Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9100553e-9dda-370f-9c2d-8c5195e4e885.roa
File:                     9100553e-9dda-370f-9c2d-8c5195e4e885.roa (raw, json)
Hash identifier:          ivMNxvMx5dZpenkMjdzxF8irsWjL+6pMvF6BIg/GHro=
Subject key identifier:   8B:8C:D6:B9:CD:F5:B6:99:75:24:14:DA:2D:FC:A5:46:94:7A:C9:FC
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584D55BA4AE8430215373B242800
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9100553e-9dda-370f-9c2d-8c5195e4e885.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     53508
IP address blocks:        206.255.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:4a:e8:43:02:15:37:3b:24:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=eb6d5410-3650-4dbb-b7d9-4a2fa3f645b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:35:af:c7:41:f7:02:5c:86:8f:bc:ff:5a:7f:
                    ea:50:18:69:e0:fd:ea:05:c2:44:24:2a:1a:c0:9c:
                    f1:27:20:ed:1c:2e:0f:cf:6b:93:b9:b9:3b:d3:48:
                    72:83:77:75:04:4c:be:bd:85:c7:0a:dc:04:91:71:
                    b5:9a:a6:6d:d2:4d:03:bf:e9:b3:5a:26:d0:5e:6e:
                    90:a6:9e:90:42:7b:6a:1e:14:2a:d5:6c:bb:b2:7d:
                    72:4b:d2:2d:45:ab:05:1c:e3:62:4e:21:fd:6e:ed:
                    cd:ef:9d:e8:39:25:78:76:b9:c7:bb:5b:21:17:b9:
                    8f:31:e5:b5:81:de:32:bc:9c:e2:26:da:32:24:65:
                    ae:d3:27:4d:11:1c:91:72:6b:47:ab:1c:d9:47:25:
                    ac:1e:41:12:90:86:4c:cc:d1:a1:a6:56:4a:0c:24:
                    d6:92:69:34:8c:51:1f:f9:0a:8c:2d:50:40:aa:2f:
                    9f:11:49:41:9d:d0:75:c6:35:57:a9:15:2c:40:6c:
                    b4:fa:48:e7:75:20:c8:4a:82:ac:ab:f7:73:8c:f7:
                    2e:d2:73:8f:41:37:44:64:da:56:a9:a1:d8:71:b3:
                    f3:6f:99:f1:80:c3:e3:d8:e9:c0:40:9a:cf:f0:24:
                    55:15:6f:95:63:1d:4f:47:e9:31:13:2b:0a:32:6d:
                    31:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8C:D6:B9:CD:F5:B6:99:75:24:14:DA:2D:FC:A5:46:94:7A:C9:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9100553e-9dda-370f-9c2d-8c5195e4e885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:88:51:d9:07:50:b1:8d:f5:7b:e1:6b:92:73:e5:b0:30:bb:
         30:2e:1f:7b:4a:5d:8e:dc:06:c9:87:37:44:fa:4b:11:04:71:
         b5:a6:f2:06:43:c8:ee:c2:ca:6f:8f:d9:e3:d1:4c:9c:7b:19:
         17:e6:3e:be:43:c7:a2:ff:f0:a8:2d:47:b5:5f:6a:dc:c6:04:
         e5:c5:6c:70:90:c2:e8:a7:ad:5e:5d:d6:33:2e:68:d0:92:0d:
         3d:56:86:8a:e3:0b:8b:2f:4a:74:e3:f9:56:c8:89:12:17:84:
         ce:53:a2:75:8a:4a:38:35:ed:20:38:6e:65:c0:7d:0c:db:93:
         3c:9b:6b:db:4b:b1:48:3b:9c:04:59:a9:f9:6d:86:53:34:9c:
         47:d6:cc:20:e1:c0:6b:7e:ef:b6:2e:87:92:b3:3c:27:46:56:
         00:b9:bd:57:fb:f3:94:85:2b:7e:c3:ed:2c:83:9c:ca:0c:8b:
         fa:10:c9:e0:0a:43:62:16:85:92:02:27:0d:a9:e6:bf:d2:b0:
         fb:f8:3e:08:34:e8:c8:b8:b0:71:f1:78:e3:df:8d:82:f6:81:
         00:ec:09:ac:87:d3:08:a2:8a:60:5e:d0:3b:54:19:a6:7d:9b:
         e8:3e:9e:7f:80:91:fd:a3:bf:8b:38:3c:b4:45:33:7a:73:a2:
         b2:63:5c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 22:58:52 2026 by rpki-client