Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8b6d91b2-539c-36e5-879c-1ea9b18ded7d.roa
File:                     8b6d91b2-539c-36e5-879c-1ea9b18ded7d.roa (raw, json)
Hash identifier:          p91TxU6tg17bLzvZ/OifGglK/bwTrEuxvdSYbFNcHf0=
Subject key identifier:   72:C2:2B:74:3E:A4:4A:6F:E2:3F:A1:58:2C:96:ED:82:69:AB:84:C8
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584D5E1A7101E8F003528BEF5380
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8b6d91b2-539c-36e5-879c-1ea9b18ded7d.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     53508
IP address blocks:        206.255.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:71:01:e8:f0:03:52:8b:ef:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=827c5015-e483-4aaf-b2d7-0105a40cf285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b3:6a:90:c8:ba:e5:34:7b:fb:8c:91:6d:e2:
                    a3:4b:00:b0:a4:f3:dd:97:a6:4b:2b:a4:21:55:d6:
                    da:a4:28:84:64:a6:b5:b3:f0:8a:0f:ea:f8:ac:69:
                    40:5c:6f:cf:0b:4f:c7:26:09:7f:58:9a:23:0f:f8:
                    d0:e0:86:88:c5:6b:98:40:38:75:71:7a:db:3e:b0:
                    f3:0d:4a:72:f7:62:f8:ee:7f:24:02:98:44:0d:8d:
                    c6:5c:f0:9a:e9:84:09:0a:ef:21:56:7c:d4:69:50:
                    92:78:2e:15:63:53:5d:9c:b0:5b:36:9a:90:24:23:
                    5e:b8:db:cb:02:26:0c:67:89:d6:b0:c8:ff:41:3e:
                    47:1a:c0:7c:8e:0f:7b:69:74:4a:91:04:8c:6f:ba:
                    1b:dc:08:d5:2c:7f:38:69:10:76:c5:9c:1b:85:58:
                    24:dc:e8:f0:ff:f1:ea:a8:6e:a3:38:9d:22:c2:4e:
                    03:8b:ca:38:1e:da:ba:23:4e:b6:26:ed:ed:a4:1d:
                    57:9a:76:5e:78:18:68:b4:84:ca:c3:72:85:90:f2:
                    25:bf:64:92:19:82:4a:97:76:b7:11:a4:11:cd:43:
                    34:4a:19:eb:99:85:0d:ea:3b:01:bf:03:a8:95:93:
                    07:b4:e9:f4:cf:f9:65:44:4f:a6:07:78:1e:b0:a5:
                    6b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C2:2B:74:3E:A4:4A:6F:E2:3F:A1:58:2C:96:ED:82:69:AB:84:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8b6d91b2-539c-36e5-879c-1ea9b18ded7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:a8:d8:61:f6:55:c6:95:8d:98:99:9e:c8:81:ab:7c:b4:c7:
         67:78:1e:cf:7a:0d:23:04:99:2b:75:82:9f:69:08:65:22:3f:
         04:ae:9b:a6:84:10:62:ad:6c:1c:3d:a8:23:f4:42:5e:61:a8:
         0b:82:88:69:f9:82:05:a5:b5:f4:25:77:46:f5:b9:50:f6:92:
         1d:8e:7a:ec:31:ec:ea:a6:14:67:2e:f2:e8:9f:99:18:d9:9a:
         0c:23:3d:c9:68:b4:41:6c:77:8a:48:03:2e:21:ca:4f:f8:d8:
         4b:57:cd:ed:87:a0:fe:dd:60:58:68:bf:a3:6a:d6:ff:68:d4:
         48:ee:3a:e1:ba:ab:e6:74:54:53:66:e0:ea:27:e1:8c:f7:b1:
         f4:da:e7:37:c3:e4:d0:82:9e:28:63:4b:ec:c1:f8:04:21:0a:
         c0:d0:e5:35:de:8f:0f:d7:d6:d1:5c:32:59:a3:87:dc:7a:7f:
         47:68:e6:17:b8:af:cf:4c:3a:3f:9b:68:65:9f:7f:0f:8d:bb:
         6d:cb:dd:17:1b:95:13:e3:fc:9b:b1:c7:0f:47:a6:89:44:a5:
         f5:09:19:ac:1a:82:4d:3f:51:df:da:d3:9b:e0:91:43:cc:ee:
         7d:fb:01:2d:82:e5:a5:d4:ff:3e:a0:10:28:43:eb:ab:df:45:
         73:6f:a6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 22:58:52 2026 by rpki-client