Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/96c8cd7b-f41d-3979-93b2-7fd4e0d278c5.roa
File:                     96c8cd7b-f41d-3979-93b2-7fd4e0d278c5.roa (raw, json)
Hash identifier:          P3wO+Ybwt46I3EHHNkFOBj5nULROxzYekT18L5wAH0g=
Subject key identifier:   7C:BA:FB:73:55:4C:11:F5:4D:B5:0E:C0:27:72:4A:FF:9D:62:05:92
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584E3E5F459008C888F7BD0719F8
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/96c8cd7b-f41d-3979-93b2-7fd4e0d278c5.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     1651
IP address blocks:        206.255.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:45:90:08:c8:88:f7:bd:07:19:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=589e09b6-7a45-49df-9168-5c0c376c40af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1f:c6:dd:d7:3d:6a:85:49:5e:d1:07:ac:38:
                    19:d6:b2:23:b3:d4:ec:d3:e5:79:f3:64:17:4a:38:
                    53:39:44:3c:2c:e4:d9:b3:33:3b:f8:fa:27:db:93:
                    ee:8b:4f:b3:c0:6c:89:8f:7b:6c:a8:21:54:21:8c:
                    d7:e2:6e:f5:19:6c:90:3b:7b:fa:ad:c8:71:47:32:
                    d2:16:89:09:5f:73:e8:5f:d3:85:dc:e4:e2:1d:71:
                    3b:50:fe:04:8b:8b:05:87:e6:b4:d3:1c:28:b0:39:
                    ed:be:f2:e5:95:e9:3d:9d:6e:fa:77:e8:5f:6d:29:
                    d5:dd:3e:3a:30:ef:40:10:a7:72:65:07:c4:47:59:
                    60:c0:61:04:9a:96:ac:ea:cc:31:b1:5f:a4:33:49:
                    78:be:38:0f:d9:a1:09:2c:6f:c2:5f:bf:1c:11:49:
                    33:36:bd:33:a3:0e:0f:a1:12:82:03:a0:87:4c:f0:
                    e2:b3:66:16:ef:54:07:50:06:61:99:e2:3f:66:3c:
                    5e:a5:a7:a3:ad:4c:96:04:36:8f:63:2c:4d:e8:ac:
                    25:bf:13:e3:05:d3:b6:41:92:bd:0a:24:1f:b9:b1:
                    d3:63:c4:ac:0a:d2:8a:16:4e:38:a9:ab:17:39:36:
                    36:de:49:1e:21:36:f1:2a:df:02:05:93:5b:9a:21:
                    7e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BA:FB:73:55:4C:11:F5:4D:B5:0E:C0:27:72:4A:FF:9D:62:05:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/96c8cd7b-f41d-3979-93b2-7fd4e0d278c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:12:f3:93:97:b2:44:d5:29:15:b1:0a:9d:e9:20:57:e1:9f:
         b1:cd:50:3e:c8:24:bc:62:c0:1e:b0:95:e4:1c:ea:80:eb:db:
         98:b6:ca:f3:c8:6a:df:3e:aa:90:c8:b6:15:fd:ec:7a:b0:7d:
         bc:b9:8b:a1:e3:98:d0:0e:87:73:26:93:43:01:6c:c2:6d:47:
         25:dd:30:b1:a8:be:9c:e0:ce:5f:55:32:0b:03:fe:9c:23:98:
         3d:d5:4d:60:83:9b:58:60:0f:05:bd:da:e4:5d:ee:15:ee:cd:
         da:9d:e2:33:8a:6e:d0:61:fe:43:5e:fa:71:39:03:b1:8f:31:
         d5:2e:d5:9c:fd:61:be:ec:3c:d4:c2:3d:b6:fd:46:7c:ea:96:
         9b:79:65:74:e9:d6:49:e1:07:47:76:1d:39:04:5d:cb:ad:87:
         23:95:9c:19:ab:94:fe:19:c7:5b:ff:a6:28:10:66:62:94:d1:
         c4:5d:97:94:76:96:fb:30:94:01:22:81:53:54:29:20:f4:2a:
         c8:9a:6a:f4:6a:ee:91:b0:14:5e:2d:97:b4:8b:2e:c7:38:4f:
         b2:b3:0e:04:98:cf:70:8c:c0:e1:d0:e3:fc:66:04:8d:a4:4f:
         29:9c:3e:33:2b:d4:89:2b:6d:44:97:fd:d0:82:60:8b:40:cd:
         91:f9:02:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 03:44:12 2026 by rpki-client