Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a72517c8-1d52-3d75-a9a7-f9badad56345.roa
File:                     a72517c8-1d52-3d75-a9a7-f9badad56345.roa (raw, json)
Hash identifier:          s8suHL5HDFQe9A8gGw/YZuIvxgUPkS5zMf6m8++B6RM=
Subject key identifier:   3F:FC:EC:C4:1C:CE:85:98:29:39:AA:36:D7:62:61:4C:AD:8F:43:AB
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584ED861EE5BCD95F0E858D61C00
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a72517c8-1d52-3d75-a9a7-f9badad56345.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     53508
IP address blocks:        206.255.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:ee:5b:cd:95:f0:e8:58:d6:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=555a0144-06e1-453c-a134-4c8e697d9c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6a:e7:b8:40:ca:9a:7b:c1:09:52:0a:b4:90:
                    18:f9:8a:e9:0f:56:08:5d:f0:f5:ba:36:9e:0c:0e:
                    e7:a6:61:21:ab:8b:d4:74:38:0d:61:36:f1:5c:d3:
                    92:11:6b:c3:f7:7f:e6:40:59:b9:a6:89:36:fb:80:
                    6b:b5:b2:f0:cd:98:02:ad:b1:bb:39:65:a7:82:59:
                    72:e4:ef:5f:52:27:22:71:06:58:22:e0:8a:94:aa:
                    18:7e:8e:8a:4f:82:d8:1c:38:54:39:b2:dc:58:04:
                    ef:e6:b6:b7:55:3c:50:4f:a6:b9:c7:57:95:49:93:
                    f9:17:92:1a:1b:c1:cd:83:18:ce:2b:3b:1b:55:39:
                    01:29:53:9a:f1:a4:8a:c8:eb:21:11:c9:69:2e:07:
                    7a:dc:03:ff:82:fa:28:76:4e:9b:8f:c5:75:28:47:
                    7c:b9:b2:d3:f1:b4:c4:54:13:94:60:e7:fc:30:a5:
                    b8:23:52:b1:f0:dc:be:8d:87:89:37:fd:99:bf:a0:
                    c5:5a:43:42:51:1f:69:ee:e2:b0:09:8b:af:4e:4b:
                    bd:7f:23:98:92:be:4b:ae:ad:52:f5:ae:3e:8e:08:
                    49:27:ca:f6:d7:8d:1a:d7:cf:e8:a5:1a:9a:10:c8:
                    16:2c:25:0c:00:8b:68:b6:76:7f:6a:e7:39:ad:3d:
                    4e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:FC:EC:C4:1C:CE:85:98:29:39:AA:36:D7:62:61:4C:AD:8F:43:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a72517c8-1d52-3d75-a9a7-f9badad56345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:11:d5:02:17:2a:a3:31:f1:1c:46:7f:9f:8b:f0:f5:7e:82:
         6a:0f:ac:11:81:58:dd:32:78:0f:76:f7:19:d7:dc:a6:0d:87:
         a0:ef:8e:be:48:e0:29:25:cf:c5:04:22:a4:86:de:f1:c9:cc:
         51:2f:9d:75:1d:d2:fe:39:f3:ff:ae:f2:4f:d5:e0:5e:b5:a2:
         25:39:7b:5d:41:db:97:b7:9d:50:52:86:f4:4c:c6:52:5c:b5:
         5c:29:0e:aa:81:fc:18:6a:92:2c:9f:27:6f:12:45:82:a9:32:
         a8:68:ca:0e:4b:50:01:ed:fa:56:5c:1c:fe:50:82:62:5e:ef:
         a3:c4:d9:19:ff:cd:f5:82:0e:cf:61:fc:b9:50:10:12:eb:03:
         10:6d:d2:9b:23:85:77:d5:62:37:79:58:83:92:10:43:0e:da:
         d7:31:81:44:e4:a9:3f:21:52:14:f6:2f:c8:a8:c5:b3:ec:7d:
         49:be:15:77:da:47:5b:77:4a:33:26:a1:51:87:0b:13:c5:7d:
         3b:13:1d:47:33:ed:61:63:1e:b9:18:36:c7:59:b4:e0:a8:dc:
         3f:6f:0b:24:0b:69:1e:e8:ba:9e:d5:fc:82:cf:b8:9e:9e:7f:
         52:55:9f:85:19:88:34:6b:08:24:ec:19:45:d0:e3:65:89:c6:
         84:b0:e6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:30:03 2026 by rpki-client