Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2c36fc6f-8e4b-314d-9ca5-e0aa122f58b6.roa
File:                     2c36fc6f-8e4b-314d-9ca5-e0aa122f58b6.roa (raw, json)
Hash identifier:          m7d34FszeNSF7T87hI72sxt77EkjK3bpPmBEOSFwz2k=
Subject key identifier:   D4:88:23:97:1B:3A:C8:96:9D:EA:D9:4B:C2:ED:F6:34:D0:13:73:33
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F43285849DC8FCFC7887E9EA7BBECEAC0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2c36fc6f-8e4b-314d-9ca5-e0aa122f58b6.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     53508
IP address blocks:        206.255.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:cf:c7:88:7e:9e:a7:bb:ec:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=14f5d120-e7bb-4bb9-b609-ad5fdd9257ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d5:e1:2c:b9:f5:39:27:34:71:c4:da:d5:5f:
                    33:ac:d7:2d:2d:9e:8f:bf:18:92:61:f8:c2:00:74:
                    a6:84:b6:97:86:8f:18:6f:29:40:4a:a6:54:48:f5:
                    7c:83:57:b6:ee:94:0a:e2:81:5a:22:27:7d:b9:08:
                    49:59:ba:66:46:04:90:34:56:44:34:ff:a9:91:2a:
                    ec:8a:87:2e:a7:b1:6d:69:df:03:07:96:30:59:19:
                    3e:71:ef:84:f1:24:52:63:8c:f9:64:9b:6a:f2:70:
                    fa:48:ff:09:01:c1:61:5e:74:db:ea:5a:fa:77:9a:
                    b6:a7:5e:38:b2:95:07:0e:26:14:c3:db:a6:23:e7:
                    22:9d:b9:23:18:5b:48:8d:48:a6:54:50:d8:fc:eb:
                    19:8b:8c:97:7e:54:fa:4e:5c:79:3a:c4:7a:72:66:
                    9b:aa:18:41:69:29:4c:aa:20:dd:f6:d6:1d:f1:54:
                    92:c2:de:5d:b9:d9:45:e0:b1:ef:0c:13:5b:7f:a1:
                    b9:7d:5f:47:34:00:d9:1a:38:18:5d:3c:43:82:4b:
                    cb:6a:99:b7:a1:be:6e:7b:0a:0e:fd:9d:aa:e8:ab:
                    36:24:98:e0:7f:3c:18:d6:be:b4:f5:4b:55:64:f4:
                    6a:fd:f5:6b:ce:e2:ec:6d:53:44:56:a2:97:a1:67:
                    ad:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:88:23:97:1B:3A:C8:96:9D:EA:D9:4B:C2:ED:F6:34:D0:13:73:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2c36fc6f-8e4b-314d-9ca5-e0aa122f58b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:16:95:08:91:a3:7e:c1:3c:33:4b:c0:9b:c4:77:c4:d3:81:
         75:c2:45:a0:86:2a:22:d0:6a:0d:c6:4d:4a:f8:97:0b:2c:8b:
         1a:ea:ec:71:d9:06:c6:51:21:cd:30:78:00:d3:55:cd:47:0e:
         e0:df:38:57:8f:e7:5e:1a:f8:5f:db:85:9b:48:2a:3a:f4:01:
         02:bf:22:3e:19:19:5d:a3:f5:d8:b5:49:40:ff:40:61:db:a2:
         cb:17:92:33:c5:f1:7d:1e:1b:fa:4a:e8:fb:3b:b0:36:8c:62:
         84:a7:e6:e0:d7:bd:e9:75:20:22:c2:3f:83:5f:18:79:86:ae:
         b1:0b:1e:63:d2:ba:ad:2a:e4:4d:59:ca:51:54:85:f5:4b:84:
         03:bf:26:44:90:c8:f9:26:e2:59:7b:46:c5:ad:c4:cb:4b:72:
         29:86:44:0f:6a:1f:38:c4:7f:ba:99:9b:3e:92:f8:d5:6e:ba:
         88:f1:8a:86:85:56:4a:04:61:1f:9e:60:b4:5f:84:1a:a5:55:
         04:0f:62:f1:31:e3:63:f3:c6:ea:6b:95:ec:5b:ba:ca:0f:4d:
         29:38:39:54:f5:68:58:01:db:ed:5a:c6:86:54:41:b2:02:8c:
         6e:09:a1:c9:b9:2d:17:2a:7d:96:17:29:db:9d:de:94:40:af:
         6b:b1:0b:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8/HiH6ep7vs6sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz
NmMzMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk
MTRmNWQxMjAtZTdiYi00YmI5LWI2MDktYWQ1ZmRkOTI1N2FkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtXhLLn1OSc0ccTa1V8zrNctLZ6PvxiSYfjC
AHSmhLaXho8YbylASqZUSPV8g1e27pQK4oFaIid9uQhJWbpmRgSQNFZENP+pkSrs
iocup7Ftad8DB5YwWRk+ce+E8SRSY4z5ZJtq8nD6SP8JAcFhXnTb6lr6d5q2p144
spUHDiYUw9umI+cinbkjGFtIjUimVFDY/OsZi4yXflT6Tlx5OsR6cmabqhhBaSlM
qiDd9tYd8VSSwt5dudlF4LHvDBNbf6G5fV9HNADZGjgYXTxDgkvLapm3ob5uewoO
/Z2q6Ks2JJjgfzwY1r609UtVZPRq/fVrzuLsbVNEVqKXoWethQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNSII5cbOsiWnerZS8Lt9jTQE3MzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4
MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMmMzNmZjNmYtOGU0Yi0z
MTRkLTljYTUtZTBhYTEyMmY1OGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0
MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0
MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk
ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzv+4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAYWlQiRo37BPDNLwJvEd8TTgXXCRaCGKiLQag3GTUr4lwssixrq7HHZ
BsZRIc0weADTVc1HDuDfOFeP514a+F/bhZtIKjr0AQK/Ij4ZGV2j9di1SUD/QGHb
ossXkjPF8X0eG/pK6Ps7sDaMYoSn5uDXvel1ICLCP4NfGHmGrrELHmPSuq0q5E1Z
ylFUhfVLhAO/JkSQyPkm4ll7RsWtxMtLcimGRA9qHzjEf7qZmz6S+NVuuojxioaF
VkoEYR+eYLRfhBqlVQQPYvEx42PzxuprlexbusoPTSk4OVT1aFgB2+1axoZUQbIC
jG4Jocm5LRcqfZYXKdud3pRAr2uxC8c=
-----END CERTIFICATE-----
Generated at Wed Jun 18 02:07:19 2025 by rpki-client