Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e4d89b80-4449-3333-bda9-82eeda0c9d4a.roa
File:                     e4d89b80-4449-3333-bda9-82eeda0c9d4a.roa (raw, json)
Hash identifier:          7LUbJcBMzATEZozUC218HngZ6FeOJUM8V/Gka+FsICo=
Subject key identifier:   D6:BE:09:2D:B6:8B:14:99:B4:C1:C6:28:F6:95:C1:18:5C:5A:9C:12
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584E3E5F3B6FBA190D8ED9926940
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e4d89b80-4449-3333-bda9-82eeda0c9d4a.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     53508
IP address blocks:        206.255.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:3b:6f:ba:19:0d:8e:d9:92:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=ecca00ec-a79e-450f-8f9f-0736cbdae1c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e6:76:77:e2:5b:78:91:63:9a:5a:5d:d2:2d:
                    e9:a1:62:0d:64:7d:38:02:a9:e4:14:8a:2a:10:c7:
                    f9:df:5b:f2:da:e9:5a:19:9e:12:59:6b:aa:9c:65:
                    6f:aa:8c:b2:bc:73:41:c7:a4:a2:ae:2c:9a:8d:23:
                    d7:1f:cf:b9:de:d8:a3:9e:fd:8b:e6:41:d6:9f:47:
                    06:77:74:ad:99:d7:f0:98:5e:cb:ce:dc:26:e2:40:
                    cb:bf:86:9d:b8:76:d9:d5:65:5f:0c:c2:18:08:05:
                    79:1e:54:e2:eb:bf:2e:b1:b6:15:91:4b:f3:81:72:
                    e5:bc:d6:22:82:80:f8:c0:a9:fb:59:1e:db:a7:a8:
                    3a:3a:c0:ce:0f:08:8b:04:2c:34:73:93:a7:6f:e5:
                    dd:84:e9:b4:7c:25:55:3e:c3:3f:52:91:4b:9c:ee:
                    41:51:8f:1f:9e:e3:08:91:cb:68:1d:77:96:03:74:
                    67:1c:21:48:5f:cb:91:e2:2e:b2:4f:ea:79:d5:09:
                    0a:76:d5:10:83:a7:94:d7:c8:92:af:3a:f0:8a:09:
                    95:f2:5e:bf:45:15:ae:9d:15:88:20:ed:fc:7b:b8:
                    8c:42:1c:1b:50:36:7e:22:19:09:32:72:53:91:24:
                    96:97:61:34:f9:da:f9:11:cc:7b:e2:84:ad:94:67:
                    2c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BE:09:2D:B6:8B:14:99:B4:C1:C6:28:F6:95:C1:18:5C:5A:9C:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e4d89b80-4449-3333-bda9-82eeda0c9d4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:9c:4a:a7:96:c0:32:fc:42:30:fa:7f:d7:73:40:7d:f7:34:
         8e:f6:17:25:e9:8c:73:25:92:fd:8c:c0:92:7a:ae:64:be:1f:
         20:fe:8b:d9:cc:1c:35:0d:64:83:12:df:a0:58:40:c7:82:35:
         a0:5a:ef:ac:16:b8:40:35:0d:03:33:0b:81:d5:d7:26:1a:a8:
         7d:19:33:56:ed:6f:15:8d:9b:d2:11:6c:89:d4:ff:cf:88:b4:
         0c:a4:e2:6a:45:c1:2b:54:6b:f3:1b:f4:ce:1d:bd:60:b9:77:
         df:09:3d:22:4d:4e:39:16:28:f7:57:cc:23:89:e1:9b:6d:36:
         02:9b:78:df:00:6b:e3:8f:21:be:9d:49:89:a1:c6:85:60:44:
         b2:bb:b9:e9:56:2f:c5:3f:fd:4e:a6:f0:d7:ba:9b:8a:ca:49:
         cb:d4:91:20:a8:9c:2b:be:9c:a3:c3:0b:74:af:82:d7:6f:38:
         3a:49:68:a6:4f:13:43:6d:92:f2:3e:44:38:20:dd:74:dc:54:
         ca:55:31:0d:6d:a4:4a:3d:85:fb:f5:d8:7a:f2:b9:19:3a:c7:
         c4:a9:f7:3f:92:e3:c4:6f:86:04:67:21:23:d7:22:75:c9:d7:
         27:ec:6f:e5:a1:32:6d:de:5c:66:b4:97:f2:0e:58:cb:5b:69:
         20:6f:ca:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 03:46:13 2026 by rpki-client