Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8bddfa08-a0d0-3ef6-8ee2-30e1b86bd2d7.roa
File:                     8bddfa08-a0d0-3ef6-8ee2-30e1b86bd2d7.roa (raw, json)
Hash identifier:          XPQenFwbYzmv+Eggq+lx0EHJ6QXoYCy6I4wWkei00lE=
Subject key identifier:   15:BA:CE:B6:38:80:99:BD:4F:1C:4A:C3:43:CD:79:8D:28:99:D3:11
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584E3E5F43E9C63B0A72047A9600
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8bddfa08-a0d0-3ef6-8ee2-30e1b86bd2d7.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     53508
IP address blocks:        206.255.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:43:e9:c6:3b:0a:72:04:7a:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=e9490704-cc33-41be-8584-3507ac7f0f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:34:b8:f2:1f:09:f1:20:b3:d8:49:d7:18:00:
                    5b:7c:a8:0f:ca:58:5b:89:51:65:a4:b8:d3:c6:46:
                    94:4b:7c:03:c3:28:d7:98:06:8c:14:64:f9:61:cd:
                    28:13:3e:89:7b:5b:4b:79:77:e6:7f:f2:e7:df:37:
                    96:2c:f7:e8:e4:37:ca:74:13:f1:57:7a:ed:d6:1a:
                    8b:e2:8c:b0:97:26:74:ad:e5:b9:5c:81:24:b6:8a:
                    66:82:37:95:61:1c:1b:df:9a:b4:ef:1e:25:b3:1c:
                    dc:c6:0f:08:cc:6f:34:f5:b1:92:90:b8:de:81:bd:
                    da:4e:06:1c:af:18:7c:b6:61:1e:ce:38:e5:1b:42:
                    84:69:68:9f:f6:9f:e6:4e:69:ca:c7:53:aa:c9:8b:
                    4d:51:6c:7c:ae:8f:66:94:8b:1c:80:c0:b3:b8:47:
                    52:4e:17:5c:d7:a8:0f:09:32:fa:d5:98:b9:1b:a1:
                    9e:8e:05:34:c9:6f:96:8f:25:08:3c:f2:ed:54:96:
                    26:39:39:af:01:99:fe:40:5c:30:f9:e5:1a:de:8c:
                    22:19:e5:af:73:54:6d:82:cf:43:e7:3a:a2:3a:d6:
                    48:a4:47:f7:47:1a:c5:4d:bc:19:7e:0c:51:9e:a5:
                    7f:d8:d8:fa:b5:31:b7:7b:25:c6:97:f4:ad:7a:0a:
                    cd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BA:CE:B6:38:80:99:BD:4F:1C:4A:C3:43:CD:79:8D:28:99:D3:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8bddfa08-a0d0-3ef6-8ee2-30e1b86bd2d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:34:08:97:29:74:9a:a6:08:bc:70:f1:8f:38:78:6c:09:ec:
         fd:6a:e1:fb:68:ef:1e:6f:6e:b8:00:b4:58:c3:7c:5b:c6:e3:
         5d:03:75:b2:50:38:27:f8:ab:45:b2:02:d5:00:78:69:e7:b4:
         b6:0d:6f:26:de:bd:d3:b3:2e:f1:9e:e1:81:fd:61:d7:d2:f5:
         dc:2b:1b:98:a6:cf:2f:5c:d6:5d:05:2c:36:a8:f6:00:ca:57:
         e3:56:2c:1b:19:ee:52:bd:3b:67:b4:d9:56:3c:2e:3f:a9:e1:
         60:87:84:d4:c0:e2:68:bf:53:9a:fe:c5:71:c2:4d:34:f1:60:
         d0:0f:20:3e:c3:58:6f:20:06:5b:17:08:f4:52:04:6b:97:49:
         2c:8f:07:5b:b1:4d:ba:b1:fc:77:52:2f:b4:db:68:6e:40:1d:
         20:6c:4e:6d:76:81:60:04:27:44:ce:aa:11:1d:af:95:b5:e1:
         af:2c:04:ea:c2:64:dc:7c:2e:ae:99:c4:f9:a1:ae:b8:ec:76:
         ec:3b:c3:39:b5:ff:2b:51:3b:56:20:c0:db:f5:7a:75:a1:88:
         b8:6f:82:aa:39:45:17:fb:8d:48:aa:cb:b7:6d:f0:17:90:0a:
         c9:e3:1c:39:8d:15:ad:78:c2:75:82:e2:e0:0d:ee:df:9d:0b:
         97:4f:1f:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+X0PpxjsKcgR6lgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz
NmMzMB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk
ZTk0OTA3MDQtY2MzMy00MWJlLTg1ODQtMzUwN2FjN2YwZjNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTS48h8J8SCz2EnXGABbfKgPylhbiVFlpLjT
xkaUS3wDwyjXmAaMFGT5Yc0oEz6Je1tLeXfmf/Ln3zeWLPfo5DfKdBPxV3rt1hqL
4oywlyZ0reW5XIEktopmgjeVYRwb35q07x4lsxzcxg8IzG809bGSkLjegb3aTgYc
rxh8tmEezjjlG0KEaWif9p/mTmnKx1OqyYtNUWx8ro9mlIscgMCzuEdSThdc16gP
CTL61Zi5G6GejgU0yW+WjyUIPPLtVJYmOTmvAZn+QFww+eUa3owiGeWvc1Rtgs9D
5zqiOtZIpEf3RxrFTbwZfgxRnqV/2Nj6tTG3eyXGl/StegrNIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBW6zrY4gJm9TxxKw0PNeY0omdMRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4
MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvOGJkZGZhMDgtYTBkMC0z
ZWY2LThlZTItMzBlMWI4NmJkMmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0
MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0
MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk
ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzv9uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACE0CJcpdJqmCLxw8Y84eGwJ7P1q4fto7x5vbrgAtFjDfFvG410DdbJQ
OCf4q0WyAtUAeGnntLYNbybevdOzLvGe4YH9YdfS9dwrG5imzy9c1l0FLDao9gDK
V+NWLBsZ7lK9O2e02VY8Lj+p4WCHhNTA4mi/U5r+xXHCTTTxYNAPID7DWG8gBlsX
CPRSBGuXSSyPB1uxTbqx/HdSL7TbaG5AHSBsTm12gWAEJ0TOqhEdr5W14a8sBOrC
ZNx8Lq6ZxPmhrrjsduw7wzm1/ytRO1YgwNv1enWhiLhvgqo5RRf7jUiqy7dt8BeQ
CsnjHDmNFa14wnWC4uAN7t+dC5dPHz4=
-----END CERTIFICATE-----
Generated at Thu Jun 25 03:42:56 2026 by rpki-client