Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/025c2ea9-fb88-33f7-8bb8-88a3dba873d3.roa
File:                     025c2ea9-fb88-33f7-8bb8-88a3dba873d3.roa (raw, json)
Hash identifier:          hoPLH0HSnT9CkkxuQeERtCTfWOS5WoXhwchWDfmElAw=
Subject key identifier:   3D:6B:C2:84:7B:59:EC:C9:B6:51:E8:CF:0F:A7:79:A2:E4:98:8A:4C
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584EE0C2068297217E24129EEE20
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/025c2ea9-fb88-33f7-8bb8-88a3dba873d3.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     53508
IP address blocks:        206.255.0.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:06:82:97:21:7e:24:12:9e:ee:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=dbfa3f5f-4239-412e-9604-e6064d198b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5d:e3:34:ad:dd:ab:ab:aa:31:ec:31:84:8d:
                    92:12:a1:64:24:a4:11:54:77:ec:cb:f9:0d:36:cb:
                    05:01:ec:aa:54:1d:d8:64:82:7f:9d:28:95:4e:8e:
                    fa:e3:7a:82:b5:5e:5a:e1:5d:f3:ba:aa:69:84:12:
                    f0:61:bf:45:ff:12:c3:64:70:67:d1:33:1c:97:7d:
                    40:5f:63:95:5b:39:93:8b:fb:49:dc:dc:86:d2:9f:
                    40:7a:17:46:0a:d9:32:08:1e:76:4f:e0:df:e7:05:
                    24:8d:e5:5e:98:b2:1b:5d:bb:db:57:99:1f:df:c4:
                    39:4e:5f:11:e8:30:e4:35:48:7a:dc:4d:b2:44:eb:
                    f5:8a:06:ba:1c:19:ea:3b:d2:98:1d:f4:44:a6:b9:
                    7f:15:1d:1c:5c:2d:af:6e:e5:30:87:f5:57:5a:94:
                    a8:74:8b:9a:fc:31:11:56:fa:15:96:e6:cf:08:02:
                    18:e6:57:3b:39:c2:23:ba:e4:c1:af:5a:3e:db:92:
                    50:c8:27:b8:a8:71:fa:86:73:19:29:a1:06:ea:02:
                    ad:04:56:0c:9e:4a:34:9a:a3:c0:cd:78:fd:0a:61:
                    90:ce:8b:50:ee:04:fd:d4:6e:57:b6:de:52:c9:aa:
                    5e:7c:d2:52:6a:72:d6:cf:c5:fb:ca:c9:6d:3e:ad:
                    34:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6B:C2:84:7B:59:EC:C9:B6:51:E8:CF:0F:A7:79:A2:E4:98:8A:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/025c2ea9-fb88-33f7-8bb8-88a3dba873d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:e5:dd:5d:0d:17:2b:7a:93:d2:8e:2a:9f:8d:77:da:01:70:
         76:f6:87:02:13:45:53:1d:5d:4b:82:c9:98:50:26:70:ea:ce:
         36:35:06:11:00:4d:fa:05:43:37:3e:70:f8:e7:e1:ce:60:b1:
         60:d6:d7:79:7f:2d:ac:76:77:95:48:0d:41:c4:d5:6a:49:cd:
         a7:90:6b:83:88:19:64:95:56:8f:ee:6e:84:64:42:df:03:a1:
         4b:fe:07:46:81:31:9e:fe:94:3c:86:13:f2:05:31:87:19:fc:
         27:8c:8a:07:9c:08:28:33:f0:73:c8:08:f1:80:0c:cf:89:e8:
         ba:7b:31:38:99:53:e4:75:79:06:7f:b4:f6:f7:de:55:a5:83:
         ba:e2:91:6c:ac:61:9b:82:4f:73:4a:be:14:ad:2f:69:03:4a:
         7f:43:b4:bd:67:ed:24:fa:38:58:8e:e0:65:ac:16:18:a8:27:
         ac:d8:b7:48:d0:d4:48:e9:32:77:fa:cd:57:c8:70:51:c3:ae:
         07:fc:8f:ba:63:e7:cc:39:f5:8b:a7:b1:49:5c:e8:52:20:f8:
         76:23:30:28:61:fb:08:38:ed:e8:71:69:bb:72:bf:bb:bb:b0:
         f3:e4:23:02:6e:d6:ae:0d:03:61:92:16:38:64:9b:e8:d0:bf:
         7c:ff:ae:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:40:02 2026 by rpki-client