Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/8e5d139d-a0de-3b0d-a990-caf789c51809.roa
File:                     8e5d139d-a0de-3b0d-a990-caf789c51809.roa (raw, json)
Hash identifier:          R44FfJMvVzSQNLKhGZtKEaZ20CAW6XVSdDnVgJsIWyA=
Subject key identifier:   BD:76:C8:FB:1A:19:45:C6:BC:E8:38:E2:A3:5C:DF:39:D1:65:FA:1D
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F4328584CE62CC55ED7146BF7890D3D60
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/8e5d139d-a0de-3b0d-a990-caf789c51809.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     46450
IP address blocks:        172.93.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:c5:5e:d7:14:6b:f7:89:0d:3d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=13aa5c17-5774-4ece-aabc-1f7754860ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a6:29:1d:6a:14:0f:8f:4e:f7:5e:85:43:75:
                    56:26:19:de:94:2f:40:d8:55:9c:74:66:f8:4d:5a:
                    b2:be:3d:54:83:ea:92:6c:d0:70:1d:e8:fa:bf:4a:
                    4f:e6:72:90:53:0f:ba:87:c1:06:78:3c:28:be:bb:
                    0a:7a:c1:a9:9b:b6:36:da:83:3e:cc:3f:b2:cf:01:
                    f9:92:75:b0:c1:91:f5:88:aa:73:a5:73:00:8e:a7:
                    96:4f:31:15:2c:06:ea:58:72:39:d8:3f:00:59:8b:
                    cf:db:18:69:12:4d:6e:7e:ac:73:bf:3d:80:3e:01:
                    a3:b3:66:fa:69:a6:f3:fb:f5:b2:af:f6:d5:c6:cc:
                    a8:e0:3f:68:55:c9:86:a1:2b:45:bf:46:3e:4a:c7:
                    9f:55:57:74:fd:47:a1:b4:87:49:d1:a3:b5:bf:de:
                    df:bc:27:90:99:c1:23:58:bb:d8:b3:e3:5d:89:ff:
                    72:cc:44:87:9a:22:1f:d9:ff:db:65:b9:c6:88:7f:
                    10:f9:6c:a0:bd:cf:46:90:87:e5:63:66:6a:50:87:
                    bd:4b:d1:5e:c7:0e:e5:e1:4f:d2:6c:95:c9:65:26:
                    84:5d:45:10:b9:ee:d4:60:a6:d8:14:5b:9c:45:f3:
                    7f:09:74:5b:5a:08:4b:29:ad:11:43:3d:56:2c:30:
                    21:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:76:C8:FB:1A:19:45:C6:BC:E8:38:E2:A3:5C:DF:39:D1:65:FA:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/8e5d139d-a0de-3b0d-a990-caf789c51809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.93.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:3c:da:3d:02:3f:ad:b7:6e:e8:94:13:4e:02:a1:ab:1f:a1:
         c7:ce:17:28:a3:38:6c:c0:f4:af:75:2e:89:cf:d4:70:e9:39:
         0b:90:96:e2:bc:42:ac:61:42:aa:f7:f9:61:67:d0:9c:85:75:
         d2:78:f5:42:89:35:a4:ad:0d:40:b8:76:1d:aa:94:f0:b9:e2:
         56:38:6b:cf:ef:d2:d8:d1:85:ae:91:4f:c7:a4:f5:fd:5f:c9:
         5e:5b:20:29:e8:61:79:1c:35:08:10:d5:7a:7e:99:30:81:f3:
         27:0c:18:09:15:50:39:d2:e8:20:7c:cc:b6:17:3e:61:f6:93:
         2d:78:80:26:24:25:0d:5d:7b:43:fd:03:28:e3:f0:6c:cf:57:
         8a:00:a3:0a:65:9d:ce:c9:7a:99:47:bb:a0:bc:7f:73:9c:46:
         07:b9:64:03:eb:13:73:19:87:f7:d7:23:b6:d4:25:b8:d2:24:
         73:cd:18:7e:13:da:16:40:74:8f:70:65:36:9c:77:b7:ed:ed:
         58:15:f8:3b:60:b5:e8:e4:65:7f:7f:85:b1:5c:32:22:04:99:
         25:d3:32:84:79:a7:7f:9e:bb:5d:d1:e9:f2:8f:e3:1d:8c:70:
         1b:81:58:b9:de:f2:9a:90:b0:09:b2:44:09:42:ed:b3:8f:93:
         7d:fb:09:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzmLMVe1xRr94kNPWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5
ZGMyMB4XDTI2MDIxODAyMDAzMVoXDTI2MDUxOTAxMDAzMVowLzEtMCsGA1UEAxMk
MTNhYTVjMTctNTc3NC00ZWNlLWFhYmMtMWY3NzU0ODYwY2EzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qYpHWoUD49O916FQ3VWJhnelC9A2FWcdGb4
TVqyvj1Ug+qSbNBwHej6v0pP5nKQUw+6h8EGeDwovrsKesGpm7Y22oM+zD+yzwH5
knWwwZH1iKpzpXMAjqeWTzEVLAbqWHI52D8AWYvP2xhpEk1ufqxzvz2APgGjs2b6
aabz+/Wyr/bVxsyo4D9oVcmGoStFv0Y+SsefVVd0/UehtIdJ0aO1v97fvCeQmcEj
WLvYs+Ndif9yzESHmiIf2f/bZbnGiH8Q+Wygvc9GkIflY2ZqUIe9S9Fexw7l4U/S
bJXJZSaEXUUQue7UYKbYFFucRfN/CXRbWghLKa0RQz1WLDAhQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL12yPsaGUXGvOg44qNc3znRZfodMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw
MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvOGU1ZDEzOWQtYTBkZS0z
YjBkLWE5OTAtY2FmNzg5YzUxODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3
YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0
OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh
ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrF0IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALU82j0CP623buiUE04CoasfocfOFyijOGzA9K91LonP1HDpOQuQluK8
QqxhQqr3+WFn0JyFddJ49UKJNaStDUC4dh2qlPC54lY4a8/v0tjRha6RT8ek9f1f
yV5bICnoYXkcNQgQ1Xp+mTCB8ycMGAkVUDnS6CB8zLYXPmH2ky14gCYkJQ1de0P9
Ayjj8GzPV4oAowplnc7JeplHu6C8f3OcRge5ZAPrE3MZh/fXI7bUJbjSJHPNGH4T
2hZAdI9wZTacd7ft7VgV+DtgtejkZX9/hbFcMiIEmSXTMoR5p3+eu13R6fKP4x2M
cBuBWLne8pqQsAmyRAlC7bOPk337CQk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:51 2026 by rpki-client