Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ffbc32ea-31a9-38f5-8150-ad7c8a044ac7.roa
File:                     ffbc32ea-31a9-38f5-8150-ad7c8a044ac7.roa (raw, json)
Hash identifier:          k6EZBZApy5ltfpjqGob5/ydnxb+4Maub0NAwHFXYTb8=
Subject key identifier:   BD:C3:2B:81:1E:DD:E6:5E:87:20:F8:DA:F7:1C:C5:75:A9:8A:91:D6
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584E3E5F3A69618D7C3900FDE500
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ffbc32ea-31a9-38f5-8150-ad7c8a044ac7.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     53508
IP address blocks:        24.89.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:3a:69:61:8d:7c:39:00:fd:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=0863afa7-d455-4935-a0c5-ad2bbb714eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:37:63:37:fe:5d:ce:45:50:17:9e:a0:26:e7:
                    28:f5:5d:e6:b9:e9:dc:ee:51:26:47:48:9b:9d:5e:
                    46:08:a4:96:e6:59:c5:48:ac:21:5c:34:d3:60:b8:
                    01:c5:3e:68:d5:4a:c4:e1:84:02:e5:eb:e9:c8:d4:
                    f3:13:5f:fb:b8:11:53:40:b0:b4:aa:4a:50:d5:fd:
                    1f:c1:4b:a8:ac:bb:d8:c0:64:9f:87:6a:b0:f5:b2:
                    96:f9:31:cc:ec:43:ae:8f:da:6d:59:80:df:c3:c4:
                    5e:5e:47:af:ae:67:23:db:3c:11:a3:e3:e2:c0:52:
                    02:3d:80:da:64:72:39:1b:97:09:81:34:5c:bd:0f:
                    3f:98:05:6c:19:32:1b:00:8c:8d:9a:c8:d5:1b:ff:
                    fb:25:32:76:9e:a0:c7:f3:f6:ff:85:2b:93:01:15:
                    8b:f3:3f:0f:e8:ee:5a:e5:e8:22:98:f3:94:51:40:
                    de:e5:79:09:41:fd:e0:44:a7:0d:2f:ee:3c:9c:09:
                    bc:2f:0e:4b:49:40:f9:26:83:05:dc:59:df:cb:b3:
                    c8:32:58:73:a2:3e:3e:fa:b6:2d:b8:3b:64:e7:84:
                    43:d7:6f:7c:ef:aa:50:43:4e:d6:6c:77:60:6e:df:
                    e2:68:26:04:ad:f7:31:b5:0f:b6:01:64:83:e8:7b:
                    92:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C3:2B:81:1E:DD:E6:5E:87:20:F8:DA:F7:1C:C5:75:A9:8A:91:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ffbc32ea-31a9-38f5-8150-ad7c8a044ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.89.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:7b:b8:10:6b:69:e6:78:5d:6f:04:80:e6:86:92:5d:df:e9:
         75:4e:26:d7:00:85:7e:82:c3:a6:82:fd:05:11:95:f4:2c:9b:
         78:31:6a:03:01:82:86:c6:d7:a8:e7:52:3b:99:76:ff:f2:09:
         26:47:7a:21:d9:7b:ed:07:19:04:fe:70:27:22:a1:e6:e6:0b:
         c9:17:0a:34:c9:e7:34:17:4e:18:85:85:26:59:65:84:de:8f:
         eb:38:47:ec:f7:8c:ce:bb:a1:04:7b:48:ff:7b:70:95:3f:26:
         87:4a:44:4b:b0:aa:25:23:2e:f6:29:2f:97:9a:6f:89:a1:51:
         3e:f2:f6:3f:50:de:3f:2f:16:86:21:50:85:36:00:16:af:54:
         cb:32:59:6d:26:08:9d:d0:ef:10:a0:32:4c:94:f1:2d:05:be:
         d6:58:2b:75:25:50:41:44:47:08:bc:fb:c4:6c:37:01:75:4d:
         99:ec:ed:65:a8:19:33:ee:49:f7:24:dd:1a:c6:b7:36:c7:bb:
         40:47:05:c2:98:f7:51:a8:e0:1f:67:01:00:4b:c7:cb:d4:d8:
         26:77:8d:4c:7c:59:0d:82:09:54:a9:27:d1:80:ae:4a:2a:1d:
         42:af:8b:ac:9b:d4:4b:a9:57:bf:76:99:18:91:a1:27:0c:08:
         1d:b2:6e:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+XzppYY18OQD95QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz
NmMzMB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk
MDg2M2FmYTctZDQ1NS00OTM1LWEwYzUtYWQyYmJiNzE0ZWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDdjN/5dzkVQF56gJuco9V3muenc7lEmR0ib
nV5GCKSW5lnFSKwhXDTTYLgBxT5o1UrE4YQC5evpyNTzE1/7uBFTQLC0qkpQ1f0f
wUuorLvYwGSfh2qw9bKW+THM7EOuj9ptWYDfw8ReXkevrmcj2zwRo+PiwFICPYDa
ZHI5G5cJgTRcvQ8/mAVsGTIbAIyNmsjVG//7JTJ2nqDH8/b/hSuTARWL8z8P6O5a
5egimPOUUUDe5XkJQf3gRKcNL+48nAm8Lw5LSUD5JoMF3Fnfy7PIMlhzoj4++rYt
uDtk54RD129876pQQ07WbHdgbt/iaCYErfcxtQ+2AWSD6HuS/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL3DK4Ee3eZehyD42vccxXWpipHWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4
MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZmZiYzMyZWEtMzFhOS0z
OGY1LTgxNTAtYWQ3YzhhMDQ0YWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0
MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0
MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk
ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGFkxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACh7uBBraeZ4XW8EgOaGkl3f6XVOJtcAhX6Cw6aC/QURlfQsm3gxagMB
gobG16jnUjuZdv/yCSZHeiHZe+0HGQT+cCcioebmC8kXCjTJ5zQXThiFhSZZZYTe
j+s4R+z3jM67oQR7SP97cJU/JodKREuwqiUjLvYpL5eab4mhUT7y9j9Q3j8vFoYh
UIU2ABavVMsyWW0mCJ3Q7xCgMkyU8S0FvtZYK3UlUEFERwi8+8RsNwF1TZns7WWo
GTPuSfck3RrGtzbHu0BHBcKY91Go4B9nAQBLx8vU2CZ3jUx8WQ2CCVSpJ9GArkoq
HUKvi6yb1EupV792mRiRoScMCB2ybsM=
-----END CERTIFICATE-----
Generated at Thu Jun 25 03:42:55 2026 by rpki-client