Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/bcf4837b-705f-3ae0-a9a3-c8ce47882966.roa
File:                     bcf4837b-705f-3ae0-a9a3-c8ce47882966.roa (raw, json)
Hash identifier:          d7i1SC+xKAiyHY7/v0b2AubVq24fanaK1pFVs0RwMfs=
Subject key identifier:   F5:AB:4E:A6:CB:71:56:70:6A:AD:AD:FE:D9:89:29:55:75:5E:22:CA
Certificate issuer:       /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial:       010D0C9F4328584CD2A1EAB46A7A573BBD0DAB80
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/bcf4837b-705f-3ae0-a9a3-c8ce47882966.roa
Signing time:             Wed 11 Feb 2026 02:00:32 +0000
ROA not before:           Wed 11 Feb 2026 02:00:32 +0000
ROA not after:            Tue 12 May 2026 01:00:32 +0000
asID:                     21947
IP address blocks:        216.47.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d2:a1:ea:b4:6a:7a:57:3b:bd:0d:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
        Validity
            Not Before: Feb 11 02:00:32 2026 GMT
            Not After : May 12 01:00:32 2026 GMT
        Subject: CN=5e3f1122-e4d4-4b52-9d4d-4a44a9d71778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fe:a5:44:c0:2f:f9:53:f0:3c:58:df:e3:f7:
                    11:a5:d2:fb:32:3d:cd:d5:2b:f8:83:39:56:68:f4:
                    e8:21:d6:1f:49:b5:c9:6f:05:00:cc:78:d3:8f:33:
                    e4:2a:b6:0c:3b:8a:cb:c9:a2:10:c8:27:6c:46:71:
                    9b:96:1b:10:82:7d:0d:67:c6:6b:ea:21:88:b6:0a:
                    8b:2b:a3:53:da:63:04:f5:3a:4e:51:7d:5c:8a:6d:
                    73:24:14:d6:c1:f7:b8:8d:c1:71:a3:bf:85:9f:ed:
                    56:d1:c0:af:19:a7:d2:9b:b3:e7:08:39:cb:c3:7e:
                    61:ed:e1:68:a1:37:a2:bb:08:d9:e5:9d:32:81:7c:
                    48:cb:7c:7a:09:9e:9b:ae:bd:f2:8c:75:30:59:66:
                    12:4b:4f:0f:c5:af:6d:ea:66:31:18:86:8b:4e:f3:
                    68:bc:a4:26:ae:5f:b8:f7:b3:49:8e:76:d5:fd:f0:
                    6b:cc:5e:6d:68:5d:7b:33:1b:f5:24:e1:d5:75:3c:
                    01:fa:a8:5b:9b:dc:c6:f1:1c:ae:ac:f2:ef:d1:60:
                    ac:c3:b4:cf:af:44:ec:0e:ad:f0:47:f4:e9:81:4c:
                    05:b4:03:aa:ec:9f:00:76:c0:3a:69:e3:fc:92:05:
                    62:6b:28:fb:fc:dd:0b:b2:e2:8f:c4:b4:58:6e:cd:
                    34:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AB:4E:A6:CB:71:56:70:6A:AD:AD:FE:D9:89:29:55:75:5E:22:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/bcf4837b-705f-3ae0-a9a3-c8ce47882966.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl

            X509v3 Authority Key Identifier:
                keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.47.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:2c:76:75:e0:de:e7:13:b6:20:11:e1:ee:62:66:96:20:15:
         45:74:dd:ff:a7:41:47:04:e6:07:22:6c:1f:d8:48:ee:59:66:
         bf:6e:3c:d0:0c:68:41:77:0a:1e:68:81:1d:9f:02:ac:bd:e1:
         32:b2:01:ce:18:b7:59:0b:be:3c:ae:5a:a6:d5:33:7d:57:b3:
         35:67:db:16:b5:8d:b3:3f:11:32:62:18:2c:d3:89:e1:1e:22:
         2c:23:59:72:47:05:5f:cf:e0:40:33:c3:e8:7a:18:0e:3d:ef:
         6d:11:45:f2:e4:c9:4e:34:9f:88:8d:50:bd:1c:5f:8d:22:04:
         e6:e2:82:ae:36:a0:33:c8:55:6d:83:ef:e7:85:0a:79:93:0c:
         fb:61:91:e4:92:50:f6:d8:a2:1a:a7:a0:96:fd:d2:dc:7b:03:
         98:a3:5e:62:6e:a5:c0:7b:f4:1d:f2:b5:a8:a6:fe:f1:2f:15:
         12:5f:77:7a:92:3b:e0:1a:5c:74:ab:3a:03:0c:87:73:22:a6:
         d9:4a:3d:10:dd:98:12:9b:c5:d8:55:b8:1b:c1:b9:ed:46:6e:
         ce:a2:10:43:c7:ce:27:3c:ec:cb:ec:1e:b8:4c:e1:9b:7b:6d:
         a4:cc:b3:be:79:aa:5a:f4:57:94:ad:e3:56:59:a8:58:fc:74:
         cc:2f:7b:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzSoeq0anpXO70Nq4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz
OGEzMB4XDTI2MDIxMTAyMDAzMloXDTI2MDUxMjAxMDAzMlowLzEtMCsGA1UEAxMk
NWUzZjExMjItZTRkNC00YjUyLTlkNGQtNGE0NGE5ZDcxNzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv6lRMAv+VPwPFjf4/cRpdL7Mj3N1Sv4gzlW
aPToIdYfSbXJbwUAzHjTjzPkKrYMO4rLyaIQyCdsRnGblhsQgn0NZ8Zr6iGItgqL
K6NT2mME9TpOUX1cim1zJBTWwfe4jcFxo7+Fn+1W0cCvGafSm7PnCDnLw35h7eFo
oTeiuwjZ5Z0ygXxIy3x6CZ6brr3yjHUwWWYSS08Pxa9t6mYxGIaLTvNovKQmrl+4
97NJjnbV/fBrzF5taF17Mxv1JOHVdTwB+qhbm9zG8RyurPLv0WCsw7TPr0TsDq3w
R/TpgUwFtAOq7J8AdsA6aeP8kgViayj7/N0LsuKPxLRYbs00qQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPWrTqbLcVZwaq2t/tmJKVV1XiLKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3
MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvYmNmNDgzN2ItNzA1Zi0z
YWUwLWE5YTMtYzhjZTQ3ODgyOTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk
YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj
MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1
NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2C8wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFcsdnXg3ucTtiAR4e5iZpYgFUV03f+nQUcE5gcibB/YSO5ZZr9uPNAM
aEF3Ch5ogR2fAqy94TKyAc4Yt1kLvjyuWqbVM31XszVn2xa1jbM/ETJiGCzTieEe
IiwjWXJHBV/P4EAzw+h6GA49720RRfLkyU40n4iNUL0cX40iBObigq42oDPIVW2D
7+eFCnmTDPthkeSSUPbYohqnoJb90tx7A5ijXmJupcB79B3ytaim/vEvFRJfd3qS
O+AaXHSrOgMMh3MiptlKPRDdmBKbxdhVuBvBue1Gbs6iEEPHzic87MvsHrhM4Zt7
baTMs755qlr0V5St41ZZqFj8dMwve6Q=
-----END CERTIFICATE-----
Generated at Tue Mar 3 07:14:24 2026 by rpki-client