Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a72517c8-1d52-3d75-a9a7-f9badad56345.roa
File:                     a72517c8-1d52-3d75-a9a7-f9badad56345.roa (raw, json)
Hash identifier:          c2moMkSLofE4OLePZ434oGua/lDRyKdIEpFkNqm1kGo=
Subject key identifier:   EF:FA:04:07:66:62:F4:38:54:44:79:0C:AB:C3:CE:44:78:8F:D7:40
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584E35FF214D7D9DFE20D5478710
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a72517c8-1d52-3d75-a9a7-f9badad56345.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     53508
IP address blocks:        206.255.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:21:4d:7d:9d:fe:20:d5:47:87:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=e870c8d0-023c-4553-bf74-2cdb9fb457e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e0:6f:3b:0a:7f:ab:63:50:09:7a:85:52:9f:
                    64:68:a1:25:37:a8:f8:ef:bb:b3:ca:31:9e:07:01:
                    bb:8f:8b:bd:78:2b:80:73:6b:2d:be:2b:74:21:74:
                    70:80:74:cf:c0:14:cc:4e:b9:2c:06:cb:81:1e:11:
                    6a:1b:63:cd:21:98:ee:c2:38:04:7e:dc:0a:8e:bf:
                    58:db:be:92:5f:b7:9a:6c:9e:b1:81:26:56:c3:c7:
                    dc:dd:7a:a1:76:d5:69:13:5e:2b:e6:fa:b8:81:f3:
                    de:5c:7b:2d:18:2f:e7:5a:04:66:9e:1c:4d:ee:aa:
                    96:57:c6:8e:23:9f:7e:53:11:c6:87:99:29:e3:77:
                    e3:b8:10:79:c4:83:86:1b:2f:58:7a:57:1b:8a:f7:
                    6e:e5:61:08:e3:c4:80:09:e1:a1:8e:43:64:7d:93:
                    5e:52:e3:37:c3:44:bc:ca:5e:6b:77:16:64:2b:d4:
                    97:23:4d:9d:30:97:1f:d1:01:42:0c:5a:3f:f1:b2:
                    f4:fe:04:df:72:d1:77:1c:59:df:e0:49:97:92:8f:
                    45:ba:68:ba:e0:af:da:0f:2f:db:07:d3:da:1e:9c:
                    30:60:9f:69:c9:ab:3f:92:b7:6e:13:da:3c:24:07:
                    bc:88:18:6f:e8:c8:f2:e4:d1:ee:21:48:33:d5:b1:
                    fa:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FA:04:07:66:62:F4:38:54:44:79:0C:AB:C3:CE:44:78:8F:D7:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a72517c8-1d52-3d75-a9a7-f9badad56345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ae:ae:00:f0:ed:fe:92:c0:43:09:c3:3a:66:52:ee:37:ae:
         5b:8f:81:d2:99:40:b8:15:2d:9b:ce:ed:08:11:19:01:fe:e7:
         96:04:b5:33:50:d2:95:b7:e0:8a:69:d1:bc:84:85:50:4d:19:
         bf:e5:34:37:2e:ad:b3:7f:1b:29:3c:18:1d:0f:ca:78:84:44:
         05:9f:1b:9e:19:e2:2a:06:4f:83:e0:0d:71:69:a1:53:f5:91:
         0d:64:b9:d5:67:8a:2c:67:23:ff:04:e0:d1:48:e4:80:7d:fd:
         46:c9:22:80:1c:e7:42:b0:11:72:13:c8:7f:81:3d:6f:0c:58:
         29:e9:2b:fb:25:7f:47:5d:57:51:c1:f1:4a:18:c5:fc:4b:3e:
         c3:90:49:5b:1c:3c:fd:c9:21:5f:87:d9:f5:28:28:5d:f1:ae:
         25:f7:f3:06:1c:5f:88:14:5e:0d:54:50:b9:77:c5:b5:93:6d:
         57:53:83:51:78:3f:13:79:31:46:7e:24:14:71:0f:b4:97:0c:
         5f:b0:19:86:7e:98:b7:40:e2:ef:68:21:d0:af:ea:f6:f8:c5:
         95:42:a4:b1:8b:59:b0:eb:ec:49:53:c7:00:6c:38:02:e2:cc:
         6c:97:43:62:57:b7:4f:29:d0:bd:14:58:80:9a:50:b6:b6:d0:
         db:20:aa:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 03:47:12 2026 by rpki-client