Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9e0f79f2-ff7f-329f-9bf0-406f336fe912.roa
File:                     9e0f79f2-ff7f-329f-9bf0-406f336fe912.roa (raw, json)
Hash identifier:          1yRigR1c+d88zn4clGdD5D21SnBP0W5Cjo2QT4k+Wj8=
Subject key identifier:   88:8C:A7:7A:AF:E7:9A:4F:7A:BC:22:42:D9:B0:AB:F5:43:9B:CC:FB
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584D5E1A717C633DDA2D8B9EEB40
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9e0f79f2-ff7f-329f-9bf0-406f336fe912.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     1651
IP address blocks:        24.89.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:71:7c:63:3d:da:2d:8b:9e:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=87c0fc51-b704-4724-b73a-8324416233b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6a:9a:9f:f4:d6:94:aa:10:62:0a:6d:3c:67:
                    21:89:49:21:2f:ec:c9:cf:f6:34:26:0a:14:86:42:
                    54:6b:2b:a0:c5:24:6c:10:d0:55:7b:e5:f5:7a:3b:
                    0e:86:14:86:01:de:8a:42:ed:72:58:39:a1:93:e2:
                    08:f7:4f:b6:3e:e9:84:69:fe:42:36:17:a4:27:7f:
                    f5:83:4c:56:59:b0:c6:d7:73:f2:e4:c2:46:08:b0:
                    a8:6b:31:5a:9d:1b:75:73:45:0f:44:62:bc:54:de:
                    eb:6a:6c:e4:36:45:fc:c7:3b:0f:4e:02:bc:01:26:
                    e8:9d:e6:3a:10:ec:8d:ba:51:02:26:c5:8e:38:1b:
                    e6:4e:d1:25:32:67:10:7b:10:6e:5c:34:9d:ab:28:
                    76:a1:27:d5:eb:18:24:3f:65:19:5b:77:bd:3b:85:
                    4b:62:d2:be:44:ce:23:93:39:47:bb:7c:4f:b1:3e:
                    ab:21:87:84:0a:71:3e:0e:09:cb:e4:bf:8e:c6:54:
                    38:7d:ab:9b:ee:d2:60:e0:28:32:f1:bb:92:10:25:
                    17:5e:20:dc:f8:42:be:82:45:b4:20:39:1d:48:0a:
                    24:01:c8:b2:90:be:98:86:48:39:ab:5d:fd:87:51:
                    84:f2:33:be:09:58:61:dc:4c:28:d9:c3:87:43:95:
                    39:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8C:A7:7A:AF:E7:9A:4F:7A:BC:22:42:D9:B0:AB:F5:43:9B:CC:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9e0f79f2-ff7f-329f-9bf0-406f336fe912.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.89.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:cd:97:06:f8:56:b3:9e:fe:79:1e:97:90:a1:d5:df:a5:09:
         c4:b9:c4:09:f4:ad:be:f7:4d:4c:29:b4:67:24:24:4e:7b:72:
         71:41:ec:cb:98:4a:25:67:91:54:1e:19:69:8b:22:50:f8:f3:
         44:74:73:d1:38:1f:ef:06:af:96:c8:8b:d8:ce:8d:8c:d9:53:
         36:6e:7a:93:b8:82:45:db:68:15:64:e1:46:99:4a:25:d3:af:
         e3:a8:db:70:02:7c:9f:ec:79:2d:09:8e:05:76:e6:b3:45:79:
         e8:7a:52:69:c1:35:55:dc:15:45:76:ef:ad:e3:72:71:47:ea:
         f4:1b:8f:e2:44:c0:1f:ae:91:76:75:58:89:49:a4:2f:18:3c:
         e1:ed:78:6a:51:25:8a:21:26:0b:23:a8:21:bb:1b:f9:d4:5a:
         f8:4f:d6:a5:90:1e:7d:20:6e:23:6f:92:0f:67:bb:cf:36:88:
         3c:2a:4a:ae:60:6e:8c:bc:62:5f:2e:67:f6:b0:cb:bd:23:3e:
         2c:07:13:77:f2:1c:f0:47:0b:02:f7:54:9b:41:f2:d4:65:2e:
         8e:fb:e3:ad:c0:d3:ac:20:95:84:3b:2e:4d:d3:27:54:f8:ac:
         2c:a0:8a:0c:c5:f5:9a:47:13:f9:ff:78:44:66:53:5a:10:1b:
         00:f5:ab:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 22:59:28 2026 by rpki-client