Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/1a12ec50-acc1-3afc-a7a2-335b59218489.roa
File:                     1a12ec50-acc1-3afc-a7a2-335b59218489.roa (raw, json)
Hash identifier:          w9/EJuz39URDJP3gSXYTjZgmvaeNhURXHqZ+lylyQio=
Subject key identifier:   50:3F:2F:96:AC:0C:79:E9:59:69:2C:57:AE:F9:30:0A:A8:55:C2:80
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584ABD4B9A2E38662BB4C97E8000
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/1a12ec50-acc1-3afc-a7a2-335b59218489.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     53508
IP address blocks:        206.255.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:9a:2e:38:66:2b:b4:c9:7e:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=358f9b0f-2e8a-43f7-904e-ee9d295baad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:56:cf:0e:d2:09:a9:71:29:3a:d5:94:d7:7f:
                    83:92:0d:cf:ee:57:07:47:79:96:ba:d1:18:96:48:
                    ae:c4:25:c9:03:13:7b:94:04:90:d2:3b:ab:7d:70:
                    fb:b4:49:34:09:89:92:0f:ba:47:a1:c8:2e:dd:30:
                    70:b4:0c:12:0d:06:e2:0c:78:e5:18:74:54:ce:83:
                    ff:a2:7d:bf:31:94:4d:35:a8:81:34:2a:99:0a:bb:
                    b0:87:5a:db:40:ee:c7:41:ca:6b:f5:fd:75:83:c3:
                    28:ae:c9:9c:96:78:77:47:88:e6:05:6d:16:2e:d1:
                    58:6a:a4:02:4f:ca:46:2d:40:a4:45:5b:ab:49:11:
                    19:fb:5a:b7:c7:ea:f7:6e:39:b3:1e:2b:0e:05:f4:
                    cf:b3:b0:87:39:04:33:e0:a9:1a:06:c4:57:e6:a2:
                    cf:78:66:66:7e:0b:4d:47:64:b7:a6:05:19:54:47:
                    23:82:63:2f:46:d7:16:69:c4:d8:19:97:5d:b3:09:
                    bd:38:8f:cb:10:51:5e:62:2c:24:47:42:2e:2f:75:
                    c1:a5:68:0d:a3:09:5c:84:b7:ca:04:10:b4:aa:ac:
                    2a:ef:fa:5d:d1:e0:53:3a:2e:e4:e1:e2:a7:0b:62:
                    92:45:4f:c9:a1:32:93:86:51:cb:ec:37:34:4a:a9:
                    6f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:3F:2F:96:AC:0C:79:E9:59:69:2C:57:AE:F9:30:0A:A8:55:C2:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/1a12ec50-acc1-3afc-a7a2-335b59218489.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:c8:13:cd:00:c0:3a:13:35:65:5a:60:4a:0b:c3:9f:69:98:
         2d:38:c7:6b:1c:28:99:5a:06:f5:6d:24:fb:f9:43:a8:ed:80:
         8c:2f:24:f4:94:c1:d1:99:7c:6f:ce:11:f8:81:39:8f:f3:fb:
         3c:7e:54:0a:6b:5a:f3:b7:9b:3b:70:04:91:a8:04:0f:38:fb:
         96:6b:01:37:de:20:81:1c:fa:7c:d5:e6:a9:9d:c9:53:49:95:
         c5:0f:3a:d0:25:3e:3c:f6:c2:36:4b:59:71:96:fe:44:43:78:
         10:89:ae:df:22:22:3d:5c:b8:aa:c9:c4:e3:14:46:38:16:9d:
         e4:7f:a2:1c:ae:cd:5a:3e:1d:ba:38:4e:ac:7d:c7:ab:3c:cf:
         c0:32:a9:6a:51:de:12:bb:e7:e8:d5:1b:30:f4:64:cb:5d:62:
         ee:eb:4b:f9:6a:92:37:11:61:8e:cd:48:d4:6f:72:46:35:fa:
         41:f6:fe:b6:9f:68:c5:fd:4c:2f:eb:ab:d6:d5:5d:29:d5:85:
         02:e0:a5:7a:d6:88:1f:38:c5:4f:79:26:05:4f:0b:5a:7f:b0:
         d3:5d:a1:b0:bc:22:69:89:d9:4f:31:77:0a:7a:e2:34:44:2b:
         d3:b4:83:9f:a5:ea:6b:48:5f:f1:eb:e6:2e:b8:9c:50:dc:3c:
         3a:71:4a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:24:01 2025 by rpki-client