Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a72517c8-1d52-3d75-a9a7-f9badad56345.roa
File:                     a72517c8-1d52-3d75-a9a7-f9badad56345.roa (raw, json)
Hash identifier:          NjHuJxbim/3NqIK4XL+rEd8wSD+bPm0nr+2eLoSccEc=
Subject key identifier:   E4:85:35:00:70:64:DA:BB:22:DA:05:A2:C5:E3:5D:D8:63:86:37:BC
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584D55BA4AA13EA673A661633D00
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a72517c8-1d52-3d75-a9a7-f9badad56345.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     53508
IP address blocks:        206.255.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:4a:a1:3e:a6:73:a6:61:63:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=101fba17-368c-4921-8a4d-41ff3d84166c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:96:fc:5b:c1:98:97:f4:a0:1b:64:ca:f1:95:
                    a2:35:87:38:12:9e:b0:cf:d4:57:35:8f:c4:5b:da:
                    ef:16:08:39:05:77:9f:c9:d8:ed:a6:23:d4:58:88:
                    b5:54:36:c8:c5:26:be:85:94:de:b3:ee:c3:a5:9f:
                    3a:d4:5b:1f:01:59:83:eb:b9:d4:3a:e9:e2:31:5b:
                    14:34:bc:70:9b:ac:11:30:bc:81:67:1d:82:42:6b:
                    d1:02:04:05:7b:96:d7:a3:51:44:5d:f2:f6:68:b3:
                    c0:39:fb:c4:87:0e:18:14:2c:a6:ab:8b:9b:65:02:
                    e6:20:18:27:2b:1f:b4:6f:07:f6:5f:4f:38:ec:57:
                    66:06:21:46:f0:cd:98:18:c5:e1:69:67:74:5a:84:
                    43:68:55:18:5c:33:91:17:9b:72:87:55:96:27:92:
                    2e:fe:fd:de:8a:36:7c:ee:85:e6:80:9b:1b:4d:e1:
                    2f:f5:4b:cc:d1:60:2e:37:ab:7a:68:d1:a5:5b:05:
                    b9:4c:be:29:c0:75:2d:42:1b:93:21:11:49:4a:94:
                    e9:cf:78:2c:6a:aa:eb:2a:01:d9:64:92:00:21:44:
                    f2:73:31:8e:8b:ac:60:05:e3:12:04:9c:ab:47:f1:
                    36:35:84:19:c8:9f:4f:2b:2c:a0:a8:16:a6:a3:da:
                    eb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:85:35:00:70:64:DA:BB:22:DA:05:A2:C5:E3:5D:D8:63:86:37:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a72517c8-1d52-3d75-a9a7-f9badad56345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:72:1c:09:e7:26:4d:c5:a5:04:ea:d6:d4:8d:6c:8c:57:c1:
         0d:01:4b:d5:af:f6:da:f1:6f:f6:05:68:a4:cd:3c:d0:76:95:
         41:d1:10:78:98:25:ed:39:e0:eb:dc:c3:be:2b:89:37:7c:4e:
         23:7c:7a:f2:c2:a7:8b:15:3f:d4:f9:fb:ce:65:df:cd:5d:36:
         5f:4b:31:d6:b7:d4:97:1e:24:7f:7b:dc:cf:cc:30:80:8d:2e:
         88:3c:01:ab:85:ae:38:f4:9f:25:f1:6b:c3:db:4e:ea:da:bd:
         ad:fd:e8:d5:a8:2b:62:bd:26:42:5c:d9:92:4a:28:0e:af:f3:
         0d:95:97:86:f1:54:d1:d4:15:7f:65:75:0f:ce:3d:dd:8e:6d:
         37:c5:5f:a8:09:80:64:21:3a:92:6a:28:13:0f:40:97:9f:ef:
         71:1b:d9:3c:4d:cb:67:bc:b2:14:75:c4:38:3f:9b:d1:e7:00:
         7c:ec:46:33:14:d8:e3:4a:2d:76:85:83:68:49:ba:78:b2:cb:
         97:8e:33:a9:41:fb:17:7e:71:46:0e:9f:92:ae:d7:c4:8b:9c:
         a4:30:30:2e:ca:23:0d:f8:f8:b7:6c:4a:c7:e7:a4:d4:aa:9f:
         97:55:81:f3:c0:f5:10:bd:d3:9f:c5:f6:36:dc:0a:e3:11:cd:
         89:db:8b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 23:00:22 2026 by rpki-client