Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b6c5154d-44b0-356c-bd4c-ed4cbf555273.roa
File:                     b6c5154d-44b0-356c-bd4c-ed4cbf555273.roa (raw, json)
Hash identifier:          98UXRhyytIxx72zGGHehOuXKdKjRkDtsSF90wtpQ+rI=
Subject key identifier:   89:05:9C:60:E1:6B:E8:76:CB:8C:B9:EC:7A:5F:A4:E8:5E:56:55:AE
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F43285848FD56C2A94F265A7DD3E71B4C
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b6c5154d-44b0-356c-bd4c-ed4cbf555273.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     53508
IP address blocks:        206.255.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:c2:a9:4f:26:5a:7d:d3:e7:1b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=987db030-6d07-4e71-8dea-593752d45b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8f:34:7f:45:04:28:b0:3d:b1:8f:40:49:4e:
                    73:db:59:1a:8f:6b:41:77:39:5a:3f:c2:7b:91:d4:
                    14:79:e0:3f:66:b9:e1:d4:c2:63:58:58:e4:2b:2f:
                    26:ac:5e:6e:d5:b6:65:81:33:e9:14:f0:04:3e:a4:
                    13:5a:15:9e:3a:6c:1f:c2:69:82:43:2f:42:a9:bd:
                    f8:58:86:45:75:cb:d3:7a:d8:bd:0e:11:46:fa:4c:
                    a1:2b:05:c9:9f:75:4e:ff:c5:29:e9:db:db:89:16:
                    f7:2f:f1:ba:31:8a:7d:10:ea:3a:d3:70:b7:1a:db:
                    39:a9:af:f3:75:51:6d:c0:c2:db:b9:16:dd:cf:a7:
                    da:ff:ca:0c:f9:83:ee:05:20:34:52:80:87:5a:69:
                    9f:ac:9d:f6:ad:7e:b1:2c:15:81:ef:56:33:8d:3a:
                    58:46:87:9d:56:39:b2:51:43:d7:62:4e:c5:1c:9c:
                    3f:e9:68:20:ef:ab:ae:3d:bb:4e:a8:81:e5:0c:4d:
                    1a:90:66:50:72:98:58:fd:8e:1c:e9:19:b4:49:1f:
                    10:6d:ac:5a:3f:5d:b8:ce:15:a5:91:be:1b:bf:02:
                    bf:ac:7f:8e:c1:8f:a3:d4:a8:22:0a:83:49:65:6c:
                    9b:54:8e:51:74:56:4d:21:58:fb:85:e5:7a:7d:4e:
                    4b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:05:9C:60:E1:6B:E8:76:CB:8C:B9:EC:7A:5F:A4:E8:5E:56:55:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b6c5154d-44b0-356c-bd4c-ed4cbf555273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:31:6e:fa:e7:2d:87:be:9d:0e:a9:07:8f:41:23:6e:4e:0d:
         0c:75:b5:12:e6:3e:bd:79:cd:40:39:e8:10:27:37:fb:5e:ea:
         1f:32:9d:2c:4d:38:58:d4:ac:04:f6:e9:a5:b2:56:17:0d:ed:
         ed:5f:d1:00:52:0e:07:53:a4:44:c4:f2:d2:93:92:44:f7:30:
         85:1d:bc:52:f1:7c:4c:1f:46:08:1a:12:c9:53:fb:72:6b:cb:
         eb:4f:65:41:31:56:b1:fb:70:f6:c2:ca:41:11:f5:f3:17:e6:
         b9:23:c5:15:10:4f:98:0e:2c:ba:26:cb:2f:02:9c:7e:d7:b5:
         77:7c:ae:26:ed:c1:65:ad:16:1b:74:d0:e8:9c:ec:a2:7c:cf:
         58:be:b5:db:4e:5c:97:3d:ea:13:98:2c:46:86:5c:9d:e1:2a:
         da:03:92:f1:08:17:bb:56:81:a4:0f:46:a4:1f:00:c9:85:c4:
         ae:82:86:58:53:dd:25:b3:af:96:95:20:35:d9:b4:d8:77:63:
         14:5a:54:41:2a:44:78:9c:32:8d:be:11:fa:fc:25:b2:e6:2f:
         1c:8c:2f:c9:15:bd:3f:60:68:24:11:31:5d:d2:f9:2f:da:f3:
         58:5a:d9:70:0b:a9:77:0d:58:6c:56:b5:ec:e3:36:0b:3f:25:
         df:c4:5b:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsKpTyZafdPnG0wwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz
NmMzMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk
OTg3ZGIwMzAtNmQwNy00ZTcxLThkZWEtNTkzNzUyZDQ1YjY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo80f0UEKLA9sY9ASU5z21kaj2tBdzlaP8J7
kdQUeeA/Zrnh1MJjWFjkKy8mrF5u1bZlgTPpFPAEPqQTWhWeOmwfwmmCQy9Cqb34
WIZFdcvTeti9DhFG+kyhKwXJn3VO/8Up6dvbiRb3L/G6MYp9EOo603C3Gts5qa/z
dVFtwMLbuRbdz6fa/8oM+YPuBSA0UoCHWmmfrJ32rX6xLBWB71YzjTpYRoedVjmy
UUPXYk7FHJw/6Wgg76uuPbtOqIHlDE0akGZQcphY/Y4c6Rm0SR8QbaxaP124zhWl
kb4bvwK/rH+OwY+j1KgiCoNJZWybVI5RdFZNIVj7heV6fU5LZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIkFnGDha+h2y4y57HpfpOheVlWuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4
MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYjZjNTE1NGQtNDRiMC0z
NTZjLWJkNGMtZWQ0Y2JmNTU1MjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0
MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0
MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk
ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv/oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGkxbvrnLYe+nQ6pB49BI25ODQx1tRLmPr15zUA56BAnN/te6h8ynSxN
OFjUrAT26aWyVhcN7e1f0QBSDgdTpETE8tKTkkT3MIUdvFLxfEwfRggaEslT+3Jr
y+tPZUExVrH7cPbCykER9fMX5rkjxRUQT5gOLLomyy8CnH7XtXd8ribtwWWtFht0
0Oic7KJ8z1i+tdtOXJc96hOYLEaGXJ3hKtoDkvEIF7tWgaQPRqQfAMmFxK6ChlhT
3SWzr5aVIDXZtNh3YxRaVEEqRHicMo2+Efr8JbLmLxyML8kVvT9gaCQRMV3S+S/a
81ha2XALqXcNWGxWtezjNgs/Jd/EWzI=
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:40:11 2025 by rpki-client