Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2aaa1b6d-0624-3ccf-bdf5-326004cf80b1.roa
File:                     2aaa1b6d-0624-3ccf-bdf5-326004cf80b1.roa (raw, json)
Hash identifier:          ovsjCXT5lwaIeW9E8D3nvwv8yLYYH7NPfejiFGgytPE=
Subject key identifier:   75:D3:AC:D4:BD:AE:23:21:D9:25:97:AC:E2:17:1A:C1:A1:74:7E:2E
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584ABD4BA710E683BB4F24ACB200
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2aaa1b6d-0624-3ccf-bdf5-326004cf80b1.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     53508
IP address blocks:        206.255.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:a7:10:e6:83:bb:4f:24:ac:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=cb95bc9c-932e-4a38-8f7e-245261624d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1b:2b:f1:17:6b:8e:67:f6:bc:fc:a3:d6:ff:
                    30:4a:81:e8:fb:30:a4:90:8b:1e:0f:ce:eb:b7:37:
                    d9:a1:03:20:d1:38:a4:01:7c:fb:06:06:5e:f4:44:
                    48:29:a4:01:63:f8:c4:e7:53:3b:2d:0b:18:52:98:
                    b9:22:2c:4e:ed:f9:b3:2a:9b:ee:f3:c9:05:e5:eb:
                    8f:e9:23:9f:08:e2:33:da:d9:af:58:27:cc:bc:4d:
                    27:83:f3:57:a0:1a:37:5e:3f:11:01:d7:17:68:30:
                    db:78:c6:e2:54:88:28:75:4c:7d:74:05:6c:4a:d1:
                    be:46:50:2b:9d:f8:6f:fc:25:0b:a0:bb:02:a4:02:
                    80:c4:a9:c6:c1:a5:7b:30:28:d1:08:48:e7:ce:73:
                    91:50:9a:ac:89:85:80:72:9a:61:c7:92:1d:44:73:
                    d3:c8:03:24:23:34:1a:69:25:99:db:31:59:c2:3c:
                    bb:65:01:82:cf:59:5a:68:c3:52:8e:a7:f6:cc:cd:
                    14:95:80:f7:d5:b1:8d:98:ee:6e:57:e7:d0:d9:3c:
                    ec:0c:b7:42:db:cd:5c:1d:02:9d:84:d7:f3:bd:67:
                    14:ee:c6:cf:d8:e0:74:bd:8d:ca:17:db:4f:60:e6:
                    c1:d7:6e:a9:ab:b5:55:aa:db:fd:0f:fd:02:15:5a:
                    23:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D3:AC:D4:BD:AE:23:21:D9:25:97:AC:E2:17:1A:C1:A1:74:7E:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2aaa1b6d-0624-3ccf-bdf5-326004cf80b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:c5:57:16:e8:f5:3d:15:81:e4:ff:3b:a9:7f:5c:33:f0:5d:
         70:e9:1b:03:79:f5:5d:70:d7:02:db:5f:07:cd:a3:eb:ad:07:
         04:95:ea:91:71:2d:a0:66:b4:d9:d2:68:e9:f8:7f:92:83:7c:
         8a:97:5b:69:2c:a0:a8:4c:b7:83:0d:a6:e5:82:0b:dd:76:f0:
         01:6f:0b:00:cf:ca:c7:36:78:71:08:a9:75:88:13:93:87:dc:
         c5:b7:91:03:15:1d:b7:2a:69:9e:31:bc:ae:7d:b6:86:84:51:
         42:c3:18:15:93:1c:87:3a:29:51:bf:99:45:43:d8:ba:79:bd:
         d3:17:3d:03:82:29:9b:f2:03:17:c8:50:93:18:5e:ce:23:bc:
         b2:0c:c6:f6:7b:26:9e:bf:3a:3b:79:cc:c0:4a:d4:db:98:d1:
         be:8a:33:b6:c5:f7:b4:ea:3e:f7:88:41:8b:f1:c0:9c:8a:1a:
         c0:20:98:22:a3:e9:dd:c0:32:14:a6:f7:ce:22:63:8c:bf:27:
         43:7b:17:40:ff:e6:51:73:04:fa:56:bc:ff:27:5a:9f:2b:c9:
         c0:64:6a:fd:e5:e2:08:12:f8:7b:25:ea:fc:c0:e2:4a:09:1c:
         31:f9:90:16:3f:5e:04:d2:05:a4:54:6c:d2:5e:b7:31:35:48:
         00:b6:49:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:08:45 2025 by rpki-client