Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/67711168-57b6-3fb5-9d03-dd8b8f2377da.roa
File:                     67711168-57b6-3fb5-9d03-dd8b8f2377da.roa (raw, json)
Hash identifier:          tVlo49Kkv6eUKUgpIXS/6hlcZ3wFUXbOEt6GznAamAI=
Subject key identifier:   DB:68:A2:85:8A:21:F7:73:8D:66:72:EB:B7:1B:0D:57:2C:A4:A2:C4
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584E3E5F44BFEB1D36471A4FB200
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/67711168-57b6-3fb5-9d03-dd8b8f2377da.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     53508
IP address blocks:        206.255.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:44:bf:eb:1d:36:47:1a:4f:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=c50c7dd2-0b70-4055-bf15-d093f2c1d07d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:33:06:0d:26:97:e9:eb:f3:09:f2:65:c1:23:
                    4b:fe:af:2a:cd:6c:6d:af:dd:fc:bb:71:e3:64:78:
                    21:7f:f6:34:31:0f:c8:66:df:5f:b6:33:64:a4:5a:
                    bd:7c:0d:96:a2:f4:82:69:1b:1a:63:45:ce:b1:6a:
                    7a:19:e1:0f:67:9c:0c:ad:eb:72:8f:38:0e:60:3c:
                    f3:1c:d8:9f:e7:78:ee:0a:4a:6c:91:8f:0a:4a:4c:
                    79:9f:50:97:8a:cc:b4:84:93:da:9a:dc:79:0a:09:
                    1c:7c:6e:6e:ac:02:81:59:e5:2b:59:cd:df:f8:f2:
                    f9:aa:82:6c:a4:d7:27:00:cf:a0:4c:3e:f4:d8:3d:
                    52:f5:61:8f:0c:f9:7b:1c:f3:f0:98:e4:fd:f1:a0:
                    fd:e1:b3:5c:5f:a1:5b:a0:90:85:2d:ab:12:d7:fc:
                    5c:63:43:2b:91:3a:9c:00:d3:4a:89:45:ca:37:07:
                    73:b9:39:30:ff:49:be:65:49:31:5b:7b:55:63:bf:
                    fe:86:06:c5:cc:27:56:a7:6c:a4:3e:2b:23:57:f6:
                    03:77:13:1e:19:62:73:98:66:96:84:aa:7a:a0:e6:
                    a6:43:a6:34:03:a9:03:3a:00:63:25:09:0b:43:9b:
                    e1:d9:77:7e:94:b7:33:75:15:27:b9:a3:dd:4f:97:
                    24:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:68:A2:85:8A:21:F7:73:8D:66:72:EB:B7:1B:0D:57:2C:A4:A2:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/67711168-57b6-3fb5-9d03-dd8b8f2377da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:93:bb:9c:61:3a:37:50:ee:5f:c7:1d:5f:0f:e7:35:7f:f1:
         a9:48:66:ac:4e:d9:2f:a1:48:fe:b4:6e:cc:3d:a0:c8:c6:db:
         d6:b4:da:3a:49:11:c1:b5:a2:7b:47:aa:c3:62:85:a4:bd:14:
         f7:f4:c0:e6:5c:72:d1:97:c1:56:c9:fc:66:e7:8c:ad:53:47:
         32:61:a5:76:9d:72:fb:d5:2c:45:9b:24:f6:eb:fb:b3:83:cd:
         e0:90:ee:61:51:10:7f:34:03:36:95:f6:0a:08:31:35:91:9c:
         ba:b2:ab:eb:f6:d1:f2:be:08:aa:b1:e7:8e:25:d9:4f:d2:3c:
         50:31:08:ec:62:25:3d:9c:ff:d3:cf:45:40:28:35:0b:8e:82:
         91:aa:0c:15:dd:fb:d1:86:41:82:8b:c2:fd:72:21:d9:cb:67:
         56:d0:23:a8:46:8a:58:af:53:fa:a6:3d:7b:f9:43:2b:b7:2e:
         46:0c:a9:10:d1:0a:9f:8f:c7:39:f9:a1:42:f9:17:e6:92:e9:
         ae:af:25:43:be:4f:2c:3e:6f:ea:2a:a6:3d:b7:01:7b:9c:b8:
         cf:74:97:70:a9:17:8f:94:20:07:8c:dd:de:a5:f6:70:b3:a0:
         69:da:da:80:59:20:c9:25:a1:81:69:21:fd:38:0b:a0:f0:25:
         9a:b3:65:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 03:46:41 2026 by rpki-client