Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b6c5154d-44b0-356c-bd4c-ed4cbf555273.roa
File:                     b6c5154d-44b0-356c-bd4c-ed4cbf555273.roa (raw, json)
Hash identifier:          QNwrRKgLPgD7408rmrbeRrNj7Fp/G1WCMtaBnx0h7kA=
Subject key identifier:   54:A5:D0:80:A1:13:43:E7:11:83:1E:5D:21:E1:8A:7A:7D:81:91:94
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584D5E1A67E535551520295F8C20
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b6c5154d-44b0-356c-bd4c-ed4cbf555273.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     53508
IP address blocks:        206.255.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:67:e5:35:55:15:20:29:5f:8c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=e6512012-62c3-43f4-b2b3-2e82d543b1c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ea:12:cb:da:ce:8f:76:60:0b:49:56:82:2a:
                    b5:e8:5d:92:a7:2a:4d:85:2f:ae:68:93:55:7b:b5:
                    59:e2:c7:63:bb:a8:89:20:87:7c:a6:78:a6:53:ab:
                    cc:85:86:ad:79:1b:27:0e:da:d7:23:e6:94:0b:86:
                    56:8d:25:61:cf:4b:7c:86:82:f7:e4:82:7a:2b:9f:
                    de:4b:60:35:44:83:44:dc:8a:be:12:ce:51:68:7d:
                    21:52:dd:24:d0:a9:c2:bc:f3:ed:fb:6c:4d:a0:61:
                    58:97:20:39:f2:ad:91:33:ec:48:a4:48:04:e5:22:
                    16:2f:97:69:1a:df:05:bb:40:63:f0:17:27:f0:66:
                    70:8a:34:91:6f:08:2c:e9:80:b1:b7:ae:cc:aa:f6:
                    db:e2:dd:9e:0c:1c:80:e6:ba:cc:68:13:6a:a9:de:
                    91:23:02:a1:49:dd:3c:47:6f:87:1a:5a:f7:08:52:
                    93:a8:d3:a4:2a:d9:6e:3f:8e:ae:55:2a:42:e7:d0:
                    50:b7:20:f6:95:ea:ff:50:4a:f9:66:8f:33:02:2e:
                    14:dc:11:fe:a1:7d:c8:e4:1c:5e:a8:04:a7:36:b0:
                    29:d5:dd:12:f9:86:ad:8c:e1:d9:66:21:b6:f1:b0:
                    14:24:b5:50:bb:3e:97:2e:04:4c:b1:c1:88:c2:b5:
                    a7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A5:D0:80:A1:13:43:E7:11:83:1E:5D:21:E1:8A:7A:7D:81:91:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b6c5154d-44b0-356c-bd4c-ed4cbf555273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:52:33:00:0c:1e:96:a5:92:66:27:31:8f:f9:47:07:73:75:
         23:4a:e4:64:5e:35:88:d7:b8:b5:09:f6:5d:af:2a:7c:4d:27:
         b6:5a:4f:53:4e:2d:c0:90:61:5c:2b:44:34:70:41:10:01:78:
         25:1e:fd:42:6c:5f:37:15:af:db:d3:64:7a:48:57:9e:d5:85:
         46:d3:7f:a2:ef:e4:f2:1a:f7:a2:31:3d:56:53:23:06:be:cc:
         12:a6:46:1b:3d:37:6c:f6:5e:51:66:ab:06:12:cf:60:9d:f0:
         6e:b5:f6:dd:ff:4b:3b:9f:8e:c0:19:95:46:6f:3a:7e:0c:59:
         d2:47:27:5b:19:c8:4c:b2:aa:61:fa:db:d4:a0:e9:92:1c:d0:
         b2:45:e6:c6:60:15:46:8d:62:b9:3c:61:a5:98:23:73:f8:31:
         d5:45:cd:30:a3:3c:cb:1a:de:3d:a9:a5:4a:94:b8:95:f3:1f:
         fc:25:78:5a:8e:d6:7b:2d:1e:ac:e2:53:1d:5d:d6:7a:c4:83:
         07:16:3f:e7:7f:c7:6c:c1:63:89:b0:69:cf:19:f6:bf:f1:a1:
         44:36:90:0e:c9:56:db:60:8e:0b:13:bf:0d:08:77:0f:b5:e4:
         bb:95:4d:6b:97:3f:b9:32:bf:b8:d7:9f:eb:b7:3e:96:78:c2:
         cf:b4:8c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 23:00:08 2026 by rpki-client