Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9a464499-d316-342b-b45f-628fbfdcfe1d.roa
File:                     9a464499-d316-342b-b45f-628fbfdcfe1d.roa (raw, json)
Hash identifier:          fTFtT+jLkOgzERzCKp5MVQHjY5delCi7E4Noj4ajv0c=
Subject key identifier:   E8:79:4F:5E:BF:6C:12:B5:3D:3D:63:96:E7:98:F0:9C:25:4C:B4:D6
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F43285848FD56C287B9193754A802D780
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9a464499-d316-342b-b45f-628fbfdcfe1d.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     53508
IP address blocks:        206.255.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:c2:87:b9:19:37:54:a8:02:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=c8d818b3-5a00-4533-b7b6-2cf178b622c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:05:98:b1:71:65:3a:b3:05:c0:cd:41:9e:19:
                    2c:4b:4a:cf:71:96:78:57:68:e4:93:e3:c7:b1:51:
                    b0:ee:13:b9:1a:15:36:1a:53:b3:4f:46:68:20:b6:
                    34:fb:03:06:f3:3e:dd:21:04:b9:9a:e6:4b:fc:53:
                    53:b7:5e:1d:8c:9f:d0:a1:ea:13:5c:5e:f6:04:27:
                    4e:56:71:52:de:f7:98:68:0f:f3:b2:d8:1e:7e:38:
                    2a:00:89:4c:31:fd:38:97:94:c2:56:49:3f:1f:30:
                    6c:e1:38:ca:21:e9:95:04:6d:3d:f0:80:53:87:f3:
                    cc:0b:29:b8:d6:57:da:49:79:cd:ce:89:b4:96:bb:
                    9e:dc:d4:e2:d3:e0:92:43:8f:10:b3:f4:d7:4b:ef:
                    55:eb:87:ba:38:5d:0a:cc:db:99:1c:f7:5b:a8:cd:
                    35:22:a5:c4:18:23:4e:b0:65:61:15:ea:9d:84:06:
                    48:f5:f0:6c:1a:ed:56:dd:29:33:1d:38:6a:33:2c:
                    15:9b:bf:6a:9d:da:fa:73:98:6b:b0:af:f9:fb:33:
                    9a:e7:b2:07:65:43:59:ff:f1:09:30:8d:59:aa:24:
                    16:93:cf:02:ab:36:08:e1:2c:c1:f6:12:5e:40:37:
                    3b:1d:26:a9:d9:94:ed:ee:5c:c7:09:ec:b2:f5:a2:
                    d7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:79:4F:5E:BF:6C:12:B5:3D:3D:63:96:E7:98:F0:9C:25:4C:B4:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9a464499-d316-342b-b45f-628fbfdcfe1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:e7:99:24:92:89:77:42:a2:db:8b:7b:f7:d7:61:36:80:e7:
         91:6a:4f:1d:79:3f:fa:65:27:e2:87:c9:6e:0b:f6:86:7f:39:
         6a:8a:55:a5:20:23:c2:0f:b0:ab:da:f5:f9:0a:3d:82:2e:b9:
         26:70:27:c4:39:da:6d:c0:00:dc:d5:92:b5:f1:dd:ad:e2:e1:
         e3:67:1b:38:2c:57:8e:7c:b7:ab:6a:e9:10:de:cc:18:b3:80:
         7a:bc:a2:f2:0a:3c:ff:61:b3:12:49:0b:a0:56:44:ae:55:47:
         93:e2:3c:f9:9d:f8:3d:70:99:ba:a2:8a:40:60:6e:b9:94:0b:
         67:bf:cc:90:db:6d:0f:f5:81:de:01:63:c4:d0:ee:13:e5:75:
         70:be:32:4b:fa:e8:e9:07:4d:66:c2:91:13:68:39:95:3e:3f:
         7e:ad:26:50:81:59:ea:e3:fd:23:d3:29:b8:63:0c:b2:15:6b:
         7e:d3:c3:d0:a0:aa:5e:55:e6:ff:65:46:fe:4b:8f:4f:69:1e:
         da:c3:74:a0:25:56:00:9d:9e:30:75:cb:34:cb:48:41:83:9a:
         69:f8:aa:6f:22:c2:b4:2a:de:e4:85:22:15:2f:c3:8b:bf:b0:
         ae:18:a6:d0:0d:70:2d:6b:ce:85:9a:37:57:c6:d1:5c:f4:3c:
         b2:4c:55:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:45:50 2025 by rpki-client