Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/56a6fcbc-1e34-3343-bfd5-531dbf8f1c6f.roa
File:                     56a6fcbc-1e34-3343-bfd5-531dbf8f1c6f.roa (raw, json)
Hash identifier:          0ECH7UZGblOnWQNKSkp0pI9zzfqt300+OBd5mnMu2Xg=
Subject key identifier:   D4:58:22:80:95:6E:30:5E:57:6F:DA:02:BA:BC:C5:66:47:57:3E:BF
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584E3E5F3A9061D66B5EDC19B0C0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/56a6fcbc-1e34-3343-bfd5-531dbf8f1c6f.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     53508
IP address blocks:        24.244.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:3a:90:61:d6:6b:5e:dc:19:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=f1baa631-d610-4fde-ace5-df75509c3192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f9:6b:6d:b5:12:c2:25:09:ee:4a:93:5e:16:
                    af:8d:c4:21:87:21:43:80:00:0b:25:43:53:be:c5:
                    4d:c6:14:08:81:e2:4d:69:1c:0c:53:bd:b8:c9:da:
                    0c:3a:cb:41:34:e1:0d:84:90:88:0f:48:a5:5a:b3:
                    a9:02:70:f2:e3:f1:89:07:ab:3d:16:2a:0c:87:15:
                    e3:75:85:0a:65:4d:04:14:84:83:aa:fd:f5:10:d7:
                    55:1d:44:c6:b3:d9:e1:2f:e7:62:e5:66:90:66:88:
                    b2:62:9e:bd:1f:6e:6d:8e:9b:69:c5:12:1e:26:51:
                    4b:69:70:ca:67:7a:ce:58:53:4a:c0:65:00:ea:b1:
                    a5:8b:a4:60:62:79:08:c4:4c:70:18:bd:6d:bc:f7:
                    8e:36:93:e3:17:18:bb:25:ed:e0:37:37:68:58:87:
                    e0:6d:48:a1:77:f9:58:72:31:4b:af:11:38:b2:08:
                    5a:48:5d:06:05:ed:fc:73:e1:5e:0d:a6:66:73:68:
                    52:c5:75:3d:73:77:24:2d:7c:34:41:ee:ed:55:c9:
                    f5:75:24:89:10:19:29:bd:7c:1b:4b:66:c9:b3:6b:
                    51:0d:94:3c:2c:69:90:13:5b:a5:e9:3d:59:eb:64:
                    8a:13:b1:ce:bd:89:30:28:f1:93:8b:9e:1c:78:29:
                    c4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:58:22:80:95:6E:30:5E:57:6F:DA:02:BA:BC:C5:66:47:57:3E:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/56a6fcbc-1e34-3343-bfd5-531dbf8f1c6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.244.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:ae:7b:d7:05:2f:51:1f:ab:73:e5:23:51:bb:68:53:86:c4:
         01:d7:ac:99:cf:cc:a2:8b:84:3b:08:f0:12:95:18:f7:a5:a8:
         41:34:6b:bc:fb:73:64:19:73:2a:9c:0d:b1:f3:e5:45:d6:2c:
         f0:7a:f6:f8:3b:74:08:f5:91:3e:a1:32:9a:b8:21:81:fc:23:
         04:91:26:16:32:a1:b3:72:d8:74:01:1b:b6:13:6e:02:b6:29:
         89:55:e1:61:19:b5:14:73:a2:ac:ba:50:83:31:3f:4a:90:bc:
         f4:e4:38:2e:6b:e4:15:c3:80:70:cf:6c:ed:9f:c8:fa:35:db:
         e5:53:1d:4e:14:8c:98:9c:2c:51:e0:b8:f3:1d:53:c1:d1:a3:
         1d:5c:bd:8f:03:c1:9a:7b:f6:68:4c:18:8d:62:06:4f:85:57:
         15:76:04:82:91:83:53:50:8b:b3:02:d8:55:43:ca:cc:1e:31:
         3f:50:d5:d3:07:f0:57:8f:9b:df:b9:50:9b:6c:b9:5d:c4:f7:
         72:68:a5:d1:27:66:95:10:10:c9:f8:7e:08:29:39:79:c5:70:
         ea:ff:37:cb:32:77:82:5f:cd:6d:96:d1:52:95:00:e3:bb:16:
         4f:96:70:66:c7:b6:aa:95:31:5a:97:2c:72:8c:c6:2e:48:d9:
         68:4c:a8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 03:45:14 2026 by rpki-client