Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7e2175eb-4a04-310c-b9fd-72861a506b88.roa
File:                     7e2175eb-4a04-310c-b9fd-72861a506b88.roa (raw, json)
Hash identifier:          h1Ga0bC8gls9MvRKvA9BAOUXrwTE+kD5cvwtGJF8Rjc=
Subject key identifier:   F3:49:41:E1:16:04:5B:89:B5:C5:BE:87:EB:F7:8D:54:DE:AB:15:EA
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584D5E1A66F1D9B3B4E84AF37500
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7e2175eb-4a04-310c-b9fd-72861a506b88.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     53508
IP address blocks:        206.255.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:66:f1:d9:b3:b4:e8:4a:f3:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=e0351a5d-9e1e-4dd9-b635-5862d9bf3838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0d:2b:ce:64:26:42:15:dd:ad:5d:32:16:0a:
                    8a:a9:19:79:4c:21:1b:72:bb:4f:f8:bf:f3:93:5f:
                    42:fb:be:6b:09:10:90:2d:1d:cc:a1:66:ee:57:3a:
                    86:7a:7f:f6:9b:cf:eb:4e:30:b8:8d:6a:a4:a6:a1:
                    30:95:80:3d:a8:21:e8:79:bc:e0:43:c4:72:e7:98:
                    ee:43:a0:88:8c:a4:fb:c9:8f:d6:e0:2b:fa:68:6c:
                    77:8a:61:96:4b:9c:46:cd:50:8b:95:6a:d8:33:c8:
                    70:c9:87:a2:91:79:46:e0:8e:90:b7:45:a7:45:b1:
                    72:d3:ec:c9:87:d0:68:9c:00:44:7d:30:ef:2f:54:
                    97:0e:16:b7:30:07:58:aa:f1:51:9c:22:96:95:94:
                    f9:2c:6f:97:b4:cf:a3:ce:4e:ab:a5:c3:14:84:87:
                    01:63:29:15:8d:af:57:52:c3:d7:c4:0a:7f:9a:75:
                    58:1d:b6:0c:f7:84:97:fb:aa:e8:bf:67:d8:13:89:
                    21:ad:69:78:9a:aa:fa:c8:ab:12:a5:e5:6e:38:40:
                    8b:09:85:c0:23:56:f1:14:f5:5f:41:62:d9:1c:bd:
                    18:e4:f8:50:21:0f:cf:bc:bf:5a:5c:51:a9:76:f7:
                    db:d8:48:6c:c4:87:08:6c:31:77:9e:9a:6a:34:04:
                    b9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:49:41:E1:16:04:5B:89:B5:C5:BE:87:EB:F7:8D:54:DE:AB:15:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7e2175eb-4a04-310c-b9fd-72861a506b88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:e7:39:86:b8:5c:2b:df:0a:90:07:74:02:95:02:80:ee:1e:
         da:c2:ef:1b:86:4e:58:1d:d2:77:62:ff:15:28:9a:a9:6c:a4:
         a5:a6:c2:35:e0:0b:a9:db:05:71:d9:33:87:1f:c0:57:c9:b4:
         07:13:a2:70:56:01:98:eb:1f:06:74:00:77:a2:e5:6f:fa:7a:
         94:80:f0:fa:93:85:00:8d:7a:85:25:ec:ed:ef:1d:c5:37:16:
         e7:e7:59:57:03:a0:0f:4b:ed:c7:45:49:88:63:77:e2:e6:46:
         04:ec:25:14:3f:48:ea:b6:c4:ce:73:cd:5a:46:7c:84:f7:d1:
         0d:ae:49:e7:b6:8b:17:f0:03:7d:47:5b:25:96:c9:71:fb:2b:
         8d:8f:b4:90:11:b0:dc:7f:09:88:d5:65:9b:e4:b1:bc:74:e5:
         6b:a7:e9:9e:c6:88:67:89:5e:33:74:42:c0:d9:06:27:56:23:
         b8:59:2b:33:d5:ff:90:cc:06:91:55:21:3f:05:82:48:5d:44:
         d7:f2:03:28:ec:5b:eb:69:eb:2c:11:5d:81:21:f8:50:e1:92:
         7b:82:c9:7e:8e:30:d0:97:60:a3:3f:d3:69:45:cf:f7:1f:4d:
         fe:2a:69:23:91:e2:27:b6:aa:01:b2:5e:d8:15:c2:ed:62:87:
         69:e3:90:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 23:00:04 2026 by rpki-client