Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/06ce1515-4fc0-3999-b9f3-90bdb6a8f539.roa
File:                     06ce1515-4fc0-3999-b9f3-90bdb6a8f539.roa (raw, json)
Hash identifier:          BCCqHOxU18AV1JZEawguSRIJH3427peFy6nhK3/JNLw=
Subject key identifier:   11:69:BF:6A:65:B0:C5:17:64:9D:B9:CA:79:8B:68:24:D3:16:EA:4B
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584ABD4BA7938CA0BFAB092F1580
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/06ce1515-4fc0-3999-b9f3-90bdb6a8f539.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     53508
IP address blocks:        206.255.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:a7:93:8c:a0:bf:ab:09:2f:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=db3a1107-7053-45a6-a304-8bff1f1c1181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4b:6d:bb:d2:41:3c:88:5c:a6:07:32:f2:14:
                    0d:25:5c:cc:7d:87:db:1b:af:72:7b:a5:b8:16:02:
                    b3:3e:94:a4:be:d8:43:ee:14:db:8b:80:2a:4f:2c:
                    45:bb:01:14:9c:b4:35:9d:29:f6:06:bc:08:97:7d:
                    95:93:de:15:82:ad:1c:fc:f2:12:f4:6f:7f:b4:48:
                    5d:f3:8a:62:3f:69:ac:53:56:be:54:ba:ad:6c:aa:
                    14:76:01:87:9c:4e:40:67:07:6a:8f:08:04:5c:cf:
                    e5:d5:6e:6e:6d:7f:04:2f:0e:a9:be:da:55:dd:12:
                    af:a5:8b:d7:b7:05:6a:43:b4:dd:52:8f:bf:ac:b8:
                    8b:05:3e:1f:91:1f:6d:82:41:08:ef:60:76:da:86:
                    3d:a6:94:7d:75:f8:70:0a:50:74:9a:a3:89:ef:96:
                    8c:70:b4:78:4d:81:1a:75:25:0f:cb:db:84:87:ff:
                    14:4a:8d:7d:cf:2b:0a:67:c6:81:dc:bc:a6:86:6e:
                    17:54:be:e1:64:2e:6c:39:4d:3d:95:5a:c6:c9:f1:
                    57:1a:27:57:bf:de:59:2c:2e:6f:e0:a7:35:9a:7c:
                    b7:cc:1d:8d:af:7b:ce:17:25:d2:35:a9:31:bc:de:
                    aa:f9:3a:e8:9d:4f:71:81:2e:c5:26:9e:d6:14:76:
                    46:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:69:BF:6A:65:B0:C5:17:64:9D:B9:CA:79:8B:68:24:D3:16:EA:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/06ce1515-4fc0-3999-b9f3-90bdb6a8f539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:e8:e0:1e:19:96:a9:50:80:d3:68:d8:e8:17:d3:a9:d3:6a:
         4d:84:72:78:6c:d2:15:9f:b1:16:da:d6:80:c2:0b:31:7c:da:
         ea:f2:17:6d:97:6f:9d:3b:eb:b6:85:30:b2:f8:47:14:32:e4:
         0b:b2:85:14:af:4a:ca:65:de:22:c9:b5:6e:72:a0:7c:39:6d:
         3f:9d:6b:9b:7d:b7:0e:07:3b:07:0f:51:61:62:99:1a:05:6b:
         d2:69:84:3d:af:0d:c3:e7:36:0c:b1:7d:b3:a0:62:92:69:98:
         37:a9:36:46:dc:99:f4:02:cd:44:1e:ce:1a:bc:6f:dc:5d:26:
         41:cb:02:87:59:7f:07:70:da:a4:76:53:b3:f2:32:59:a4:ac:
         69:e1:9f:3d:15:81:75:9a:6f:19:cb:ce:3b:d8:61:5c:68:13:
         e4:6d:db:b3:b9:38:7c:8a:5e:02:71:4d:f6:3b:6b:1a:2d:61:
         93:5d:b6:55:5e:ba:b3:c2:7b:43:6a:30:fa:46:2f:79:da:bb:
         98:04:53:bb:54:0f:f0:cf:fc:df:77:b6:6b:3d:5a:fb:9c:1e:
         9f:c2:3e:b9:e9:58:d8:8c:ac:50:0f:a9:1f:a4:4e:eb:81:0b:
         8c:2a:6f:b0:99:9d:66:25:32:79:a6:d0:ac:2d:61:ab:ea:32:
         47:5b:04:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:08:29 2025 by rpki-client