Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bed1dd50-d36b-3af3-ade0-a9f8d474bcb0.roa
File:                     bed1dd50-d36b-3af3-ade0-a9f8d474bcb0.roa (raw, json)
Hash identifier:          mY5LbtobYiFw9q6287iKMMX5YsiRkP8ZWDja8A4MowY=
Subject key identifier:   70:48:9C:1B:32:CB:6B:78:E9:B1:0D:4D:B1:BD:25:3D:92:59:1B:1C
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584D5E1A679E3829C2868C3AF880
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bed1dd50-d36b-3af3-ade0-a9f8d474bcb0.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     53508
IP address blocks:        142.79.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:67:9e:38:29:c2:86:8c:3a:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=94c944e9-b66e-46c8-bbda-34d5218880b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:08:02:2b:25:dd:70:53:03:43:9f:1d:0c:ac:
                    50:57:aa:e5:3a:61:46:3e:33:8c:2b:db:98:4c:9e:
                    1f:73:b2:22:e2:da:09:3f:53:15:6a:28:2e:ab:f9:
                    20:4d:e4:81:c5:e7:7b:17:80:56:ec:37:11:64:97:
                    48:87:ae:a2:8d:59:8f:a1:fe:94:12:4c:6e:31:3a:
                    a6:6e:74:9a:d3:0b:c6:cb:33:94:10:2b:92:2b:63:
                    a7:74:4b:97:5f:5f:41:cf:b2:ef:24:a5:a9:cc:19:
                    08:45:e6:da:4f:6e:92:60:41:1c:f7:32:bc:d1:ff:
                    36:d1:9e:af:5d:60:6c:dc:1d:dc:94:75:38:c1:62:
                    74:29:56:37:85:a7:b4:e2:56:67:39:b7:cd:7f:e7:
                    74:d5:f2:ee:6e:14:04:d8:55:f9:68:ac:b1:1d:0b:
                    b6:3c:22:9c:1f:76:d3:89:9a:f2:0e:b7:fd:63:c2:
                    2b:f9:83:db:d8:85:4d:05:f3:35:d1:79:f3:b5:c7:
                    ce:50:58:a2:dd:33:90:d1:fd:76:8e:cb:a9:37:8d:
                    2f:f4:04:58:05:16:70:2c:91:68:95:8c:18:32:93:
                    74:19:62:3b:82:6a:7a:98:c9:b5:4d:49:57:0e:43:
                    03:7c:92:58:63:1d:b3:13:22:93:0e:3f:74:76:47:
                    fb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:48:9C:1B:32:CB:6B:78:E9:B1:0D:4D:B1:BD:25:3D:92:59:1B:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bed1dd50-d36b-3af3-ade0-a9f8d474bcb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.79.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:a0:b1:8f:a0:83:ea:4b:d3:5f:96:b8:a0:82:10:ca:89:8d:
         77:4e:21:ba:d0:fd:0c:62:37:c5:a0:b4:1e:ff:b8:f3:43:00:
         7c:7c:d6:98:07:d7:d2:60:a2:5f:ea:83:a4:77:c3:c1:d9:c9:
         01:ca:5e:52:8b:9b:e7:e3:1e:c5:29:e2:18:56:ce:f8:d8:f2:
         c2:51:5c:18:5b:ac:c2:fd:64:33:b7:4b:74:59:19:c0:5d:b7:
         92:f7:41:23:b4:4a:d4:e2:fe:3a:57:b1:1b:ba:84:0d:d2:f5:
         8e:d9:8f:2f:5b:78:0e:67:fe:02:51:04:04:6c:29:d7:e2:f5:
         d7:e5:97:ad:b5:98:27:a2:66:53:98:c5:28:e1:cf:16:f2:21:
         e9:87:c4:35:f3:c5:86:4b:0c:d3:06:2c:93:8d:55:46:70:e1:
         07:3d:5e:0b:3f:10:30:9f:92:e5:d9:be:5b:a1:f4:d4:78:75:
         eb:ab:d2:9c:10:73:f3:78:ee:33:51:07:07:f4:43:90:fd:8a:
         bf:d6:24:2e:d4:7c:43:d9:cd:34:11:66:be:ab:bf:52:ca:5c:
         b9:62:4d:f6:2c:dc:5a:5a:37:67:c7:a9:74:0a:8c:ee:3e:5d:
         d9:7f:e1:a0:a6:38:54:55:df:80:1d:4c:6a:61:b1:34:32:6f:
         93:02:ef:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 22:59:15 2026 by rpki-client