Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bcefe89d-8344-32bc-b256-21feee2c0f0c.roa
File:                     bcefe89d-8344-32bc-b256-21feee2c0f0c.roa (raw, json)
Hash identifier:          agejKiIWPxT5heraZPkWqVQ3fyT2q8js+KBzMiZMHQ4=
Subject key identifier:   B6:DB:C8:5B:80:1F:A6:CE:D6:3E:78:E2:DA:8F:88:66:CC:D0:B3:78
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49730491F9E148B3DC7A9E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bcefe89d-8344-32bc-b256-21feee2c0f0c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396606
IP address blocks:        192.31.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:04:91:f9:e1:48:b3:dc:7a:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c6d6ad68-c3b6-432f-90ea-7ef0a6718f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:62:e2:15:da:da:0d:b8:d8:e2:34:23:2f:2b:
                    bb:14:3a:32:72:44:92:8e:37:40:18:64:58:ab:d9:
                    5c:10:b0:1a:a1:2e:6d:8e:1a:a5:7b:da:fe:88:82:
                    42:c8:f7:f2:0c:b7:7d:b3:56:fe:e7:5d:f4:f1:7e:
                    60:64:c7:c0:cb:c5:17:16:ec:62:23:0d:ec:d6:a8:
                    bc:eb:0a:33:f7:99:d2:a1:d3:c7:65:b2:47:82:ad:
                    91:38:39:59:6a:fd:1b:d6:46:fb:4a:c3:6f:72:25:
                    2d:fa:4c:a9:00:34:26:a1:83:4b:d2:29:8d:9e:59:
                    79:28:15:61:7e:a3:df:b0:e6:a2:4a:f3:2e:ac:cb:
                    2b:24:44:12:a8:67:45:84:ff:24:be:e4:48:88:78:
                    12:de:fa:53:60:81:94:ac:31:e1:a4:8e:d5:9b:8e:
                    47:69:e8:17:ee:b6:68:8c:e1:72:bd:5e:f3:91:4b:
                    d4:d0:4f:81:59:c8:28:de:b9:19:43:2d:5a:c4:a3:
                    2e:2c:83:ed:82:62:eb:f7:41:50:ec:e5:26:6a:04:
                    cf:68:49:f9:8c:9c:2c:df:bd:82:4b:a3:bd:54:84:
                    6b:41:05:80:c9:41:eb:48:a9:b7:80:e8:fd:60:0c:
                    d6:82:a8:6a:c0:eb:d7:5c:8a:fe:1c:4c:46:53:d9:
                    37:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DB:C8:5B:80:1F:A6:CE:D6:3E:78:E2:DA:8F:88:66:CC:D0:B3:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bcefe89d-8344-32bc-b256-21feee2c0f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:6d:dd:4d:6b:cb:34:af:28:90:18:b8:17:f0:d9:1f:4e:08:
         b0:f2:d9:e2:30:2b:77:45:0b:b1:be:fd:43:b1:14:6b:1a:db:
         69:43:87:89:12:04:e0:ea:f1:0d:a3:ee:14:7c:5b:be:b5:0b:
         bd:c3:68:ff:92:b7:6e:9f:9a:c4:cf:9a:3a:55:e0:d4:04:32:
         a8:67:05:11:74:96:32:ea:a2:ef:18:d0:05:96:5f:6d:32:07:
         a6:3c:07:89:26:c4:39:7c:db:d5:af:b9:d0:b5:53:5f:49:91:
         1a:b5:94:8d:6c:15:92:c7:bf:74:00:d9:d0:66:e8:19:2c:e5:
         e8:69:18:b2:55:1b:ab:99:ca:07:75:ac:92:41:93:bc:d8:0b:
         ad:b6:ac:12:85:95:e8:55:bb:b8:07:2b:a0:c4:51:eb:7e:c9:
         bc:78:96:5f:38:ba:66:06:60:91:74:c0:40:32:4e:05:40:6c:
         f8:f1:cc:0e:0a:d3:c6:49:7f:0d:b9:1b:53:fb:cb:81:bb:4a:
         b9:43:45:2e:de:31:31:34:f1:f1:cd:a2:5f:3f:60:98:0e:7c:
         a3:c8:20:04:a5:dd:41:59:d5:b9:3f:98:2c:ed:d3:5a:15:53:
         5d:ac:e1:74:7e:5b:85:dc:53:df:bf:fc:dc:09:a9:cf:6c:87:
         28:1a:63:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:34:41 2026 by rpki-client