Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/81af0be6-f23c-30fe-8f01-107b7f0d4738.roa
File:                     81af0be6-f23c-30fe-8f01-107b7f0d4738.roa (raw, json)
Hash identifier:          xOCTHfXVBdch0BK4QcgriZlpksgwcSh+byj8/hDZ3Qg=
Subject key identifier:   B6:2F:DF:9F:B8:39:4F:6C:C6:E5:C0:F1:DB:79:2E:B4:CD:3F:AB:C2
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584EE0C20F8289F8EA00B72F79C0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/81af0be6-f23c-30fe-8f01-107b7f0d4738.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     53508
IP address blocks:        206.255.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:0f:82:89:f8:ea:00:b7:2f:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=09f32683-21ca-4403-941d-fba07f67ac7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:46:99:0d:54:88:94:73:0a:70:b8:22:5e:c4:
                    29:62:4c:04:7b:97:1d:7e:60:5e:af:8b:96:e4:0a:
                    66:4f:f8:c6:4e:c0:d1:e7:12:06:c5:cd:eb:46:3a:
                    1f:58:61:df:b3:48:fd:1f:54:f1:32:cc:e6:47:42:
                    b7:0f:91:f6:96:04:4f:af:e1:8e:2d:46:b1:aa:53:
                    56:d0:d2:1e:ad:33:5f:df:cf:ed:15:80:8d:01:86:
                    b3:73:1f:54:76:95:16:3b:21:6a:11:49:2e:f0:80:
                    07:14:ab:d0:8b:ef:87:43:cc:28:06:97:81:26:3b:
                    6d:d2:d4:4b:f6:a8:9f:2b:93:d1:7b:d2:18:3f:b4:
                    b3:01:13:71:3f:84:fe:e3:a4:91:ba:59:da:b2:cd:
                    a1:9c:5a:a9:3d:4d:d9:98:0b:f8:9f:11:e7:de:60:
                    26:f0:45:23:f9:43:7d:54:a0:f7:c8:bb:b9:64:f4:
                    66:47:c7:8b:13:b3:21:6c:45:ff:2c:36:f6:cb:fc:
                    0b:19:07:4f:3f:4a:b6:0a:53:de:b7:30:ea:78:26:
                    c2:84:2d:a5:43:18:0f:db:af:89:c6:fa:1d:e0:c6:
                    f7:2b:54:50:99:a1:16:85:c4:7b:c9:cd:33:3a:78:
                    17:19:92:1b:16:4c:fe:9c:4b:01:2e:ad:86:0b:83:
                    ef:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2F:DF:9F:B8:39:4F:6C:C6:E5:C0:F1:DB:79:2E:B4:CD:3F:AB:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/81af0be6-f23c-30fe-8f01-107b7f0d4738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:90:76:39:e6:45:6e:a2:7e:e3:36:a8:cf:4e:30:85:c3:07:
         12:2a:58:86:73:f6:ab:06:f5:31:08:3f:22:3f:e0:eb:3c:28:
         1e:b2:ce:3a:d2:5d:1b:4a:6c:87:8c:6c:21:d3:c1:be:3d:40:
         1f:24:20:56:7f:28:bb:40:d7:18:f1:cf:1f:af:84:e0:84:9a:
         9d:48:4e:31:45:04:de:b0:31:ed:f9:d1:26:76:6b:49:17:8d:
         55:2f:22:bc:22:d8:e3:90:26:7d:34:9a:1e:cc:92:c6:8c:2a:
         92:d5:a4:6e:8b:1b:67:ff:1d:84:2d:bb:56:57:e3:d9:d5:4e:
         72:44:85:f9:6c:74:03:82:2d:04:df:3e:07:9b:c2:e0:ec:bb:
         a6:c6:79:c8:f7:c8:04:59:0d:d3:39:8c:e1:b3:b6:97:ba:1c:
         78:93:78:38:0b:53:4a:ed:79:86:6b:b2:bf:92:6b:19:89:15:
         15:25:c8:45:a5:e0:58:2e:ab:87:2e:c5:68:4e:5e:0c:60:ff:
         c1:24:bc:bc:af:1c:72:17:5b:49:da:2e:ee:ea:df:13:bf:0d:
         c0:0e:ea:32:7b:d6:6c:58:d4:d6:9b:6c:77:2f:e8:07:2c:ff:
         0a:70:9c:20:d2:a9:db:0e:17:1f:fd:24:23:da:6b:75:61:92:
         e9:e2:32:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwg+CifjqALcvecAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz
NmMzMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk
MDlmMzI2ODMtMjFjYS00NDAzLTk0MWQtZmJhMDdmNjdhYzdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUaZDVSIlHMKcLgiXsQpYkwEe5cdfmBer4uW
5ApmT/jGTsDR5xIGxc3rRjofWGHfs0j9H1TxMszmR0K3D5H2lgRPr+GOLUaxqlNW
0NIerTNf38/tFYCNAYazcx9UdpUWOyFqEUku8IAHFKvQi++HQ8woBpeBJjtt0tRL
9qifK5PRe9IYP7SzARNxP4T+46SRulnass2hnFqpPU3ZmAv4nxHn3mAm8EUj+UN9
VKD3yLu5ZPRmR8eLE7MhbEX/LDb2y/wLGQdPP0q2ClPetzDqeCbChC2lQxgP26+J
xvod4Mb3K1RQmaEWhcR7yc0zOngXGZIbFkz+nEsBLq2GC4PvoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLYv35+4OU9sxuXA8dt5LrTNP6vCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4
MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvODFhZjBiZTYtZjIzYy0z
MGZlLThmMDEtMTA3YjdmMGQ0NzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0
MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0
MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk
ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzv9QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJyQdjnmRW6ifuM2qM9OMIXDBxIqWIZz9qsG9TEIPyI/4Os8KB6yzjrS
XRtKbIeMbCHTwb49QB8kIFZ/KLtA1xjxzx+vhOCEmp1ITjFFBN6wMe350SZ2a0kX
jVUvIrwi2OOQJn00mh7MksaMKpLVpG6LG2f/HYQtu1ZX49nVTnJEhflsdAOCLQTf
PgebwuDsu6bGecj3yARZDdM5jOGztpe6HHiTeDgLU0rteYZrsr+SaxmJFRUlyEWl
4Fguq4cuxWhOXgxg/8EkvLyvHHIXW0naLu7q3xO/DcAO6jJ71mxY1NabbHcv6Acs
/wpwnCDSqdsOFx/9JCPaa3VhkuniMi8=
-----END CERTIFICATE-----
Generated at Sat Oct 10 17:09:33 2026 by rpki-client