Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ad749b06-bfcc-3368-9e93-e9f287922691.roa
File:                     ad749b06-bfcc-3368-9e93-e9f287922691.roa (raw, json)
Hash identifier:          dyFXAPrROIZJ0riDF44uxtkTCqO3VJuNULiYwfKZrIg=
Subject key identifier:   29:39:B9:13:2F:D6:BE:1D:D2:68:5B:3A:23:05:52:2A:38:F5:64:25
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584D5E1A6FFC128260D032ED1600
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ad749b06-bfcc-3368-9e93-e9f287922691.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     53508
IP address blocks:        206.255.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:6f:fc:12:82:60:d0:32:ed:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=3b7dcb97-ba09-4e68-bdb8-b8772a24b39f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:74:03:64:da:5d:00:07:51:15:cf:42:25:0e:
                    d8:c2:f2:bc:03:c1:c6:e5:fb:f8:43:15:46:2b:1b:
                    76:86:cf:f2:e0:cc:91:70:a2:ce:8b:6a:ae:e3:6f:
                    17:bf:b3:ed:8f:db:72:df:08:ee:bc:93:41:8e:45:
                    9f:58:7a:a6:e0:79:15:93:c1:32:c7:eb:3c:2f:df:
                    a1:cd:bd:38:b3:c6:4d:ec:80:53:79:04:3a:9f:21:
                    cd:e1:32:92:ba:3b:5f:cf:7d:73:43:0a:bd:19:16:
                    9d:3e:c1:6f:19:02:4d:c2:1e:07:55:4b:2d:b7:cb:
                    72:d2:38:4a:eb:6a:4f:bc:3a:f3:2a:7b:e9:6e:58:
                    27:39:2b:6e:7c:1b:10:5e:d7:67:c2:a6:25:c5:94:
                    b4:6d:6f:14:1d:c5:dd:1a:fa:f5:6f:6f:00:04:7b:
                    58:32:89:26:0a:27:d6:77:50:d6:d0:06:87:2f:3c:
                    75:ff:6d:c4:02:f6:88:c1:1e:d9:fa:5a:3f:58:7f:
                    9f:91:b1:40:f4:b0:d3:6b:a7:be:51:19:e4:39:dd:
                    6b:e8:17:9d:1b:d8:be:2c:e6:d5:61:ff:68:1e:04:
                    3e:31:b6:b8:a3:6a:98:12:ae:79:0b:5e:45:a8:32:
                    cb:31:e1:83:13:da:1c:14:df:5e:87:b1:29:4d:ff:
                    e2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:39:B9:13:2F:D6:BE:1D:D2:68:5B:3A:23:05:52:2A:38:F5:64:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ad749b06-bfcc-3368-9e93-e9f287922691.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:fe:fc:17:e7:ee:0d:09:2a:47:44:0c:1e:1f:1f:0b:fc:29:
         80:77:cb:8a:61:43:51:51:1b:83:e6:1a:57:95:93:4d:e3:f8:
         8d:ea:d8:ad:0d:56:9e:96:51:73:14:5c:af:18:d3:2d:f7:2e:
         43:29:87:a0:f7:e8:0a:3b:18:e4:b5:9d:6a:0d:70:51:6b:39:
         d0:b0:47:88:35:ef:e4:45:3a:c8:ac:83:f9:b3:21:89:4e:2f:
         21:b2:20:fa:d3:fc:2a:0d:ae:52:2b:61:ac:6d:8f:bc:f1:c7:
         e6:00:be:f2:4a:ae:22:d4:51:d8:5d:b1:17:d1:23:97:be:c1:
         fc:3d:2e:bc:f8:39:c4:4e:15:d3:5f:7d:57:ee:2d:2d:ca:95:
         d6:13:96:fc:3b:20:9b:55:ea:d3:0a:6e:c3:b4:15:60:a0:08:
         9d:e1:43:c4:ee:fe:4d:c8:90:77:e5:49:ce:f1:67:90:d8:3e:
         67:84:22:cf:a6:2e:06:ad:cc:38:9f:fe:ad:82:2c:5d:45:27:
         0f:0f:41:e4:54:e9:f3:42:b5:04:0c:7b:3f:be:57:29:4a:5d:
         dc:d5:fb:ca:8c:50:ac:a3:58:90:50:48:70:cc:5a:57:10:8d:
         66:92:62:dc:90:0f:25:e1:0d:e9:94:49:be:0a:92:4b:da:f7:
         a9:c0:4b:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGm/8EoJg0DLtFgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz
NmMzMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk
M2I3ZGNiOTctYmEwOS00ZTY4LWJkYjgtYjg3NzJhMjRiMzlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnQDZNpdAAdRFc9CJQ7YwvK8A8HG5fv4QxVG
Kxt2hs/y4MyRcKLOi2qu428Xv7Ptj9ty3wjuvJNBjkWfWHqm4HkVk8Eyx+s8L9+h
zb04s8ZN7IBTeQQ6nyHN4TKSujtfz31zQwq9GRadPsFvGQJNwh4HVUstt8ty0jhK
62pPvDrzKnvpblgnOStufBsQXtdnwqYlxZS0bW8UHcXdGvr1b28ABHtYMokmCifW
d1DW0AaHLzx1/23EAvaIwR7Z+lo/WH+fkbFA9LDTa6e+URnkOd1r6BedG9i+LObV
Yf9oHgQ+Mba4o2qYEq55C15FqDLLMeGDE9ocFN9eh7EpTf/ihwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCk5uRMv1r4d0mhbOiMFUio49WQlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4
MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYWQ3NDliMDYtYmZjYy0z
MzY4LTllOTMtZTlmMjg3OTIyNjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0
MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0
MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk
ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv9HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ/+/Bfn7g0JKkdEDB4fHwv8KYB3y4phQ1FRG4PmGleVk03j+I3q2K0N
Vp6WUXMUXK8Y0y33LkMph6D36Ao7GOS1nWoNcFFrOdCwR4g17+RFOsisg/mzIYlO
LyGyIPrT/CoNrlIrYaxtj7zxx+YAvvJKriLUUdhdsRfRI5e+wfw9Lrz4OcROFdNf
fVfuLS3KldYTlvw7IJtV6tMKbsO0FWCgCJ3hQ8Tu/k3IkHflSc7xZ5DYPmeEIs+m
LgatzDif/q2CLF1FJw8PQeRU6fNCtQQMez++VylKXdzV+8qMUKyjWJBQSHDMWlcQ
jWaSYtyQDyXhDemUSb4Kkkva96nAS/E=
-----END CERTIFICATE-----
Generated at Wed Apr 8 22:59:14 2026 by rpki-client