Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/06ce1515-4fc0-3999-b9f3-90bdb6a8f539.roa
File:                     06ce1515-4fc0-3999-b9f3-90bdb6a8f539.roa (raw, json)
Hash identifier:          ZVvfaR258SZ0WdkYwJsJPik/Bqosn69vsMfoFxtPxyw=
Subject key identifier:   D5:3C:F2:05:C7:C5:C8:D5:37:2E:90:F8:B1:3A:CA:78:0C:DB:BC:45
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F43285849DC8FCF2B67CC0E400BF7D270
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/06ce1515-4fc0-3999-b9f3-90bdb6a8f539.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     53508
IP address blocks:        206.255.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:cf:2b:67:cc:0e:40:0b:f7:d2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=9840575e-c59e-40fd-823e-08805562414d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:01:62:4a:ac:5d:3b:04:a6:a8:f7:ae:4d:d6:
                    52:91:cc:1a:42:ca:e6:c5:cb:6b:4e:99:46:9c:08:
                    7d:b2:54:5b:a9:7b:27:38:91:ea:76:64:03:9d:a0:
                    20:c7:46:3a:24:1b:7a:d6:7e:e3:69:3c:01:51:b3:
                    93:a6:2d:e3:28:9b:dd:91:96:77:cd:ab:eb:74:9a:
                    57:fd:47:51:85:34:39:1c:42:e1:c4:43:72:2a:0b:
                    0c:69:4f:da:f5:bc:7c:3e:b4:37:93:ad:f1:fd:70:
                    1b:fe:5b:d9:f0:44:d9:79:0b:81:c6:c4:49:96:f6:
                    56:f8:f2:b6:34:37:57:01:85:21:9c:ce:cb:19:d1:
                    1e:d2:18:65:7e:2d:57:7a:3b:ce:d8:65:82:f5:ad:
                    e3:14:63:e7:f0:df:19:cb:a9:40:78:69:bd:96:7c:
                    02:2f:5d:5e:88:0f:dc:b4:cb:c9:37:31:1a:b9:29:
                    d1:18:48:49:6c:f1:87:62:0d:65:1e:84:fb:3e:a7:
                    37:40:f5:67:ea:89:83:cd:57:3a:4c:fa:74:c4:d5:
                    2c:3e:e2:27:9a:14:c8:6c:52:21:2c:d8:66:45:55:
                    aa:68:74:b3:21:d9:0a:3e:2a:53:bc:e0:06:93:75:
                    48:7e:f4:72:ea:da:ac:33:b0:a2:1b:51:fc:06:89:
                    8d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:3C:F2:05:C7:C5:C8:D5:37:2E:90:F8:B1:3A:CA:78:0C:DB:BC:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/06ce1515-4fc0-3999-b9f3-90bdb6a8f539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:1f:0e:dc:4c:b3:30:0e:54:d1:0d:9d:27:79:78:4c:45:50:
         76:39:36:02:1d:ed:a5:bd:a3:5d:ab:62:aa:c4:57:eb:aa:85:
         8b:60:b0:4c:c3:25:47:a8:00:a3:a4:0c:0e:11:e4:c4:a0:08:
         aa:55:56:3c:17:1e:0f:c5:e5:69:51:d8:82:8d:80:ba:8c:dc:
         0d:01:ba:0c:ee:71:88:54:b5:0c:46:c5:ec:6b:db:9d:47:20:
         d2:52:eb:e4:4c:6f:b3:69:c8:a2:46:b0:26:43:d4:d7:6e:00:
         bf:03:75:66:da:ec:e8:d5:3f:17:8d:0e:02:cb:42:cb:14:0e:
         9c:85:51:55:d6:99:c5:b1:eb:bc:a4:29:91:96:ad:ca:bd:c7:
         2c:29:fd:8f:25:e4:f4:d0:bb:3c:0f:55:40:7d:64:9b:97:04:
         b3:a2:8d:63:9a:48:9b:2c:e8:c9:b3:74:5d:b7:8b:21:0d:44:
         48:bf:e9:13:83:73:e1:0f:d0:8f:a4:48:69:87:ac:45:69:ba:
         08:01:11:c7:8c:43:6e:f0:60:d1:88:00:15:25:6c:f0:81:f4:
         9a:5a:de:91:c5:cb:e3:7c:bd:79:55:d7:25:bd:a9:a9:57:7d:
         e3:02:40:71:e0:cc:39:cd:f8:96:41:3f:a0:8c:fb:5c:fa:9a:
         fb:29:0a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:26:35 2025 by rpki-client