzX5gZ1rv9aquVNM9y0sGjg51RSiaVyw1Zlf6g=
Subject key identifier:   91:96:21:7F:3F:53:A7:7E:28:28:B5:4D:87:82:42:6D:8D:2B:AF:FC
Certificate issuer:       /CN=bcc49d2f-33f0-42f7-bc61-b4187dd155a8
Certificate serial:       010D0C9F4328584E07009ABC9911976CAB5576E0
Authority key identifier: D4:1E:D6:32:70:2C:B2:F0:21:F1:A0:91:FC:88:0E:72:62:72:4E:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/d8ec290c-925e-31d6-8996-1edd8ee927ed.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     19189
IP address blocks:        198.148.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:9a:bc:99:11:97:6c:ab:55:76:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc49d2f-33f0-42f7-bc61-b4187dd155a8
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=b95e1ac1-e93c-4f39-ae8c-ee39151c1cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:41:45:5d:11:f6:c0:d1:64:62:4e:00:0f:21:
                    34:79:25:cb:16:36:c0:e3:6d:91:93:bf:1e:e7:b9:
                    ca:c7:fd:5e:fd:6a:ef:5d:64:75:5b:58:82:ec:c0:
                    c5:5a:a4:22:6c:17:d4:a7:c9:0b:49:22:44:6b:bb:
                    23:f1:4f:c9:dc:43:90:c0:2d:be:6e:e2:9c:b6:f1:
                    75:e8:4b:f9:b1:69:af:97:c4:e7:b5:3b:71:a4:77:
                    91:04:56:d4:1d:63:61:cd:77:53:11:b4:a8:9d:32:
                    9c:50:ea:b0:1b:1d:7f:ea:d5:4f:f3:db:23:37:ec:
                    d4:20:b1:6e:38:53:b5:a3:16:05:fa:43:d6:4a:d7:
                    64:7f:ac:85:13:b9:de:b0:79:e4:e9:6b:d9:84:1e:
                    bf:4b:1f:7b:14:19:12:5b:c8:49:fa:9e:f3:dc:01:
                    ed:86:a7:74:db:39:9d:27:95:3c:b7:e4:49:d2:56:
                    7d:47:71:69:a6:b0:e4:24:5c:29:b1:74:bb:8a:c1:
                    6e:23:8d:56:f2:dd:ca:2d:36:c3:53:4c:a2:a9:1a:
                    28:4d:5f:45:c5:cf:cf:0b:79:6b:6c:c0:3f:ca:fa:
                    9a:20:ef:01:88:4d:e6:50:b0:bf:47:de:76:3f:d1:
                    2b:57:43:66:eb:63:ac:8a:6a:92:30:5a:7c:fc:7c:
                    c4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:96:21:7F:3F:53:A7:7E:28:28:B5:4D:87:82:42:6D:8D:2B:AF:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/d8ec290c-925e-31d6-8996-1edd8ee927ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.crl

            X509v3 Authority Key Identifier:
                keyid:D4:1E:D6:32:70:2C:B2:F0:21:F1:A0:91:FC:88:0E:72:62:72:4E:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.148.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:39:c5:a9:67:83:91:2c:db:93:4d:6e:40:a2:1d:41:f3:16:
         b4:e9:b3:a7:6a:27:1c:7f:4c:bf:42:c3:e5:51:6c:6f:79:51:
         08:7c:86:2e:de:c3:3d:d4:61:6f:13:85:1f:d8:90:72:9c:1a:
         ed:a1:72:ae:a9:3a:ba:ac:91:15:a1:2b:7b:46:19:13:58:09:
         05:91:97:0d:c5:54:e4:c5:8b:69:47:2d:04:29:99:f9:e8:f3:
         48:c7:80:44:ff:48:66:73:dd:03:97:89:ca:b0:74:2f:18:86:
         33:27:e2:58:1a:c0:b9:96:58:0c:af:31:1b:d4:a4:9e:f3:88:
         ee:f8:af:28:d3:3c:3e:33:3d:93:ec:82:a7:83:3a:3e:3f:b6:
         d2:df:a2:bd:a0:8b:d7:8c:9b:9b:ca:1f:6e:71:b3:f9:c8:8f:
         fa:a5:14:da:e2:ee:3d:20:05:11:b3:4e:ae:f0:99:56:3c:54:
         f3:c8:22:cc:64:f6:1d:f9:25:2b:12:05:b9:8b:37:16:95:a3:
         7e:9d:50:e0:b8:26:67:47:d6:c6:78:d5:b7:8a:ab:b7:fa:33:
         fe:d3:1a:cf:e0:a2:b7:b2:2f:1c:37:be:86:4b:90:42:1c:7b:
         b8:0f:c0:8b:30:d2:23:6f:a9:23:3a:33:16:d4:84:25:86:5c:
         0b:24:fc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:20:38 2026 by rpki-client