Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/dc558362-801b-32e2-82c8-a5f6cac01ef2.roa
File:                     dc558362-801b-32e2-82c8-a5f6cac01ef2.roa (raw, json)
Hash identifier:          W9vAR/v/iw3+WgRZz+03dm7yyUX+NptGpR+4fK8GhKg=
Subject key identifier:   23:E6:28:A4:D4:C4:ED:5E:C7:C6:21:DB:62:42:EC:9B:17:53:26:C7
Certificate issuer:       /CN=bcebc8fa-2923-43fa-ba14-964e68a49086
Certificate serial:       010D0C9F4328584F34826D7429A2699FD2AABD40
Authority key identifier: 4C:4A:30:C3:52:5B:42:48:A8:E2:9F:0E:3D:F8:23:9A:C6:A9:C5:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/dc558362-801b-32e2-82c8-a5f6cac01ef2.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     19430
IP address blocks:        198.160.96.0/19 maxlen: 24
                          198.160.124.0/24 maxlen: 24
                          198.160.125.118/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/bcebc8fa-2923-43fa-ba14-964e68a49086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/bcebc8fa-2923-43fa-ba14-964e68a49086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:6d:74:29:a2:69:9f:d2:aa:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcebc8fa-2923-43fa-ba14-964e68a49086
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=ba90c112-c43a-4cef-99d5-5a8ed4f82c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:03:8b:4d:86:bc:32:09:e3:2a:3b:c3:1c:ad:
                    0a:ae:f2:55:88:d5:7a:a6:df:64:4d:91:1b:f0:76:
                    52:8e:57:65:76:5c:69:0f:5a:a4:1d:11:cd:b4:57:
                    3e:53:5c:a4:4f:b8:9d:82:ae:31:6c:88:33:1c:56:
                    57:3f:81:60:fa:86:80:1f:f8:bb:70:77:99:ee:6b:
                    b5:18:1a:55:53:1f:c9:85:de:c4:95:c9:c0:4a:83:
                    c2:38:2b:db:77:00:29:a9:7b:ac:88:63:ee:8c:0e:
                    7b:4b:86:97:13:f6:f5:97:98:e0:dc:7c:6a:8a:07:
                    30:d0:58:bb:cf:26:85:4e:53:9b:5c:f0:51:3f:1e:
                    f9:1e:f7:b8:35:7d:07:a0:15:a2:8f:b0:4b:a1:6b:
                    11:22:00:e4:e3:85:51:97:11:34:a0:47:91:9f:ba:
                    87:f9:b7:41:d8:87:45:38:b1:dd:a7:f7:9d:f7:ad:
                    af:f9:12:5b:b7:ed:89:39:5e:89:52:f4:a2:66:ba:
                    eb:5f:06:e4:7f:82:c4:66:33:1c:30:0a:e0:cc:21:
                    42:a1:c9:69:e0:cd:ae:cd:04:81:73:e6:ca:f9:be:
                    a8:4c:5a:fd:ce:fb:41:c7:f5:92:34:ab:cf:33:7b:
                    72:38:0c:39:c5:aa:e7:81:3a:7d:e5:59:8b:71:69:
                    7a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E6:28:A4:D4:C4:ED:5E:C7:C6:21:DB:62:42:EC:9B:17:53:26:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/dc558362-801b-32e2-82c8-a5f6cac01ef2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/bcebc8fa-2923-43fa-ba14-964e68a49086.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:30:C3:52:5B:42:48:A8:E2:9F:0E:3D:F8:23:9A:C6:A9:C5:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.160.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:6d:e8:07:62:f2:97:e6:49:52:ea:14:08:e2:5e:21:49:a1:
         77:af:30:54:95:01:b6:ae:f6:20:4d:5c:3b:a3:6c:7d:52:ce:
         6d:e0:bb:48:4c:63:1e:97:f8:f5:79:b9:8b:0a:84:d0:22:30:
         1c:56:cb:52:f7:a9:fa:09:55:f9:2e:98:39:5a:17:58:ea:69:
         fb:7f:95:4b:2b:ca:08:b5:64:42:a6:82:02:20:57:0f:9d:25:
         6d:c8:74:42:9b:ad:a4:89:99:0c:f2:01:0e:27:0f:4e:f4:a6:
         90:ab:45:12:23:11:8f:21:6c:bf:5a:97:ea:c4:5c:be:97:0f:
         6f:62:12:cc:5a:07:c4:c6:f1:8d:1f:a5:96:ca:67:70:ad:24:
         56:ac:2e:98:d1:74:4a:5c:e1:15:5f:5f:a8:a7:8e:0e:db:32:
         50:44:04:68:e2:4e:68:96:81:fe:5c:76:ab:09:1b:3d:78:dd:
         92:32:45:86:7e:7e:19:02:c8:71:a3:86:b2:7a:86:c3:87:38:
         f7:a0:41:7e:e4:10:77:5d:28:a9:5c:6c:1f:e3:96:61:e6:d4:
         39:f1:03:72:a8:ef:4b:14:5a:b5:03:1c:04:9e:ea:f7:dd:bb:
         43:8c:96:95:57:72:30:c3:89:2f:f2:99:de:f9:93:cc:af:e3:
         81:03:22:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:46:06 2026 by rpki-client