Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/4947827a-81e3-3c67-8152-d53e2abb4dab.roa
File:                     4947827a-81e3-3c67-8152-d53e2abb4dab.roa (raw, json)
Hash identifier:          MUCBI5wXHGiWuoq0gi98iwNv6evD7wmiSPZxb6Yhcr8=
Subject key identifier:   96:6A:81:1C:F3:58:BC:69:EF:8F:A6:BA:FD:B5:E6:82:4E:20:6C:3A
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F4328584DC6CB09F9532BB26EC78FC980
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/4947827a-81e3-3c67-8152-d53e2abb4dab.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     46450
IP address blocks:        158.106.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:cb:09:f9:53:2b:b2:6e:c7:8f:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=d29fba46-3fdf-44d2-93d4-246d36802c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fb:86:68:24:f7:3a:fe:44:7a:94:be:78:e6:
                    80:46:98:5f:2e:07:0d:f8:34:9c:65:fc:2a:36:22:
                    31:46:d2:4c:3b:c6:7c:02:fe:3a:d6:c8:ea:07:51:
                    e7:98:85:32:c8:dc:f0:32:83:31:1b:28:29:49:39:
                    f8:b1:f8:35:42:4c:7a:60:86:d3:d9:cb:68:09:2e:
                    b8:54:59:ee:b2:9e:b7:d0:68:84:c6:ec:2a:12:4b:
                    21:74:4e:7d:04:b1:a2:7f:6c:3a:af:f7:87:d8:3f:
                    26:58:08:7f:75:b7:c5:74:14:11:85:bc:00:70:19:
                    87:d5:3d:01:c3:70:85:e4:61:6e:9f:9b:11:47:6c:
                    84:64:46:76:60:51:9e:80:71:59:1c:ca:bb:80:0c:
                    62:e7:bf:a0:04:8f:c0:33:5f:2e:96:97:17:92:37:
                    d1:b9:73:07:d6:2c:66:6d:aa:81:d0:4e:7f:d1:05:
                    25:95:0d:c4:a1:a0:70:ec:20:80:98:63:1d:1a:c2:
                    25:fc:e9:07:e1:51:7f:22:06:c5:e3:7f:13:5d:44:
                    ef:b1:2f:eb:b7:62:0a:88:f4:3c:f9:ba:5b:72:92:
                    92:9a:0a:67:ab:da:e9:04:b7:1c:44:66:ce:d4:08:
                    06:61:2f:9b:cd:15:3e:fd:11:bd:7f:02:7a:18:9c:
                    35:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:6A:81:1C:F3:58:BC:69:EF:8F:A6:BA:FD:B5:E6:82:4E:20:6C:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/4947827a-81e3-3c67-8152-d53e2abb4dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.106.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:bc:bb:8b:a3:48:51:8d:be:ea:1c:e4:27:45:f8:55:63:bb:
         1a:cb:89:0c:e1:27:bb:bc:b1:dc:d9:dc:01:7f:d2:d3:b2:48:
         ed:42:c7:be:d3:af:42:07:01:d6:2d:1a:20:80:88:2c:ec:07:
         89:f9:2d:7c:45:fe:eb:2a:1c:d4:19:b1:c1:02:63:f3:e6:8c:
         c0:2e:99:83:ba:24:61:b0:f8:ed:dd:f9:6e:be:14:65:84:5f:
         73:ea:35:aa:9a:ff:89:9a:2b:bf:43:ae:b1:2a:ec:00:7c:fa:
         28:c0:a2:bd:de:e1:12:6c:38:2d:fd:ec:84:59:e7:49:d8:99:
         d9:2f:aa:ad:44:38:37:4b:1f:97:3b:e7:d7:ce:cf:a4:d1:8c:
         69:ba:0d:3c:57:db:58:84:ea:34:6c:e0:e2:19:2b:de:37:94:
         85:af:50:27:fd:72:eb:14:3d:df:be:25:90:ce:56:a2:d1:fd:
         2c:69:09:95:74:df:17:b6:58:e3:81:61:c7:12:19:04:5f:58:
         92:d0:33:5e:ae:9c:2a:51:bf:8e:64:ea:17:38:2b:34:ac:d0:
         13:5d:80:ed:9d:5c:56:f8:6f:d7:92:e8:6c:11:c8:39:fc:ce:
         ed:0a:63:50:57:95:93:9b:72:f3:ab:a6:91:35:2d:7e:99:00:
         39:3c:6f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:16:44 2026 by rpki-client