Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdf66ae1-2384-3403-9d1a-bb59ee163f99.roa
File:                     bdf66ae1-2384-3403-9d1a-bb59ee163f99.roa (raw, json)
Hash identifier:          h+ioW6yLhL2icDrF5RNkZSg2YgKvi3oau2V+KcSf6oE=
Subject key identifier:   F4:73:A3:B0:5B:94:9A:CC:D2:A6:70:9B:E4:BF:83:E9:0C:FB:03:8A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D6B047405553259FE92081280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdf66ae1-2384-3403-9d1a-bb59ee163f99.roa
Signing time:             Mon 06 Apr 2026 16:02:02 +0000
ROA not before:           Mon 06 Apr 2026 16:02:02 +0000
ROA not after:            Sun 05 Jul 2026 16:02:02 +0000
asID:                     7922
IP address blocks:        208.110.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6b:04:74:05:55:32:59:fe:92:08:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr  6 16:02:02 2026 GMT
            Not After : Jul  5 16:02:02 2026 GMT
        Subject: CN=a47e95b1-a109-4f91-a912-02bbc3ca9150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9a:dd:1e:6d:17:40:ad:18:8b:4c:3f:25:2f:
                    c8:65:f1:98:1a:f5:5e:8e:31:7c:40:aa:a3:36:5a:
                    b3:01:bb:7b:a2:12:84:9e:d2:a2:91:87:17:36:bd:
                    b7:a6:d9:3b:a9:a1:49:e2:ac:86:f1:3d:0b:54:d4:
                    83:2a:39:42:30:e0:72:96:18:cd:9d:06:ce:2f:9f:
                    7b:2b:56:6c:48:0a:3a:2a:03:d3:f8:8f:c5:bc:ca:
                    de:cf:7e:e1:32:d6:b5:88:cb:39:ad:36:b9:87:24:
                    c5:d0:c5:aa:6c:69:56:a6:e4:86:a0:bc:5d:bc:6c:
                    d8:ce:4d:3e:6c:83:39:94:d9:4c:04:79:90:54:ba:
                    f7:3d:b0:7b:54:8c:05:09:64:72:4e:3c:3d:69:28:
                    63:0f:c3:47:4d:d4:44:7e:87:1d:a8:05:5a:e5:03:
                    b9:05:e4:b3:6e:f7:0f:f0:1e:ee:db:70:02:bb:4c:
                    ed:2d:a8:1f:e7:c3:8c:38:5d:5a:4c:10:27:28:d0:
                    f6:e4:e3:e3:bd:c2:72:98:71:3c:45:46:99:b9:6e:
                    f0:58:80:f6:40:5a:96:d2:a3:a2:de:ad:32:aa:e2:
                    b9:40:18:32:57:14:ab:2b:74:35:87:b0:13:ec:fa:
                    28:5c:0a:80:b4:b4:b3:96:f2:00:26:63:85:a8:29:
                    b2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:73:A3:B0:5B:94:9A:CC:D2:A6:70:9B:E4:BF:83:E9:0C:FB:03:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdf66ae1-2384-3403-9d1a-bb59ee163f99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.110.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:7f:07:2e:ce:ea:6c:c1:fd:52:b6:41:0c:16:c5:b7:7c:3f:
         26:fd:3c:6c:46:d7:74:34:8d:27:fb:02:8c:c1:b3:c5:1e:b6:
         a5:ed:8b:a7:e7:e5:59:00:f8:50:ed:cc:b9:ab:58:86:08:26:
         26:f1:9c:0f:b7:cb:88:e2:13:12:98:9a:c6:6f:51:89:4f:61:
         14:ce:1f:65:14:79:ad:fb:4c:50:63:78:1f:49:7b:48:97:cb:
         34:97:f0:5d:70:ab:ae:79:6f:f7:96:ef:ee:b8:06:72:95:ca:
         24:28:8b:67:36:eb:5b:2d:79:d6:f3:ad:5c:cf:c2:47:1b:e4:
         cf:59:17:68:a7:91:e8:4a:ea:3e:84:f4:92:72:c8:21:8e:f3:
         40:53:fa:31:f8:9e:bb:f9:e3:7f:e5:08:2c:de:4f:39:1a:0a:
         28:09:6b:a4:fd:be:4e:71:9a:1a:25:c8:d9:ce:9a:43:c2:d1:
         b9:b6:75:b2:10:6f:c8:9f:56:bf:f4:91:10:07:07:f8:0b:fe:
         fb:fe:10:44:91:2b:78:a3:35:f9:4a:e2:d6:fe:dc:1d:30:fd:
         3a:7d:08:24:dd:54:cf:0a:5c:b8:fe:33:be:5a:d7:5e:91:3a:
         f8:a4:a8:ee:5b:93:33:b4:18:da:fa:95:35:e2:a7:f7:9d:72:
         f0:11:7d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 01:28:58 2026 by rpki-client