Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/bc6daf32-8311-3408-ab08-6000c81457c8.roa
File:                     bc6daf32-8311-3408-ab08-6000c81457c8.roa (raw, json)
Hash identifier:          MtPp9uOhSHqTABdxejJF94mUsY4/6My6h++7apBylVs=
Subject key identifier:   D3:4D:87:9F:38:35:36:2D:28:E3:F1:A1:36:95:E9:CC:FC:84:8F:26
Certificate issuer:       /CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd
Certificate serial:       010D0C9F4328584CC4AC75F8BFF507ADE7B9D000
Authority key identifier: 6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/bc6daf32-8311-3408-ab08-6000c81457c8.roa
Signing time:             Fri 06 Feb 2026 02:00:30 +0000
ROA not before:           Fri 06 Feb 2026 02:00:30 +0000
ROA not after:            Thu 07 May 2026 01:00:30 +0000
asID:                     4922
IP address blocks:        173.249.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c4:ac:75:f8:bf:f5:07:ad:e7:b9:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd
        Validity
            Not Before: Feb  6 02:00:30 2026 GMT
            Not After : May  7 01:00:30 2026 GMT
        Subject: CN=c6c30367-1909-4426-a443-69811110fe6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:17:17:a7:48:f6:d0:0d:64:79:dc:05:15:8e:
                    78:f2:99:5b:1a:00:12:4f:9c:45:b6:02:35:a6:0b:
                    04:77:1f:19:3c:c5:bc:16:00:91:38:0b:91:ec:d6:
                    ed:f6:45:72:c2:60:1e:be:ed:76:65:4a:a3:c5:24:
                    d9:17:ef:41:34:10:c7:bc:a5:2e:0f:98:bd:97:de:
                    2b:57:02:1a:68:50:84:63:07:1a:bd:a1:5f:fb:8a:
                    44:9f:71:f3:32:ae:ff:d5:40:f8:8f:bb:05:5b:3d:
                    d2:1a:89:e2:eb:09:31:03:4b:f3:45:6f:33:a4:20:
                    35:19:5b:2c:56:b7:17:ca:22:76:66:09:3b:00:da:
                    d1:df:b5:61:59:46:63:7e:a9:17:60:90:70:b7:32:
                    14:02:62:3d:69:3c:f5:12:79:a4:1a:66:5d:a9:4f:
                    1b:d9:f6:48:8a:06:cb:75:e1:75:cf:c1:19:4f:61:
                    a0:86:07:5b:95:10:d7:07:0b:c4:19:d6:57:42:a1:
                    d2:43:d2:41:78:cd:58:ba:52:30:5f:33:9b:2c:70:
                    8a:a7:7e:b3:f0:8c:a8:8c:11:d6:14:10:1c:d2:24:
                    b6:00:b1:b5:4c:22:92:01:33:b7:e2:20:c2:c5:65:
                    40:fa:f3:53:c6:96:9a:e6:bb:6e:2e:01:41:ad:d0:
                    73:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4D:87:9F:38:35:36:2D:28:E3:F1:A1:36:95:E9:CC:FC:84:8F:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/bc6daf32-8311-3408-ab08-6000c81457c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl

            X509v3 Authority Key Identifier:
                keyid:6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:33:30:dd:d6:f5:20:a1:fe:38:e5:88:f8:a9:a6:82:b7:9a:
         85:a0:88:44:5a:bb:39:6f:22:dd:6a:0f:06:01:6a:5e:d5:5b:
         77:df:68:1d:b5:0e:51:4e:75:01:78:4a:ee:36:6c:48:fb:aa:
         64:02:84:02:f6:ff:7a:88:cf:13:6a:55:d9:4e:bb:c4:bb:79:
         ea:63:93:5c:40:6f:8b:16:12:3e:13:5a:33:2b:2d:fc:5c:49:
         b4:50:c2:23:27:ea:e7:55:60:65:0d:bb:21:30:e2:8c:54:08:
         4b:75:27:72:92:1d:e1:cb:5d:0f:0d:9d:59:3f:cb:66:97:b0:
         04:fe:6c:75:87:f6:fe:56:b3:c2:36:da:7c:3e:d7:4e:30:0b:
         34:0a:8d:10:21:33:17:b8:41:fd:a2:08:41:ca:44:2d:ef:74:
         4f:3f:b9:05:3e:1e:25:1d:8b:68:c2:a7:cb:b2:1e:05:5d:f5:
         0e:56:3c:46:26:7d:89:38:f9:60:20:a7:8d:bd:74:8d:e3:a5:
         73:43:86:d4:7e:61:66:fb:e3:ce:ea:3c:b0:48:57:e8:04:fa:
         f8:bf:89:a3:99:c3:02:2e:9d:fb:14:19:f8:65:f1:bf:3d:9a:
         28:76:e0:ab:00:a6:46:ed:82:77:88:f4:f8:af:91:b9:31:c1:
         59:a0:67:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 22:52:30 2026 by rpki-client