Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b027d75a-f671-368f-97e0-375bc4794277.roa
File:                     b027d75a-f671-368f-97e0-375bc4794277.roa (raw, json)
Hash identifier:          /+TDvnuYwx+ycuBOoDrdm9P4Uf3VR+XXGLdYWfI8+T4=
Subject key identifier:   AC:7C:9A:DF:15:F2:3C:02:56:28:7C:C8:C9:BC:D1:11:82:AE:BD:84
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584E3E5F43BA9AFF3E8E8C1E1F80
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b027d75a-f671-368f-97e0-375bc4794277.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     53508
IP address blocks:        206.255.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:43:ba:9a:ff:3e:8e:8c:1e:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=e875d03f-6111-43fb-b23c-0495087cd7ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:08:48:ef:8d:a9:8c:a9:dd:b3:63:eb:df:fa:
                    34:c8:71:99:52:a6:c0:ee:c9:0d:81:5a:c4:1b:72:
                    9a:8c:9e:cf:c6:41:aa:d7:01:b4:a6:72:3d:4d:72:
                    93:47:53:bf:18:25:09:ea:42:32:68:40:d5:52:af:
                    52:88:a0:53:80:63:a5:df:9e:f5:d1:21:a5:a6:68:
                    b9:fb:fc:07:53:1b:48:59:8f:7a:9f:60:c3:27:5f:
                    54:14:58:93:a8:8d:a7:41:9a:d2:83:13:4d:b7:c0:
                    b2:84:5e:58:9a:9b:ee:e6:78:6a:34:2d:92:65:f6:
                    38:b3:aa:da:ac:c6:d2:3e:60:06:3c:8b:69:c7:6a:
                    af:28:6f:b3:d2:7c:9a:0d:38:38:87:1d:cf:fb:9d:
                    a3:a8:b0:ce:fc:e9:da:57:2d:d3:d3:bc:83:53:57:
                    c8:7d:42:56:04:60:8e:d8:9a:72:80:3b:a3:ff:e8:
                    f7:04:de:a9:ec:51:1c:f5:90:39:72:39:6b:47:15:
                    a9:34:95:46:d8:cb:58:2a:77:b1:57:e3:06:71:e4:
                    9a:26:5d:7d:ec:38:73:6a:27:cf:f5:db:73:a0:45:
                    a8:4f:3d:b6:f8:a9:67:1b:cd:5b:4c:77:55:63:1a:
                    c0:be:df:35:3f:c6:0c:17:c4:8e:f3:fe:ea:88:d9:
                    64:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7C:9A:DF:15:F2:3C:02:56:28:7C:C8:C9:BC:D1:11:82:AE:BD:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b027d75a-f671-368f-97e0-375bc4794277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:42:9f:64:d1:bb:d0:57:31:74:d9:1c:da:47:54:2e:3e:52:
         e6:cd:d5:81:92:ff:09:bb:16:a1:e7:5e:7a:37:5b:71:c3:24:
         ac:1c:d0:1a:7b:f2:f7:2f:33:6d:b3:29:5f:6d:c3:a5:3f:f3:
         5b:50:7b:8d:e5:b8:ed:8c:ef:fb:e0:6e:66:de:35:c6:36:3e:
         3b:2e:77:73:d9:fd:a3:b3:0a:08:d9:cf:93:9c:56:43:66:29:
         3b:8d:45:37:07:53:08:ba:fb:3d:6e:1d:0e:4e:b4:83:9d:1f:
         c8:df:d8:1d:a0:28:88:5b:d8:b3:8f:53:82:00:02:58:0e:89:
         b5:69:b5:7f:d3:c3:2d:75:19:bf:4c:87:76:f7:66:8c:ee:43:
         35:c8:a6:96:b7:dc:2e:23:b8:2d:04:b0:fe:f9:a0:5a:d5:5f:
         85:b7:bc:90:c0:42:dd:a8:49:10:93:8d:d4:86:67:02:d2:3c:
         d8:98:9b:f2:d4:00:73:36:68:d3:b2:ad:85:30:f9:8e:9e:c5:
         c0:80:29:64:ac:3a:84:89:23:49:7b:aa:15:9b:11:7b:0c:86:
         11:90:4b:6c:09:21:20:89:df:be:1d:48:b7:81:ef:67:fc:df:
         7c:54:90:ea:2e:41:be:85:0d:76:e1:9c:cf:87:06:9b:7c:6b:
         97:6a:9d:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+X0O6mv8+joweH4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz
NmMzMB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk
ZTg3NWQwM2YtNjExMS00M2ZiLWIyM2MtMDQ5NTA4N2NkN2FlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQhI742pjKnds2Pr3/o0yHGZUqbA7skNgVrE
G3KajJ7PxkGq1wG0pnI9TXKTR1O/GCUJ6kIyaEDVUq9SiKBTgGOl35710SGlpmi5
+/wHUxtIWY96n2DDJ19UFFiTqI2nQZrSgxNNt8CyhF5Ympvu5nhqNC2SZfY4s6ra
rMbSPmAGPItpx2qvKG+z0nyaDTg4hx3P+52jqLDO/OnaVy3T07yDU1fIfUJWBGCO
2JpygDuj/+j3BN6p7FEc9ZA5cjlrRxWpNJVG2MtYKnexV+MGceSaJl197DhzaifP
9dtzoEWoTz22+KlnG81bTHdVYxrAvt81P8YMF8SO8/7qiNlkgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKx8mt8V8jwCVih8yMm80RGCrr2EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4
MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYjAyN2Q3NWEtZjY3MS0z
NjhmLTk3ZTAtMzc1YmM0Nzk0Mjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0
MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0
MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk
ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv9GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADRCn2TRu9BXMXTZHNpHVC4+UubN1YGS/wm7FqHnXno3W3HDJKwc0Bp7
8vcvM22zKV9tw6U/81tQe43luO2M7/vgbmbeNcY2Pjsud3PZ/aOzCgjZz5OcVkNm
KTuNRTcHUwi6+z1uHQ5OtIOdH8jf2B2gKIhb2LOPU4IAAlgOibVptX/Twy11Gb9M
h3b3ZozuQzXIppa33C4juC0EsP75oFrVX4W3vJDAQt2oSRCTjdSGZwLSPNiYm/LU
AHM2aNOyrYUw+Y6excCAKWSsOoSJI0l7qhWbEXsMhhGQS2wJISCJ374dSLeB72f8
33xUkOouQb6FDXbhnM+HBpt8a5dqnac=
-----END CERTIFICATE-----
Generated at Thu Jun 25 03:47:28 2026 by rpki-client