Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/0736b5b7-129c-3fc6-81da-33e324ce70e1.roa
File:                     0736b5b7-129c-3fc6-81da-33e324ce70e1.roa (raw, json)
Hash identifier:          8Qe38/MVNcviJPVLYn0N7Rs9g8ss8C1oatnQo6kx6sI=
Subject key identifier:   39:3F:08:6D:94:B2:72:0A:FD:DB:F9:BB:21:88:58:24:0D:74:4F:99
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584B9E07C55F3A13BECFFEAB14C0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/0736b5b7-129c-3fc6-81da-33e324ce70e1.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     1651
IP address blocks:        206.255.156.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:c5:5f:3a:13:be:cf:fe:ab:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=b9e478b6-2c97-40ee-b8da-a296c8bd1eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5f:ea:96:87:13:b7:89:94:ca:18:66:d8:e1:
                    7e:83:bf:db:61:65:ac:d7:b4:b7:b7:f3:dd:dd:8d:
                    f8:40:f6:e5:37:2a:ab:04:65:e0:9c:95:ae:77:3c:
                    71:d1:1a:9b:c9:1b:38:71:cb:9c:96:cc:f4:75:2c:
                    be:3a:75:8b:15:44:23:56:0e:8c:9e:cd:1d:f2:e1:
                    29:5a:ac:b9:05:12:c2:0c:8f:42:c3:35:b8:ee:73:
                    c1:6a:9f:c5:85:0b:70:e5:a0:f9:97:ae:b6:7e:21:
                    9f:eb:bc:42:d3:13:53:3b:40:e4:21:c0:9d:cd:87:
                    6e:32:00:75:38:a1:ca:ed:83:ac:23:df:49:bb:57:
                    7e:71:af:75:6e:c7:ea:86:b2:4f:8f:15:58:a3:ba:
                    3e:e3:41:e8:9f:94:a1:00:ce:5a:f7:87:7d:d7:fd:
                    38:dd:69:3c:07:56:28:ec:3b:c1:c6:2a:8f:ca:df:
                    4f:3d:ec:db:23:5f:11:35:ac:27:0a:38:a6:91:b6:
                    ef:f8:e2:83:fc:d2:19:a5:d6:2a:f7:8d:7d:ec:da:
                    09:00:e0:5e:73:10:91:32:85:6c:af:ea:80:dd:4b:
                    2e:38:d7:11:58:32:94:f3:14:ee:44:bb:48:dd:6f:
                    74:15:4e:68:61:36:b3:2f:a7:88:47:a3:89:0f:cd:
                    ba:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3F:08:6D:94:B2:72:0A:FD:DB:F9:BB:21:88:58:24:0D:74:4F:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/0736b5b7-129c-3fc6-81da-33e324ce70e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:2b:3b:a2:02:11:ff:35:b6:53:ce:dd:f2:ec:d1:75:f9:7c:
         53:4c:91:1f:b8:68:26:2e:c6:96:84:76:39:68:fd:05:ea:53:
         4a:85:27:93:f4:a9:13:66:67:4d:8d:c8:34:d5:0c:ad:85:b9:
         eb:d6:ae:1f:66:f4:fe:47:3a:3a:52:f1:4b:d9:d8:b7:49:a5:
         af:e4:e9:be:6d:25:6a:52:b1:97:bd:a3:7a:4c:d6:44:eb:cc:
         55:7a:2a:a0:a1:d7:3a:2f:30:47:e3:2f:51:2d:ed:7a:5c:1f:
         c1:36:f3:d2:9d:6f:78:e8:fc:43:53:7b:49:1f:f7:d1:14:32:
         1d:9b:1e:54:44:e8:fa:18:82:5d:ee:0d:d1:ba:b9:09:79:61:
         d5:21:28:dc:c8:96:35:9d:12:97:65:cf:6d:9c:04:60:db:5e:
         e5:41:c3:2a:9c:72:c6:e3:e8:f7:74:a9:82:77:a6:bc:5d:5a:
         48:ed:73:70:e7:88:c9:5c:71:c5:e9:25:03:72:e7:83:17:30:
         c0:8c:ca:0b:da:9a:d1:ce:49:1a:db:55:21:39:19:5e:36:51:
         b5:ab:38:b3:17:47:77:b9:f3:e1:db:aa:ae:d9:38:9f:f4:75:
         b3:27:21:e2:10:6d:08:57:92:8a:f5:f6:88:41:36:04:4d:2d:
         5a:6a:82:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:19:17 2025 by rpki-client