Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/bcb8a33b-337a-3149-be8e-9578657fe28b.roa
File:                     bcb8a33b-337a-3149-be8e-9578657fe28b.roa (raw, json)
Hash identifier:          sPI3C1LdDeIp+YKOcoAUwamCzCwlsQU3Ms7eT5rxMv0=
Subject key identifier:   27:D6:6E:82:B1:01:48:EF:05:79:F2:02:D5:85:AC:E4:B8:D6:1D:21
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584D487158CDA5D0370D6B942FA0
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/bcb8a33b-337a-3149-be8e-9578657fe28b.roa
Signing time:             Wed 25 Mar 2026 06:48:09 +0000
ROA not before:           Wed 25 Mar 2026 06:48:09 +0000
ROA not after:            Tue 23 Jun 2026 06:48:09 +0000
asID:                     12025
IP address blocks:        162.223.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:48:71:58:cd:a5:d0:37:0d:6b:94:2f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Mar 25 06:48:09 2026 GMT
            Not After : Jun 23 06:48:09 2026 GMT
        Subject: CN=87502f3f-fbfb-4952-b4a5-79d4ec0f84ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a9:bb:be:32:61:f0:ef:be:54:b1:f1:bc:39:
                    66:1a:e4:47:ca:65:9d:11:86:7f:c9:d6:19:16:28:
                    5a:e7:ab:71:62:51:5a:32:01:79:bb:00:25:d5:80:
                    7b:1a:ef:2f:6f:6a:98:b8:19:5a:8f:3c:44:3e:d2:
                    71:b9:49:ea:a5:17:7a:30:d4:f6:a8:f4:23:63:13:
                    ab:f5:1f:c3:e9:89:88:60:55:64:d1:a1:a0:6e:d5:
                    23:39:b8:65:60:28:9e:07:ce:58:66:69:b9:c8:05:
                    e5:ab:02:85:41:c5:ca:e2:7c:7b:16:b0:67:a1:17:
                    8c:9f:f5:3d:58:a6:74:a9:12:5f:33:21:86:c7:27:
                    c8:74:6c:1f:89:50:38:46:ed:5b:20:90:af:10:60:
                    41:8f:60:74:d2:71:61:b0:b4:5d:77:46:83:91:3b:
                    d4:d1:af:20:b4:2f:0e:4e:7e:5a:98:4b:45:41:5f:
                    9d:5b:49:26:d7:d2:dd:07:d9:ec:60:22:d9:2f:13:
                    0e:15:75:20:39:8b:4a:39:76:7a:b3:80:01:4c:05:
                    a3:ea:28:51:86:24:89:0f:c9:8d:24:c4:15:5e:86:
                    7a:5e:d0:fd:7b:de:d8:53:24:82:62:a2:a7:ce:e4:
                    0a:dc:47:d6:3b:6f:1c:cd:f2:93:5b:93:4c:c6:f3:
                    ae:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D6:6E:82:B1:01:48:EF:05:79:F2:02:D5:85:AC:E4:B8:D6:1D:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/bcb8a33b-337a-3149-be8e-9578657fe28b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.223.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:a1:0b:60:60:7a:e2:b7:22:eb:02:b0:f3:18:0e:b9:55:a8:
         01:19:fc:7c:85:f6:c7:13:b4:b2:5a:3b:69:9e:87:e5:e0:56:
         f6:52:7e:71:f7:85:12:94:e8:0d:5f:4c:c8:b7:00:7c:fe:de:
         79:ef:f7:2f:3b:cb:73:57:25:8b:7d:41:d7:e1:c4:a1:13:05:
         08:a4:0e:d5:66:d8:bf:0c:33:2c:33:46:80:8d:4e:f8:8c:90:
         80:a7:55:49:c5:43:40:04:9f:5e:af:f5:43:cb:76:4b:a5:95:
         78:22:72:8b:40:c1:32:4d:e4:99:e3:68:9c:80:b7:ff:8f:75:
         16:b5:15:86:7a:94:20:87:8d:b3:42:1a:e0:4a:82:d2:d6:24:
         1e:6d:b9:77:59:d1:3a:c3:9d:ac:7b:c1:f0:f9:32:2c:d2:97:
         8d:39:25:71:2f:89:a7:43:fe:ce:d4:18:71:6d:8c:a2:9a:dd:
         5a:ea:ad:99:e0:38:54:b7:9a:bd:78:11:87:7d:b7:d3:68:37:
         16:e3:8e:13:64:eb:e8:5a:11:73:cd:8b:8b:50:94:43:eb:37:
         6b:36:b5:d1:e9:c4:40:82:57:d4:37:19:c2:3d:88:7c:d8:c0:
         06:6b:6e:79:1f:09:47:04:ea:9e:2b:ec:f2:78:6c:5d:e5:78:
         44:16:1e:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1IcVjNpdA3DWuUL6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGU1OWMxMzctMDYxOS00MDdiLTg3Y2UtOGE0ZTA4ZGQ2
YzYzMB4XDTI2MDMyNTA2NDgwOVoXDTI2MDYyMzA2NDgwOVowLzEtMCsGA1UEAxMk
ODc1MDJmM2YtZmJmYi00OTUyLWI0YTUtNzlkNGVjMGY4NGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAham7vjJh8O++VLHxvDlmGuRHymWdEYZ/ydYZ
Fiha56txYlFaMgF5uwAl1YB7Gu8vb2qYuBlajzxEPtJxuUnqpRd6MNT2qPQjYxOr
9R/D6YmIYFVk0aGgbtUjObhlYCieB85YZmm5yAXlqwKFQcXK4nx7FrBnoReMn/U9
WKZ0qRJfMyGGxyfIdGwfiVA4Ru1bIJCvEGBBj2B00nFhsLRdd0aDkTvU0a8gtC8O
Tn5amEtFQV+dW0km19LdB9nsYCLZLxMOFXUgOYtKOXZ6s4ABTAWj6ihRhiSJD8mN
JMQVXoZ6XtD9e97YUySCYqKnzuQK3EfWO28czfKTW5NMxvOuCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCfWboKxAUjvBXnyAtWFrOS41h0hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5
YzEzNy0wNjE5LTQwN2ItODdjZS04YTRlMDhkZDZjNjMvYmNiOGEzM2ItMzM3YS0z
MTQ5LWJlOGUtOTU3ODY1N2ZlMjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGU1OWMxMzctMDYxOS00MDdiLTg3
Y2UtOGE0ZTA4ZGQ2YzYzLzBlNTljMTM3LTA2MTktNDA3Yi04N2NlLThhNGUwOGRk
NmM2My5jcmwwHwYDVR0jBBgwFoAUhK/fZENn+KWm3VRabKVzFb4wW8EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5YzEzNy0wNjE5LTQwN2ItODdjZS04YTRl
MDhkZDZjNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCot+gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAyhC2BgeuK3IusCsPMYDrlVqAEZ/HyF9scTtLJaO2meh+XgVvZSfnH3
hRKU6A1fTMi3AHz+3nnv9y87y3NXJYt9QdfhxKETBQikDtVm2L8MMywzRoCNTviM
kICnVUnFQ0AEn16v9UPLdkullXgicotAwTJN5JnjaJyAt/+PdRa1FYZ6lCCHjbNC
GuBKgtLWJB5tuXdZ0TrDnax7wfD5MizSl405JXEviadD/s7UGHFtjKKa3VrqrZng
OFS3mr14EYd9t9NoNxbjjhNk6+haEXPNi4tQlEPrN2s2tdHpxECCV9Q3GcI9iHzY
wAZrbnkfCUcE6p4r7PJ4bF3leEQWHnc=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:12:20 2026 by rpki-client