Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/5db1674b-8b6d-35c1-8848-158cea416904.roa
File:                     5db1674b-8b6d-35c1-8848-158cea416904.roa (raw, json)
Hash identifier:          XLC5xgr+LEwCzagaoYFa8CQeHszzw84zvufwr5WVEvA=
Subject key identifier:   26:46:32:84:C0:B1:29:69:4B:8D:24:89:1F:10:A7:92:3D:79:1C:AE
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584D5E1A702B3267341B2726D680
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/5db1674b-8b6d-35c1-8848-158cea416904.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     53508
IP address blocks:        206.255.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:70:2b:32:67:34:1b:27:26:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=4928324d-1613-42d4-aae4-bab57acebee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4c:7b:0b:12:6d:50:cc:d4:1a:4b:65:7a:fc:
                    8e:76:16:57:1b:54:59:cf:5e:6c:e7:a9:aa:ea:bf:
                    03:d6:81:e2:b1:b5:d2:72:1e:8a:58:8a:25:7e:17:
                    48:cc:ea:14:3b:5a:46:10:39:76:4c:6e:68:6e:17:
                    47:a8:db:70:d5:21:98:3f:30:7f:58:66:b2:d3:7f:
                    de:5e:c8:f5:d9:19:1d:c8:a1:49:cf:46:b8:fe:6f:
                    98:a5:46:4c:dd:36:f8:a3:d3:e6:f3:ac:18:dc:e7:
                    3b:f2:5a:0a:c5:99:00:f7:01:e7:b8:a7:66:c4:63:
                    24:e4:8c:1c:b2:f4:88:46:62:42:c6:0f:38:2d:cb:
                    de:e6:75:bc:1c:f9:55:2c:da:8a:32:ff:d7:d2:46:
                    15:99:b0:9b:a2:ea:6e:de:9e:1a:e1:b4:db:32:54:
                    a7:fc:a1:59:9f:10:4b:b6:cd:d5:04:1d:ca:3f:ea:
                    42:fb:f1:5d:ce:8d:94:0f:9e:d8:27:8c:f1:92:89:
                    30:f0:6f:c5:6b:ae:c0:38:c6:2d:34:fe:21:de:02:
                    ce:89:26:22:a0:a7:6e:78:ba:ca:b0:c5:9b:f1:73:
                    70:39:ec:82:0c:4d:c7:bf:9c:17:e5:72:62:e9:cc:
                    5d:22:8c:57:17:a1:2e:39:7d:d3:51:72:db:5e:8f:
                    89:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:46:32:84:C0:B1:29:69:4B:8D:24:89:1F:10:A7:92:3D:79:1C:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/5db1674b-8b6d-35c1-8848-158cea416904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:e5:a5:f3:71:c8:c7:8c:9f:b0:27:d1:1c:d9:1d:f2:4d:9c:
         9f:88:fb:83:57:c1:11:2d:14:90:82:ad:a4:5c:2e:68:1a:e0:
         94:4f:d8:6d:9c:98:27:f6:d6:27:c8:f1:f1:d0:08:2a:91:04:
         c5:5b:0d:e7:5f:cf:12:36:43:69:dc:ac:72:ba:9d:47:af:2c:
         e7:d9:00:0e:e5:cb:19:29:b6:3e:fc:e2:29:9a:03:80:7e:a5:
         9d:f3:4e:60:7c:8a:04:01:b9:20:04:b9:0d:49:0e:f6:d3:e4:
         cf:a8:87:78:16:52:fb:97:8b:6f:73:1b:b0:46:0a:8a:1b:73:
         15:3a:18:50:02:5d:64:b1:b2:25:e5:2b:79:38:54:a5:47:54:
         33:cf:3b:8a:80:0b:1b:00:aa:db:e4:a3:29:c2:f7:2f:e9:9d:
         7d:01:65:51:1d:5c:ec:ee:da:96:db:99:12:e8:d8:fd:54:dc:
         70:7b:1b:96:9c:9b:51:18:7c:f3:4c:14:26:9a:2c:6c:ad:90:
         d8:16:f5:f1:13:b7:b0:96:14:14:04:c3:a4:6b:6a:12:28:cf:
         7f:92:a2:71:bb:ed:e0:c4:ea:4e:89:6d:6e:48:91:ab:61:2a:
         d2:a4:64:30:f7:7d:44:f2:4f:62:c3:a4:f4:4e:cf:14:78:df:
         7a:c6:7c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 23:00:07 2026 by rpki-client