Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d33ac72b-a2fd-3e99-9262-5396871638b8.roa
File:                     d33ac72b-a2fd-3e99-9262-5396871638b8.roa (raw, json)
Hash identifier:          0a0nQkQNJLufgHHzDBTYWC2k8BmIg0t6Y6UQHNrLwUQ=
Subject key identifier:   DA:B2:3E:89:2F:55:BD:18:07:38:68:F2:22:B2:74:AC:72:A9:83:E7
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584E3E5F44CB450841A31BA48EC0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d33ac72b-a2fd-3e99-9262-5396871638b8.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     53508
IP address blocks:        206.255.208.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:44:cb:45:08:41:a3:1b:a4:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=efdd010e-9238-4ee4-8eec-74c37cdbfb67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:19:64:69:18:55:b9:55:5e:d1:09:b7:e0:36:
                    2b:35:ad:a4:d1:57:13:53:17:0a:2d:26:2a:6a:de:
                    b7:2a:30:1b:a8:6b:d8:19:fe:ad:03:dd:db:c7:3f:
                    55:65:94:4e:1e:1d:0f:30:2e:89:14:c4:46:94:e8:
                    bc:b1:af:5b:54:d6:df:41:41:51:41:dd:6c:e1:23:
                    dd:7c:b6:93:76:e5:4d:d3:29:ec:e5:c1:27:66:f2:
                    3f:88:5c:a8:ad:57:b4:9c:2b:49:28:b3:25:ca:90:
                    53:95:3f:64:15:92:25:e5:9d:f5:21:29:91:1a:89:
                    bd:89:bd:53:3f:48:a3:5a:0f:52:0a:bd:c4:5d:22:
                    b1:bb:2e:b8:e0:ea:ea:db:a5:c2:85:4e:0c:af:1f:
                    73:38:ad:fc:d1:19:68:9d:34:98:da:1f:7a:e1:43:
                    29:a2:d3:91:2c:f6:84:2b:0c:d8:d6:95:9e:7c:6d:
                    2f:b1:eb:52:80:32:5b:53:a1:f1:a4:86:c7:66:a4:
                    a6:c7:0d:ce:9e:e5:5d:3c:04:4e:d3:f1:58:25:dc:
                    dd:00:aa:9c:5c:bb:c9:8a:a4:00:22:30:b0:e9:7d:
                    d1:9f:d2:45:6b:71:57:50:00:d9:13:0c:81:94:b2:
                    b8:c7:06:5a:46:25:86:ac:43:33:6b:a1:8e:a9:50:
                    cf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B2:3E:89:2F:55:BD:18:07:38:68:F2:22:B2:74:AC:72:A9:83:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d33ac72b-a2fd-3e99-9262-5396871638b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:fa:84:60:23:0d:4c:4c:19:fb:e2:32:09:0e:8d:52:c0:fd:
         8d:70:5a:73:40:dc:a7:f3:fa:13:40:90:e4:32:c9:2c:73:93:
         00:b9:53:8c:a6:46:81:d5:ec:e1:f5:ec:4a:39:d5:36:83:6f:
         f7:f5:09:4d:77:88:13:c4:20:ec:66:05:44:b3:d0:9f:bd:21:
         82:6b:26:b3:4a:8c:81:cf:a7:4a:05:c5:02:dd:ba:9d:d5:37:
         be:25:f6:09:ba:fa:a6:be:6c:60:e4:fe:15:5d:c8:0b:a4:19:
         17:70:e0:3a:f1:2b:53:ef:41:e7:c8:6a:72:cc:e5:3e:0d:27:
         0b:6e:a8:61:25:c8:48:c5:dd:9a:80:9a:66:30:0d:56:30:e0:
         f9:47:20:e0:a8:51:50:97:19:f5:9a:04:99:c5:dd:18:a9:93:
         b6:18:42:e5:a1:2a:b2:06:e9:c2:c3:de:80:1b:d1:cb:e0:2f:
         fe:bf:a4:8e:bf:14:fe:e5:a5:45:08:99:e5:bc:19:76:70:61:
         ec:56:bf:ac:b5:42:d4:2b:44:33:9c:43:89:65:1f:8f:f3:57:
         04:1b:bb:0a:0c:38:bb:81:e9:57:89:d0:74:25:64:d7:2e:43:
         b4:03:93:bc:fb:5c:17:f6:a7:2a:88:bd:00:5a:1b:ab:a9:df:
         72:d0:d3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 03:45:13 2026 by rpki-client