Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ecb1b9f1-b041-388f-9435-4d1d857917df.roa
File:                     ecb1b9f1-b041-388f-9435-4d1d857917df.roa (raw, json)
Hash identifier:          e5VyHn8jwcgpPm8ul8NgWVwkGwpVd6uJ46o2a6UXQUc=
Subject key identifier:   40:EB:A3:32:07:31:88:07:79:5A:16:99:84:6B:42:AE:8E:35:0E:80
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584E3E5F3B1A0FDAD8E438B214C0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ecb1b9f1-b041-388f-9435-4d1d857917df.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     53508
IP address blocks:        206.255.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:3b:1a:0f:da:d8:e4:38:b2:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=4c9ff0ea-6de2-476a-8ad5-34130d72ccdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ef:be:01:16:92:6a:23:f0:4f:6c:5d:21:c6:
                    81:94:88:13:0a:c9:56:db:da:35:cf:5b:9b:4a:a6:
                    49:c7:b7:76:40:d9:e0:d4:a8:7b:86:d5:20:90:91:
                    96:23:d1:4d:eb:00:39:6a:22:97:b4:6b:72:4b:5e:
                    7c:c4:d4:6a:cf:95:f4:c2:5c:86:2b:88:56:a4:0e:
                    9f:06:64:c5:0e:cd:8c:ce:24:f9:46:11:9a:85:4a:
                    04:a9:4a:77:3f:5d:37:a6:80:bb:3d:30:d5:f3:d1:
                    14:8b:a7:f8:d4:1b:40:06:df:ad:2f:8b:a3:79:f2:
                    d4:79:c3:76:be:73:67:47:39:e8:84:3f:22:6c:28:
                    ac:5f:1e:aa:4d:6f:a2:69:b3:52:df:7a:90:b9:4b:
                    77:d6:29:5d:9d:1d:f2:4c:6d:61:a5:61:9d:a8:b5:
                    cc:51:b5:65:55:82:a4:74:51:02:d5:a7:33:42:af:
                    9e:8a:0d:f1:a8:79:76:41:06:c1:ef:69:66:0c:05:
                    ef:0b:5e:e6:40:57:e3:ec:57:dd:b6:ab:34:1d:19:
                    df:ff:03:47:ba:22:40:36:9f:d1:27:e6:12:67:92:
                    83:ab:49:53:fb:b4:c0:81:5e:0d:5d:eb:6d:d5:35:
                    58:19:c3:88:c4:2f:d1:d5:c2:f5:be:5a:e8:a2:e4:
                    96:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EB:A3:32:07:31:88:07:79:5A:16:99:84:6B:42:AE:8E:35:0E:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ecb1b9f1-b041-388f-9435-4d1d857917df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:0b:e9:8d:81:39:82:52:27:b2:fa:fe:ae:4d:9b:95:a8:1e:
         2e:59:96:0d:01:d0:5a:25:92:98:57:85:79:6d:fa:a1:2c:83:
         f9:5a:36:e0:b1:ab:3b:4c:59:fc:88:61:1a:f5:6d:62:4e:67:
         2c:9a:cb:da:07:5c:76:85:96:d3:90:c4:79:bb:27:09:86:f4:
         34:94:6f:5f:75:e3:03:ea:8b:4b:86:20:99:68:9d:b3:6b:e5:
         5b:b5:02:e5:13:c5:d1:c1:5c:ea:71:1c:11:f5:17:49:ce:ac:
         f3:03:db:e7:0f:5f:0c:9c:ca:53:16:52:c0:b3:67:93:44:0a:
         66:8b:22:2c:95:f9:d2:f6:60:28:0c:33:fd:1e:fa:f2:6e:fe:
         7c:ae:db:4e:c6:d0:f0:26:1c:0e:27:df:d6:e3:d8:29:0e:ba:
         d7:73:6b:9e:7b:b5:33:83:bb:aa:6d:b0:9f:92:35:20:75:94:
         03:c7:e3:23:be:6a:52:33:a6:71:c3:bb:3f:88:7e:bd:9a:48:
         88:6a:0f:33:2a:3c:11:90:1c:34:28:e7:4d:d1:23:19:25:a7:
         89:0d:66:64:4d:43:42:e7:08:58:13:b5:88:ef:58:97:bd:e8:
         22:96:8a:58:60:7f:ec:2b:9b:79:f0:f9:72:1c:b2:ae:6c:87:
         d4:35:51:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+XzsaD9rY5DiyFMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz
NmMzMB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk
NGM5ZmYwZWEtNmRlMi00NzZhLThhZDUtMzQxMzBkNzJjY2RmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse++ARaSaiPwT2xdIcaBlIgTCslW29o1z1ub
SqZJx7d2QNng1Kh7htUgkJGWI9FN6wA5aiKXtGtyS158xNRqz5X0wlyGK4hWpA6f
BmTFDs2MziT5RhGahUoEqUp3P103poC7PTDV89EUi6f41BtABt+tL4ujefLUecN2
vnNnRznohD8ibCisXx6qTW+iabNS33qQuUt31ildnR3yTG1hpWGdqLXMUbVlVYKk
dFEC1aczQq+eig3xqHl2QQbB72lmDAXvC17mQFfj7Ffdtqs0HRnf/wNHuiJANp/R
J+YSZ5KDq0lT+7TAgV4NXett1TVYGcOIxC/R1cL1vlroouSW6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEDrozIHMYgHeVoWmYRrQq6ONQ6AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4
MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZWNiMWI5ZjEtYjA0MS0z
ODhmLTk0MzUtNGQxZDg1NzkxN2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0
MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0
MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk
ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv9oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIgL6Y2BOYJSJ7L6/q5Nm5WoHi5Zlg0B0FolkphXhXlt+qEsg/laNuCx
qztMWfyIYRr1bWJOZyyay9oHXHaFltOQxHm7JwmG9DSUb1914wPqi0uGIJlonbNr
5Vu1AuUTxdHBXOpxHBH1F0nOrPMD2+cPXwycylMWUsCzZ5NECmaLIiyV+dL2YCgM
M/0e+vJu/nyu207G0PAmHA4n39bj2CkOutdza557tTODu6ptsJ+SNSB1lAPH4yO+
alIzpnHDuz+Ifr2aSIhqDzMqPBGQHDQo503RIxklp4kNZmRNQ0LnCFgTtYjvWJe9
6CKWilhgf+wrm3nw+XIcsq5sh9Q1UaU=
-----END CERTIFICATE-----
Generated at Thu Jun 25 03:45:36 2026 by rpki-client