Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/f247a697-5581-3f8e-84fb-f13e92b1109c.roa
File:                     f247a697-5581-3f8e-84fb-f13e92b1109c.roa (raw, json)
Hash identifier:          QpAgNpHUk4QqfUC51BgFZ2eAZKvMTwxrnKoFqukDVrw=
Subject key identifier:   FF:CF:B9:2D:3D:96:59:93:EA:D5:A3:EF:D5:E5:E7:E8:0B:09:09:B8
Certificate issuer:       /CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6
Certificate serial:       010D0C9F4328584D9FB56E8BF778B995CB8DF700
Authority key identifier: 7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/f247a697-5581-3f8e-84fb-f13e92b1109c.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     11588
IP address blocks:        192.222.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:6e:8b:f7:78:b9:95:cb:8d:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=61190a8d-d15a-4f59-975b-344a5b77b91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:34:66:4d:0f:a8:26:9f:22:5b:45:0e:43:16:
                    b0:70:df:55:f8:de:10:b6:3b:48:64:da:3f:c5:ec:
                    bd:2e:7c:5c:4b:93:19:77:97:af:75:4d:28:8e:16:
                    2f:00:00:db:c4:96:cb:82:64:89:c0:52:4c:8a:7d:
                    95:f1:39:9f:91:d6:e0:75:cb:eb:5c:67:dd:f1:05:
                    d0:1d:32:5c:8d:7f:44:df:c7:61:d1:35:d0:42:4c:
                    c1:d6:d3:68:55:c6:66:95:3e:7a:42:b4:e3:6d:b1:
                    c4:07:dc:22:63:c2:91:4b:14:81:1c:a8:72:d2:58:
                    6f:60:96:c8:5d:3b:94:64:5b:df:4a:8c:9f:96:77:
                    a6:e5:e5:1b:df:3a:37:e5:70:f9:85:d9:75:e4:36:
                    ea:f4:72:58:d0:22:d8:70:f5:8f:6f:65:95:62:a4:
                    0d:97:d9:b3:5f:e4:53:e1:d6:1c:5c:9f:f0:81:48:
                    2e:de:63:9c:61:19:40:9f:2a:07:db:ba:07:40:9c:
                    24:b7:f1:5f:47:db:c5:3c:35:b6:f8:49:16:98:99:
                    7d:70:f5:36:09:a3:77:4f:68:62:f8:e1:f8:1a:21:
                    db:99:c3:11:2d:05:0c:bd:c7:a3:e0:ce:a7:f1:dc:
                    0a:71:98:bf:b1:f8:28:35:68:23:6b:8f:11:5f:5d:
                    24:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CF:B9:2D:3D:96:59:93:EA:D5:A3:EF:D5:E5:E7:E8:0B:09:09:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/f247a697-5581-3f8e-84fb-f13e92b1109c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl

            X509v3 Authority Key Identifier:
                keyid:7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.222.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:e1:f0:d0:a4:6b:82:69:1f:07:25:80:08:b7:9f:1e:e9:d6:
         26:24:01:19:4d:2a:d0:d8:f6:ee:53:af:c5:f2:5b:4d:6a:89:
         1a:fa:e6:90:68:3b:84:e8:08:5e:f6:01:86:8a:3f:73:da:7f:
         4f:6c:4c:bb:d8:62:eb:ad:36:c4:43:93:7f:7a:57:45:d6:f1:
         e6:b6:bb:6d:ab:e0:2a:30:5d:a2:9b:37:67:46:55:91:9f:2e:
         a4:d5:7f:ea:f6:07:71:b6:5a:3c:b9:44:1a:18:94:c0:50:a9:
         5c:70:f8:c4:6a:54:cd:1c:e3:50:d5:0f:e4:d8:04:8d:1c:2b:
         f4:b0:9e:3d:13:94:af:28:56:68:d1:12:85:cd:64:a5:2d:cd:
         ae:3f:23:c3:25:a9:75:10:5a:40:15:7d:a7:38:75:85:28:3e:
         97:1f:a9:fc:f8:28:74:b1:e8:d9:16:8f:cd:44:d9:26:39:5d:
         cc:61:fd:a4:b2:70:07:a9:4b:e3:2b:eb:72:7e:4a:d4:12:ec:
         16:a9:9a:d3:2d:3a:69:38:5a:79:cc:a1:76:41:60:15:99:59:
         ad:61:ed:86:bf:2a:dd:7f:79:84:ce:f1:ea:1f:dc:33:44:45:
         d2:94:02:4d:f1:0b:85:6d:b4:0e:d3:31:92:64:82:b2:87:1b:
         c3:21:1c:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftW6L93i5lcuN9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNiMzZhN2ItYmYzYy00YTgxLThjNWItYTQ4ZDFhNTdk
MmQ2MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk
NjExOTBhOGQtZDE1YS00ZjU5LTk3NWItMzQ0YTViNzdiOTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDRmTQ+oJp8iW0UOQxawcN9V+N4QtjtIZNo/
xey9LnxcS5MZd5evdU0ojhYvAADbxJbLgmSJwFJMin2V8TmfkdbgdcvrXGfd8QXQ
HTJcjX9E38dh0TXQQkzB1tNoVcZmlT56QrTjbbHEB9wiY8KRSxSBHKhy0lhvYJbI
XTuUZFvfSoyflnem5eUb3zo35XD5hdl15Dbq9HJY0CLYcPWPb2WVYqQNl9mzX+RT
4dYcXJ/wgUgu3mOcYRlAnyoH27oHQJwkt/FfR9vFPDW2+EkWmJl9cPU2CaN3T2hi
+OH4GiHbmcMRLQUMvcej4M6n8dwKcZi/sfgoNWgja48RX10k6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP/PuS09llmT6tWj79Xl5+gLCQm4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iY2Iz
NmE3Yi1iZjNjLTRhODEtOGM1Yi1hNDhkMWE1N2QyZDYvZjI0N2E2OTctNTU4MS0z
ZjhlLTg0ZmItZjEzZTkyYjExMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmNiMzZhN2ItYmYzYy00YTgxLThj
NWItYTQ4ZDFhNTdkMmQ2L2JjYjM2YTdiLWJmM2MtNGE4MS04YzViLWE0OGQxYTU3
ZDJkNi5jcmwwHwYDVR0jBBgwFoAUfPaBL9QJ/Qs44zusnpOitJm0xiMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iY2IzNmE3Yi1iZjNjLTRhODEtOGM1Yi1hNDhk
MWE1N2QyZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwN4wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF/h8NCka4JpHwclgAi3nx7p1iYkARlNKtDY9u5Tr8XyW01qiRr65pBo
O4ToCF72AYaKP3Paf09sTLvYYuutNsRDk396V0XW8ea2u22r4CowXaKbN2dGVZGf
LqTVf+r2B3G2Wjy5RBoYlMBQqVxw+MRqVM0c41DVD+TYBI0cK/Swnj0TlK8oVmjR
EoXNZKUtza4/I8MlqXUQWkAVfac4dYUoPpcfqfz4KHSx6NkWj81E2SY5Xcxh/aSy
cAepS+Mr63J+StQS7BapmtMtOmk4WnnMoXZBYBWZWa1h7Ya/Kt1/eYTO8eof3DNE
RdKUAk3xC4VttA7TMZJkgrKHG8MhHPU=
-----END CERTIFICATE-----
Generated at Wed Apr 29 15:28:14 2026 by rpki-client