Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b027d75a-f671-368f-97e0-375bc4794277.roa
File:                     b027d75a-f671-368f-97e0-375bc4794277.roa (raw, json)
Hash identifier:          5yJJKJcO2VIqLoKSbCU8JHQmU3aBWHWFzjSGyF/h41g=
Subject key identifier:   AA:94:19:6E:E5:90:EE:12:99:2D:BD:28:0F:1C:EE:82:8E:7C:C2:52
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584EE0C20F5E35AFEB5F1BA84300
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b027d75a-f671-368f-97e0-375bc4794277.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     53508
IP address blocks:        206.255.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:0f:5e:35:af:eb:5f:1b:a8:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=2961e811-1d71-4418-8925-ec4782ca337d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:97:ee:5d:8f:08:3e:4f:b9:43:aa:94:a3:b3:
                    9e:d1:66:e1:f7:2e:06:cc:70:65:65:c1:ac:cb:c6:
                    ba:75:b7:70:dd:6d:d3:c6:44:e8:7e:ee:22:cd:e8:
                    67:ae:8e:e3:43:e8:99:5a:ed:cb:1e:ed:9b:4d:a6:
                    2c:c2:f4:46:0e:98:9e:de:5a:f2:c2:70:fd:59:5c:
                    9a:63:3e:9f:1e:96:7b:b7:dd:2b:9c:2e:a5:ca:5b:
                    47:1c:50:5f:af:99:4a:69:6e:e2:40:1c:a2:f3:83:
                    24:5a:e0:71:61:64:b7:37:7d:46:ee:29:f0:88:1b:
                    fe:18:35:f8:9c:d4:41:7a:3e:d6:ca:74:73:a4:a8:
                    7a:16:f4:81:1f:10:ec:19:65:cc:37:27:cd:11:32:
                    50:99:58:5f:86:f4:2b:97:e7:31:7d:9f:b5:86:43:
                    30:53:c7:a7:63:fe:dd:f4:29:ee:7a:0f:1b:95:52:
                    6a:53:89:5e:f1:3e:b4:d6:d1:a5:bf:10:db:d2:a0:
                    5b:93:39:d6:02:10:54:7c:fd:9d:65:12:0a:50:34:
                    f7:08:47:e8:bf:89:f0:98:11:bb:50:61:a2:b0:ff:
                    4c:99:c5:e7:e3:a2:a0:63:cd:14:26:22:68:5b:46:
                    b6:e9:13:9b:1b:68:3c:6a:0a:5a:28:b1:07:04:8f:
                    b3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:94:19:6E:E5:90:EE:12:99:2D:BD:28:0F:1C:EE:82:8E:7C:C2:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b027d75a-f671-368f-97e0-375bc4794277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:19:56:cf:f8:66:a9:39:a6:f4:4e:62:13:bb:88:37:e1:2e:
         1d:9b:d3:84:50:3b:5b:e3:5c:35:55:70:69:6e:73:c3:86:5c:
         c3:e7:ac:5a:e6:89:1a:ba:4e:af:13:9b:87:82:84:04:29:22:
         18:fd:f2:e6:fd:10:6b:c9:5c:62:3e:12:8e:7a:04:44:d4:3f:
         8f:7e:89:95:78:2e:1e:aa:cf:40:20:92:ed:5e:88:df:38:62:
         aa:80:c6:87:e9:7c:7c:d3:52:24:c9:1a:37:4f:30:be:a8:b8:
         cd:65:07:e3:19:da:dc:e0:6d:58:37:5d:32:2d:dd:42:82:5a:
         ad:75:8a:ca:ae:6d:6a:8c:71:92:86:aa:8e:0b:35:1e:e4:cf:
         26:0b:e0:0b:f8:b3:ed:ee:95:92:23:35:bd:3b:68:e7:ae:cf:
         a9:4b:dc:20:a1:33:17:66:e7:7a:7b:b0:79:84:a1:5c:5b:10:
         0f:84:94:18:f3:40:fb:30:76:b5:8b:ed:a8:57:a3:f9:99:66:
         fa:e9:44:a6:d9:c7:4f:9c:08:34:c7:89:47:4d:6e:71:11:4f:
         a0:b6:0a:40:5b:16:33:9b:c2:18:70:db:0e:52:b2:42:33:7f:
         7e:dd:f9:c1:09:b9:36:29:7a:84:62:20:64:4d:3e:47:2f:e4:
         78:88:b1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:49:43 2026 by rpki-client