Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/6ecda5b1-0948-3748-9b44-25d5e3d082f7.roa
File:                     6ecda5b1-0948-3748-9b44-25d5e3d082f7.roa (raw, json)
Hash identifier:          +S3FZ6JFzOCvf54glmeKiFNRkwWNoJ81f9T/KzOkKSg=
Subject key identifier:   66:D7:04:08:E9:26:EE:C5:99:73:BF:44:5B:F2:CB:07:36:0E:1D:53
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584D5E1A67F0A148478F2F269500
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/6ecda5b1-0948-3748-9b44-25d5e3d082f7.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     53508
IP address blocks:        206.255.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:67:f0:a1:48:47:8f:2f:26:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=a3abcfc8-ad0d-4e36-b42c-95fe9e7c0441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2e:65:80:9d:83:fe:08:0e:51:5a:33:21:c6:
                    d4:5d:20:4f:9d:90:af:36:33:2e:66:53:f9:4b:37:
                    d6:35:19:7b:be:36:f7:4b:90:b7:51:50:da:cc:59:
                    f0:3e:c6:bc:be:f1:e1:7c:73:4c:07:6a:2d:6b:58:
                    96:67:c0:fb:ee:f7:33:c8:a9:5e:0f:4b:8c:49:e3:
                    86:95:c2:a2:72:70:d6:91:47:a1:58:b2:e6:1a:0a:
                    fc:e3:0e:ee:9f:4c:5c:dc:81:e2:60:d4:9e:32:4a:
                    12:e7:ab:b2:62:cd:81:29:f2:f6:79:83:43:a6:21:
                    fd:23:34:29:3c:0b:a6:04:0d:2a:59:f4:d0:41:20:
                    57:5e:8d:44:63:1b:e1:30:31:65:19:7b:29:69:25:
                    a8:6a:d0:dd:b8:dc:c1:d4:ca:d9:47:0b:cf:a3:53:
                    6b:6f:5c:e8:b7:32:c0:ad:88:ca:88:8c:92:2b:04:
                    dd:e4:aa:c2:29:0c:7c:ba:5d:b4:a8:83:57:f6:64:
                    e0:4e:93:6f:83:34:8d:63:7d:c9:e8:6a:05:21:a7:
                    5f:63:9b:5b:ed:5c:b5:2f:38:d1:0d:ee:c2:72:04:
                    3d:32:85:3b:e8:f9:33:1d:61:9a:f3:20:52:bb:78:
                    bc:ea:94:5a:27:b3:04:ec:ba:52:70:6b:4e:2f:76:
                    f5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D7:04:08:E9:26:EE:C5:99:73:BF:44:5B:F2:CB:07:36:0E:1D:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/6ecda5b1-0948-3748-9b44-25d5e3d082f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:8f:86:e9:bd:43:f4:ca:0a:9d:ce:4d:96:43:83:e5:70:80:
         29:52:9c:32:db:fb:26:9a:72:71:7a:4f:1d:b4:d4:12:4e:dc:
         d1:c3:38:2f:f2:08:48:74:91:16:bc:dc:af:33:c3:43:14:19:
         d9:7a:d9:a0:3e:c5:48:4e:fa:13:e2:91:d6:d5:ff:65:17:05:
         1a:a9:3a:bb:3c:a1:84:68:f0:52:c1:e1:db:32:5d:5c:b4:65:
         3f:e8:f1:4c:2b:b5:ff:2d:90:93:c9:a6:08:7f:e7:84:d3:f3:
         9f:cd:d2:0b:92:ce:8f:85:e5:1d:a4:fb:3c:3b:2e:80:ce:0d:
         72:fe:56:c3:f4:7c:71:6d:e5:b4:4a:c1:cb:e1:f6:0e:d5:9b:
         2f:5a:4b:5e:41:63:04:bd:c6:78:c7:87:49:98:49:26:47:2d:
         99:32:84:3a:de:b7:c8:da:e7:25:99:22:1b:8a:38:a9:2e:fe:
         36:7f:09:a3:df:d6:ea:88:b6:51:70:d7:1f:24:1b:74:5b:c1:
         e5:03:1e:7b:c4:ab:3d:6a:7a:3e:11:0b:17:0c:a7:74:87:f4:
         a6:9b:7f:27:2c:50:ea:6f:b5:57:44:9e:4b:16:a4:94:87:51:
         db:92:a1:00:b4:f7:d9:7d:0d:05:cf:5b:85:eb:eb:de:56:35:
         2c:fe:12:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 22:59:28 2026 by rpki-client