Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e3017d68-56f8-3650-bbac-2453ed2c4df7.roa
File:                     e3017d68-56f8-3650-bbac-2453ed2c4df7.roa (raw, json)
Hash identifier:          Q9cH0gWFNhadCWXwMSuSj6IezE2/xuQ8KIwoq457WSA=
Subject key identifier:   7D:E9:12:F0:32:21:56:3A:03:0F:3F:17:98:E4:41:B5:DA:4B:C7:16
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584D5E1A711A41F41D201C5E2240
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e3017d68-56f8-3650-bbac-2453ed2c4df7.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     53508
IP address blocks:        206.255.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:71:1a:41:f4:1d:20:1c:5e:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=d41dbd65-b385-406f-97b3-aa2bceeb017b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:db:60:b7:a1:ec:db:df:08:ad:a8:de:e7:3e:
                    e8:8e:ed:4b:29:28:1a:a3:5a:81:c3:10:96:0f:bb:
                    37:c5:b3:38:ef:9b:01:2f:34:90:d9:18:19:8d:75:
                    9f:28:7b:e1:5a:0c:1b:06:5f:3c:c5:c8:dd:74:85:
                    97:d2:e5:04:7a:02:79:6b:ef:c8:fa:6d:12:82:6e:
                    ab:ea:44:69:b6:e4:99:ce:e9:8a:f5:92:4f:42:b5:
                    79:14:64:d0:e3:f2:17:91:6b:a9:85:a4:29:9d:12:
                    54:9a:21:fb:4c:81:7d:b7:ce:66:67:c3:1d:cd:83:
                    27:84:dc:a7:74:ef:e4:08:18:be:9e:5d:5a:01:3b:
                    cf:d1:59:4e:e2:62:f2:43:0e:a8:52:86:d9:13:2e:
                    cf:f7:4d:7c:64:df:e1:3f:47:f7:ad:bc:16:c9:68:
                    81:5e:2a:f8:44:e1:53:03:57:f5:9a:31:c5:9d:c8:
                    a5:b6:86:b8:b2:b2:71:53:6e:66:16:f5:c9:d6:d0:
                    2a:77:84:65:95:31:e6:d9:a2:b2:02:c2:ba:89:7a:
                    4d:83:33:04:f5:96:b3:be:d3:ea:2e:5d:d1:22:36:
                    ff:c5:c3:72:42:28:14:d8:c2:ed:d8:8d:19:73:38:
                    d7:82:bd:84:49:f4:3b:63:bf:78:26:46:31:18:c3:
                    19:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E9:12:F0:32:21:56:3A:03:0F:3F:17:98:E4:41:B5:DA:4B:C7:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e3017d68-56f8-3650-bbac-2453ed2c4df7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:43:62:cb:14:c2:56:7b:8a:13:11:02:16:5e:06:a3:90:11:
         0a:c8:75:1c:98:25:29:54:e8:6a:9f:b5:df:7c:ab:d1:0d:22:
         15:aa:96:b2:60:3a:fe:73:28:0f:30:6f:2a:f3:13:70:35:60:
         d7:42:52:c2:8d:f2:b4:a2:4c:ce:14:81:94:c5:e2:be:bc:bf:
         c6:6b:16:75:d9:c4:4e:f4:f0:0e:4f:2d:3f:c9:7c:d6:24:e0:
         12:48:eb:be:15:e8:ae:23:01:eb:cf:34:ba:e5:36:40:15:45:
         f0:5a:7a:37:c5:f6:38:72:d0:93:12:35:32:4e:ed:26:3f:61:
         ae:76:57:0e:95:3b:f6:77:f0:10:cb:c8:bd:6f:dd:8b:4b:c7:
         75:6c:0d:d0:c8:30:a8:1b:16:f8:5b:3f:d8:01:31:ab:1a:c1:
         86:64:5b:16:31:c8:55:22:4e:fe:a0:91:01:df:e6:90:45:86:
         8b:06:bc:f0:8e:2e:c6:11:3e:0a:17:01:cc:94:90:bf:e2:2a:
         e6:34:45:69:46:fa:63:cc:f4:b7:1c:11:6b:73:a5:4b:29:04:
         41:ee:f5:56:28:d1:6a:5a:81:05:8f:f3:7a:67:f3:83:2a:2b:
         39:6a:43:90:30:92:ce:8f:41:0c:b6:7c:e0:42:0a:f7:90:60:
         3e:02:57:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 22:59:28 2026 by rpki-client