Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc847a09-17a6-3bb6-b8c2-dc92a5354374.roa
File:                     bc847a09-17a6-3bb6-b8c2-dc92a5354374.roa (raw, json)
Hash identifier:          BpCo53PlBADdyyc5yvC89zeWJOOuoK03/6djNMHNPx8=
Subject key identifier:   79:D7:21:40:59:10:4F:6D:F4:DA:3A:2A:2E:F6:FE:98:E6:B7:90:10
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9A4B8D85106D448C7C418380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc847a09-17a6-3bb6-b8c2-dc92a5354374.roa
Signing time:             Thu 23 Apr 2026 14:28:17 +0000
ROA not before:           Thu 23 Apr 2026 14:28:17 +0000
ROA not after:            Wed 22 Jul 2026 14:28:17 +0000
asID:                     397197
IP address blocks:        192.42.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:4b:8d:85:10:6d:44:8c:7c:41:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 14:28:17 2026 GMT
            Not After : Jul 22 14:28:17 2026 GMT
        Subject: CN=0d5184fa-e30d-4dc2-948c-2ea608cdb905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:08:b8:d6:1f:8d:f7:e4:f6:f5:96:9e:d5:3b:
                    a0:c6:56:f7:66:1d:69:b7:4f:d9:81:1f:d0:6c:8a:
                    6f:aa:ca:31:00:3c:d6:e9:33:4b:8a:22:b7:b1:bb:
                    ed:37:67:19:8d:4d:72:a7:d7:93:a0:2b:3c:b9:1a:
                    fb:14:db:8f:91:90:e8:3d:8d:9a:b2:b1:a4:cb:8f:
                    e9:76:52:5f:0b:d0:9d:ea:57:f3:02:fe:4f:93:18:
                    0f:a3:49:42:8b:bf:bb:c9:69:22:30:94:d2:66:e9:
                    c9:d6:62:ae:eb:75:60:dd:a7:9a:c1:00:fb:91:ca:
                    f7:d8:d7:b9:be:70:94:9d:0d:f5:6b:c0:6b:e0:78:
                    b2:5f:d4:dd:1a:d5:6c:94:7c:d4:9e:17:0b:80:88:
                    10:b4:a2:66:85:cb:e3:59:11:dc:cd:99:0f:8a:f8:
                    0d:d4:51:d4:13:e6:30:93:39:0e:ca:3e:01:d6:ce:
                    39:07:06:86:32:95:71:e8:84:5b:40:a5:8e:6d:65:
                    12:36:ea:f5:0f:0e:21:11:b3:44:3a:fc:92:5f:82:
                    21:d1:f2:dc:ca:60:9a:b4:8a:b2:94:b8:a8:df:cc:
                    2c:a6:73:af:49:c5:94:79:24:38:1d:aa:b0:4c:72:
                    13:9a:2a:3a:d3:02:fa:d8:fc:1d:81:94:43:07:c5:
                    3e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D7:21:40:59:10:4F:6D:F4:DA:3A:2A:2E:F6:FE:98:E6:B7:90:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc847a09-17a6-3bb6-b8c2-dc92a5354374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:21:2e:f6:99:66:c7:b1:78:c1:b5:3e:e4:d2:60:fb:6a:28:
         f4:70:51:2d:2e:e3:3e:24:0c:06:fd:c5:97:8c:a8:d1:52:70:
         33:b9:14:9a:f7:c5:6d:69:0a:45:68:9a:99:4e:85:f0:99:e8:
         7f:50:11:58:da:79:a3:ce:f8:75:6e:01:25:0c:e1:51:5c:a7:
         88:73:67:ec:d0:5f:1b:21:a2:51:b6:f7:78:ef:91:72:f8:dd:
         a0:5d:fc:6f:79:03:c0:bd:3e:98:67:ed:89:96:a0:61:f9:5f:
         a8:55:43:9f:49:02:71:38:d1:66:31:d9:73:7b:93:9f:1e:b4:
         b0:d1:18:1e:f6:21:fc:16:77:2a:34:3b:07:86:fa:c6:70:fc:
         a3:7d:da:ac:94:20:82:08:a8:15:5d:47:8d:9a:16:f6:05:fc:
         08:45:3f:56:bd:75:16:bf:7b:5f:01:7e:b6:66:63:12:6c:e5:
         a6:76:cd:f8:d6:bd:da:35:b7:9f:0e:63:59:1d:34:18:1d:df:
         25:71:a0:5c:4b:13:80:fe:a2:0f:fe:fb:92:ab:3b:0b:0f:39:
         28:5e:2f:23:31:bb:01:10:5f:86:62:f4:a6:6d:7e:79:6c:d6:
         b5:e2:70:0f:d1:15:c1:48:ac:f2:19:e0:83:61:47:03:7c:55:
         49:75:af:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:43 2026 by rpki-client