Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/28557fa1-f2d2-3449-8ad6-eb6fe5ca09d9.roa
File:                     28557fa1-f2d2-3449-8ad6-eb6fe5ca09d9.roa (raw, json)
Hash identifier:          841pbl4MzalzCPpWaW59dsjafcUkvY4SXDeZOWn0tTg=
Subject key identifier:   2D:E9:C4:7B:74:07:EF:69:62:8C:B3:A3:9D:45:0B:23:42:43:76:7A
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584B95A7A031EF70DFC918D013C0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/28557fa1-f2d2-3449-8ad6-eb6fe5ca09d9.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     53508
IP address blocks:        206.255.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:a0:31:ef:70:df:c9:18:d0:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=9fdf9eed-cdfe-4e60-a6b6-ebb4fdc68451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2d:fd:44:a3:ac:8c:49:53:bc:a2:b8:c0:3d:
                    b4:5b:0a:ae:ac:c2:bd:68:ba:92:bf:ac:c2:0c:ee:
                    26:8c:9e:f8:2f:ea:09:d8:71:ca:3b:e9:ce:75:a3:
                    48:85:e5:8b:bd:1b:2a:d8:e9:53:3a:f4:b3:61:f5:
                    45:43:80:74:00:6b:69:67:55:f6:9e:08:7f:77:3a:
                    8f:9f:cd:42:d5:4c:76:b5:63:56:a9:09:42:d1:fc:
                    31:2f:d2:fd:57:a0:eb:23:19:58:2f:74:4c:bd:2a:
                    38:28:e0:34:f0:95:99:e4:62:a9:dc:05:65:10:35:
                    bd:77:26:85:e8:df:23:42:a7:00:79:73:2f:68:21:
                    55:34:f2:8d:01:7d:cd:c3:c1:8f:52:56:cc:5e:c9:
                    fe:75:2f:92:3f:14:14:da:92:38:4c:58:0e:54:31:
                    db:f8:45:e5:b9:5a:aa:3f:a1:1a:36:51:ac:1f:10:
                    18:9d:ff:8a:50:d0:06:ab:43:10:22:64:9b:1f:dc:
                    0b:4d:71:a5:b3:53:e7:c7:bf:8d:48:3d:b9:11:a9:
                    8a:e5:d9:81:a4:08:3f:75:0c:8e:a1:07:8e:07:9a:
                    af:28:54:db:cd:c6:14:cb:f0:c4:81:2d:9f:04:c8:
                    b0:10:6d:d5:55:46:dd:81:a7:1a:f6:eb:f4:e3:e1:
                    6d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E9:C4:7B:74:07:EF:69:62:8C:B3:A3:9D:45:0B:23:42:43:76:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/28557fa1-f2d2-3449-8ad6-eb6fe5ca09d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:25:5a:47:82:81:cb:ed:2a:38:b4:a2:b1:de:3a:03:e8:de:
         6d:21:ac:12:4b:15:bf:26:ff:af:34:40:08:dd:90:3e:df:53:
         50:5d:f7:9e:34:0f:ca:ec:59:9c:c1:d1:41:0c:44:2e:49:ff:
         74:29:8d:66:7d:67:bc:ec:58:c9:ee:dd:31:d1:be:9a:b2:ff:
         52:1f:d3:c7:09:89:0d:1e:63:21:23:66:ae:1c:6d:14:de:33:
         ce:f8:68:50:f9:f7:f0:98:40:79:02:86:35:db:f9:94:24:39:
         69:b2:a7:fe:80:5c:52:31:82:fc:1c:ae:89:1f:e0:0a:b9:ab:
         fc:59:7a:cf:a4:03:c7:6c:e9:41:7d:cc:87:9a:43:96:36:9c:
         cf:89:4b:a5:7b:51:63:b8:02:8b:0d:60:b7:f1:19:b0:c6:0d:
         2c:47:03:e7:a1:f7:45:a3:d8:91:44:5c:ec:03:e6:91:46:e5:
         67:ea:ac:b5:00:d3:5f:ce:c3:72:ed:00:a7:bd:47:c4:29:0d:
         31:51:ef:85:c6:79:4e:cc:bc:5e:4e:e1:2b:64:7f:42:72:86:
         29:c4:fc:45:e8:f7:bc:da:7d:94:c1:59:df:5f:36:fd:89:9a:
         10:95:f3:3a:f1:10:15:9b:cf:18:50:38:c8:13:66:b8:48:80:
         32:75:eb:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp6Ax73DfyRjQE8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz
NmMzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
OWZkZjllZWQtY2RmZS00ZTYwLWE2YjYtZWJiNGZkYzY4NDUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAni39RKOsjElTvKK4wD20WwqurMK9aLqSv6zC
DO4mjJ74L+oJ2HHKO+nOdaNIheWLvRsq2OlTOvSzYfVFQ4B0AGtpZ1X2ngh/dzqP
n81C1Ux2tWNWqQlC0fwxL9L9V6DrIxlYL3RMvSo4KOA08JWZ5GKp3AVlEDW9dyaF
6N8jQqcAeXMvaCFVNPKNAX3Nw8GPUlbMXsn+dS+SPxQU2pI4TFgOVDHb+EXluVqq
P6EaNlGsHxAYnf+KUNAGq0MQImSbH9wLTXGls1Pnx7+NSD25EamK5dmBpAg/dQyO
oQeOB5qvKFTbzcYUy/DEgS2fBMiwEG3VVUbdgaca9uv04+Ft1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC3pxHt0B+9pYoyzo51FCyNCQ3Z6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4
MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMjg1NTdmYTEtZjJkMi0z
NDQ5LThhZDYtZWI2ZmU1Y2EwOWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0
MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0
MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk
ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD8lWkeCgcvtKji0orHeOgPo3m0hrBJLFb8m/680QAjdkD7fU1Bd9540
D8rsWZzB0UEMRC5J/3QpjWZ9Z7zsWMnu3THRvpqy/1If08cJiQ0eYyEjZq4cbRTe
M874aFD59/CYQHkChjXb+ZQkOWmyp/6AXFIxgvwcrokf4Aq5q/xZes+kA8ds6UF9
zIeaQ5Y2nM+JS6V7UWO4AosNYLfxGbDGDSxHA+eh90Wj2JFEXOwD5pFG5WfqrLUA
01/Ow3LtAKe9R8QpDTFR74XGeU7MvF5O4Stkf0JyhinE/EXo97zafZTBWd9fNv2J
mhCV8zrxEBWbzxhQOMgTZrhIgDJ169A=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:19:01 2025 by rpki-client