Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d94b6283-583f-3eb5-a107-41ff8f762125.roa
File:                     d94b6283-583f-3eb5-a107-41ff8f762125.roa (raw, json)
Hash identifier:          94TkMwULPfDTR/36tXVAZx5b/gjMNz8mnNoca7cZJN4=
Subject key identifier:   1F:E8:5F:54:E0:5A:6F:D5:EF:99:D8:7E:7F:0A:E0:46:5C:7B:5C:F5
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584E35FF219DBFAB56EC8C81C900
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d94b6283-583f-3eb5-a107-41ff8f762125.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     53508
IP address blocks:        206.255.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:21:9d:bf:ab:56:ec:8c:81:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=3b3fc43a-27e1-408c-bc33-f651955da2d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a7:94:38:42:77:16:8c:d3:11:ba:9f:e2:6b:
                    3b:4f:b2:a4:65:22:ce:3b:4d:23:77:bf:5b:ca:3e:
                    e1:3e:35:3a:2d:49:6f:62:e8:12:57:8d:d9:e0:6e:
                    40:42:b5:08:c5:2c:37:dc:de:4a:30:ba:dc:de:b5:
                    84:c5:14:d7:79:45:e5:a0:cc:19:bc:58:00:9f:bd:
                    c1:64:99:1a:11:c9:77:97:6d:e8:c0:8e:8d:88:d1:
                    2e:13:35:f8:57:3f:81:ad:72:72:67:8e:ec:bc:e2:
                    75:e5:82:d1:b0:fa:85:4d:ee:4a:c2:3f:aa:a7:7a:
                    b3:cd:29:18:db:de:ef:c9:dc:3e:dd:7a:6a:e8:9d:
                    55:98:81:e4:e9:22:2b:a6:c1:53:83:63:ac:19:13:
                    a2:80:76:1a:3d:61:31:56:1e:97:dd:ea:7c:38:01:
                    0a:44:18:ea:92:d4:d6:99:04:ef:39:db:dc:98:41:
                    eb:c6:00:9c:b0:e4:0f:42:25:98:95:53:6e:f7:07:
                    a8:45:45:61:25:7b:f5:b7:f7:b5:a5:16:ab:63:95:
                    c8:86:7e:f0:f3:43:ae:d5:11:fd:ed:6b:41:15:59:
                    df:e9:c4:4f:1b:9f:1f:0b:f7:7c:75:ca:e2:fb:22:
                    7c:68:6a:8c:45:44:42:71:02:e3:63:2c:bd:c9:32:
                    6f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E8:5F:54:E0:5A:6F:D5:EF:99:D8:7E:7F:0A:E0:46:5C:7B:5C:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d94b6283-583f-3eb5-a107-41ff8f762125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:9f:b6:ab:6f:91:b9:3b:90:92:7c:7d:c8:49:8c:5a:4c:fa:
         5c:64:f0:da:eb:64:90:93:6d:33:7f:96:83:fa:bf:52:af:41:
         65:2f:98:0e:9a:ee:a5:b0:d5:b1:9d:f0:87:da:0e:f3:22:67:
         c5:85:70:1a:ef:e1:bf:cd:37:c8:0e:2e:de:5e:77:d7:7b:4b:
         b2:4d:8e:d5:a1:19:cd:c2:2a:a3:c3:44:73:48:6a:63:5e:a1:
         22:f1:b9:b1:41:32:80:de:d2:2e:46:6c:22:56:7d:1c:f1:73:
         9c:55:a4:fb:3d:34:51:1b:3c:ff:e2:c5:d3:9e:fa:32:04:9a:
         47:43:c9:3d:cb:a9:d9:a8:10:66:56:b5:8f:a5:07:a4:e5:da:
         ca:76:0d:31:cc:ee:05:e1:d2:87:d8:91:f1:4e:ec:9d:68:da:
         9f:5a:93:03:d2:aa:83:3c:b6:d6:3c:7b:23:53:00:b8:38:96:
         c0:51:43:d1:dc:26:95:ec:29:52:00:b4:23:6d:96:47:41:49:
         c3:6b:5e:d2:d5:72:97:15:7f:33:dc:cb:65:b9:ea:43:82:50:
         ef:12:bb:6a:84:4f:9b:94:61:e4:68:4d:4e:12:a3:a3:d5:57:
         52:1c:dd:1f:86:4e:f1:9f:f8:db:78:93:1b:b2:dd:05:60:97:
         c7:69:82:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 03:46:40 2026 by rpki-client