Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/09435df8-02ac-3656-b5c3-baaac1dd687b.roa
File:                     09435df8-02ac-3656-b5c3-baaac1dd687b.roa (raw, json)
Hash identifier:          xWXJ0MTk4isciF0nFAF1IxS4Tu+0gcuEFpjHMO6U4OE=
Subject key identifier:   F6:2A:04:F1:E4:63:F4:D4:03:61:EE:27:8E:94:EC:28:2A:A6:17:B2
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584E3E5F3B5756EF97B7AAEE9380
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/09435df8-02ac-3656-b5c3-baaac1dd687b.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     53508
IP address blocks:        206.255.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:3b:57:56:ef:97:b7:aa:ee:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=a5743179-793a-45fe-b07c-d8dbfdcfdb29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:4e:7a:a6:9b:17:b3:0d:de:1f:92:0a:27:
                    be:66:3a:8b:b2:cb:95:24:52:b0:fe:9d:b2:b7:da:
                    91:92:a7:ab:e9:1f:ba:a4:53:7f:ae:22:ca:72:70:
                    1a:b3:7f:76:c3:34:4b:dc:42:ed:75:99:6b:bf:19:
                    5f:00:63:84:ec:53:ad:2f:d3:8b:e7:88:33:7a:76:
                    37:4c:42:b9:8d:0b:83:1e:b1:6d:1d:dd:0c:ce:be:
                    27:93:d0:c8:8f:64:b2:7e:67:8e:fb:4f:fb:61:ce:
                    90:d8:2c:8d:b7:f3:9f:b3:07:48:9e:af:5a:93:db:
                    a9:6d:36:15:65:64:ab:af:1b:3a:fd:a8:e8:ca:af:
                    69:3c:54:8a:f7:c6:b5:14:ab:92:97:fc:45:42:aa:
                    72:83:a3:b7:f9:ed:36:ab:3f:58:79:46:29:b7:48:
                    64:00:c0:d4:ec:da:ea:3f:0d:b4:70:93:33:b2:f7:
                    dd:27:b8:aa:f0:44:54:e6:38:14:a2:c0:ad:48:6e:
                    2c:e9:1e:90:21:a8:16:93:ce:6f:29:c5:03:d5:87:
                    2b:99:9b:d5:cb:08:1a:5a:da:30:45:82:da:9d:57:
                    09:94:11:6e:25:67:5e:14:f4:66:ad:95:17:0d:d5:
                    34:0a:2c:e0:21:60:bb:a9:65:8e:c2:61:11:34:98:
                    57:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2A:04:F1:E4:63:F4:D4:03:61:EE:27:8E:94:EC:28:2A:A6:17:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/09435df8-02ac-3656-b5c3-baaac1dd687b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:36:93:c4:ef:19:a9:a8:77:20:f2:29:11:6c:d7:e1:7d:d4:
         01:a5:1f:e1:b7:1d:22:ed:14:aa:55:13:08:ad:b5:37:72:87:
         84:7f:a5:d6:e7:8e:f2:a9:e8:47:ac:ac:2a:05:6d:36:11:b0:
         8b:f6:d4:97:ad:4a:3b:d1:66:62:37:3e:70:57:cd:f4:1c:8d:
         1b:ce:7d:a8:06:b7:4d:a0:9c:7c:2d:5e:fc:27:2f:83:0c:e3:
         51:2b:2b:ea:39:ca:6a:21:3e:94:1f:c6:58:1d:4b:95:78:1e:
         d9:22:62:3a:20:d7:6f:16:32:dc:15:45:bb:19:3a:b7:54:79:
         9b:85:93:9a:88:94:22:33:10:48:af:24:ae:67:1e:9a:d4:59:
         f5:20:d8:6d:f0:56:61:0d:b1:80:2e:8d:a8:16:32:4c:d9:51:
         2a:2a:4a:05:8b:b5:a1:97:29:3d:29:aa:8e:1f:0e:c2:e5:8a:
         1c:c8:e8:62:4a:5f:65:03:d3:28:a4:0e:12:bb:4b:5a:b9:e8:
         d2:b6:93:48:76:1f:ed:2b:93:ec:d9:53:ba:c0:61:5b:a8:91:
         bc:00:36:c6:8f:84:8f:9b:a3:8e:8f:be:89:4b:d5:95:3f:cb:
         90:f5:59:93:f9:07:66:48:23:ba:17:6a:13:fc:a0:25:8f:c4:
         52:ec:70:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+XztXVu+Xt6ruk4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz
NmMzMB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk
YTU3NDMxNzktNzkzYS00NWZlLWIwN2MtZDhkYmZkY2ZkYjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbFOeqabF7MN3h+SCie+ZjqLssuVJFKw/p2y
t9qRkqer6R+6pFN/riLKcnAas392wzRL3ELtdZlrvxlfAGOE7FOtL9OL54gzenY3
TEK5jQuDHrFtHd0Mzr4nk9DIj2SyfmeO+0/7Yc6Q2CyNt/OfswdInq9ak9upbTYV
ZWSrrxs6/ajoyq9pPFSK98a1FKuSl/xFQqpyg6O3+e02qz9YeUYpt0hkAMDU7Nrq
Pw20cJMzsvfdJ7iq8ERU5jgUosCtSG4s6R6QIagWk85vKcUD1YcrmZvVywgaWtow
RYLanVcJlBFuJWdeFPRmrZUXDdU0CizgIWC7qWWOwmERNJhXAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPYqBPHkY/TUA2HuJ46U7CgqpheyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4
MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMDk0MzVkZjgtMDJhYy0z
NjU2LWI1YzMtYmFhYWMxZGQ2ODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0
MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0
MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk
ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv/gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKI2k8TvGamodyDyKRFs1+F91AGlH+G3HSLtFKpVEwittTdyh4R/pdbn
jvKp6EesrCoFbTYRsIv21JetSjvRZmI3PnBXzfQcjRvOfagGt02gnHwtXvwnL4MM
41ErK+o5ymohPpQfxlgdS5V4HtkiYjog128WMtwVRbsZOrdUeZuFk5qIlCIzEEiv
JK5nHprUWfUg2G3wVmENsYAujagWMkzZUSoqSgWLtaGXKT0pqo4fDsLlihzI6GJK
X2UD0yikDhK7S1q56NK2k0h2H+0rk+zZU7rAYVuokbwANsaPhI+bo46PvolL1ZU/
y5D1WZP5B2ZII7oXahP8oCWPxFLscFU=
-----END CERTIFICATE-----
Generated at Thu Jun 25 03:46:13 2026 by rpki-client