Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/0736b5b7-129c-3fc6-81da-33e324ce70e1.roa
File:                     0736b5b7-129c-3fc6-81da-33e324ce70e1.roa (raw, json)
Hash identifier:          7QpCoQFm0VeTqV2ZcByBDVHlGOEL5tLJAV7qaNOcTKk=
Subject key identifier:   22:5C:DC:EC:21:33:CE:8D:9A:7D:8E:8F:5F:77:4D:AF:4F:71:7B:8E
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584ABD4BA8D5933026B312A9D380
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/0736b5b7-129c-3fc6-81da-33e324ce70e1.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     1651
IP address blocks:        206.255.156.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:a8:d5:93:30:26:b3:12:a9:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=b4e3227b-469a-44a9-a0b6-7cb212860d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:35:41:dc:73:de:25:40:a3:2b:a3:4e:bc:e3:
                    b5:3c:36:11:ee:65:e0:2d:f0:d8:17:fb:c8:dc:34:
                    44:20:fa:5f:42:69:8f:6d:90:84:8f:47:0f:98:59:
                    e1:ba:ea:c4:3a:03:19:19:14:a5:6f:af:81:d1:37:
                    61:4e:da:88:71:77:bb:7d:f6:92:de:81:8e:48:a6:
                    2f:b9:85:bd:5a:82:27:17:88:5f:84:78:a4:9a:a1:
                    06:5c:eb:b8:90:40:bb:49:9f:d2:06:03:88:e3:8a:
                    00:de:2c:7a:4a:cb:7d:4b:bb:f9:5e:b4:a3:b6:cb:
                    ef:63:29:f1:b7:e2:31:fc:6c:1c:b3:c4:42:b9:6e:
                    88:90:4b:2c:95:d7:7d:8a:a9:4a:ca:be:1f:13:c9:
                    fb:57:7d:5f:c7:25:0a:d2:62:a0:5a:1c:57:36:53:
                    59:a8:4e:05:4c:b2:0c:7a:77:c0:88:c2:49:c8:9b:
                    fb:d5:fe:42:7f:62:57:60:05:06:69:4c:55:d1:e0:
                    c9:e8:58:61:a0:ca:49:df:68:4e:d6:93:14:82:68:
                    69:7f:e3:b6:ed:2b:e8:62:a6:9f:12:3e:c2:84:c3:
                    79:c9:56:7e:ff:4e:60:c9:36:93:d0:c8:bc:44:f5:
                    06:a8:28:9e:1b:40:d6:20:31:9c:6c:79:2b:cb:d9:
                    a5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5C:DC:EC:21:33:CE:8D:9A:7D:8E:8F:5F:77:4D:AF:4F:71:7B:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/0736b5b7-129c-3fc6-81da-33e324ce70e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:c7:2e:b5:36:87:f3:98:2e:a9:ea:80:d2:53:bd:48:38:56:
         78:5d:3d:51:de:d1:2d:72:be:0c:75:24:88:4e:53:3b:66:d0:
         45:10:74:72:48:ef:22:cd:0b:f7:cb:bf:92:b9:87:f9:42:22:
         9f:f9:5e:5b:b7:e9:91:3b:6e:52:85:be:6a:8f:17:1b:e8:74:
         98:ba:0a:9d:99:56:c4:66:ea:39:76:5a:55:21:0b:90:ad:5a:
         23:93:99:fd:8e:70:e3:46:9f:dc:d6:53:38:32:a4:e1:1a:64:
         80:e8:4b:d7:7b:b1:9a:25:3c:59:6c:ac:e8:6e:f0:5c:65:b1:
         79:17:14:c0:0a:5f:67:59:3f:14:17:a7:93:a0:26:1c:79:52:
         fa:33:3b:49:3a:ba:00:29:9e:87:42:db:a8:0a:14:a1:20:24:
         bc:50:af:02:93:4e:97:6d:eb:5f:f2:81:95:db:e5:4e:38:94:
         d6:eb:f7:69:fe:ac:69:99:3e:fd:ab:4b:1d:e7:d8:7f:5a:af:
         8d:5a:26:17:c4:b2:85:47:d5:76:2d:f1:24:95:bf:bf:84:1d:
         df:e6:ee:04:73:62:d1:7f:af:55:2a:cb:f7:a4:89:6d:75:0e:
         55:99:75:0e:97:8e:f2:17:14:4a:bc:a4:f6:89:c7:72:9d:ea:
         fb:85:6f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:24:40 2025 by rpki-client