Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/30dd3ce4-de72-3391-8e1b-494fd30c7d16.roa
File:                     30dd3ce4-de72-3391-8e1b-494fd30c7d16.roa (raw, json)
Hash identifier:          eLHwoTo1iZ7quDzOiP7uaXLRppE6JIHy50WUzlx6IoQ=
Subject key identifier:   FC:54:2D:E6:CB:71:7A:C4:6C:B2:04:DC:76:0E:1D:EE:52:82:C6:D1
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584EE0C20F384BEC79489AD6A800
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/30dd3ce4-de72-3391-8e1b-494fd30c7d16.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     53508
IP address blocks:        206.255.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:0f:38:4b:ec:79:48:9a:d6:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=f6499e48-c387-4f75-a67c-4b35d0b4c3d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e6:eb:ee:d0:9d:5e:97:a1:f6:92:fc:dc:06:
                    f7:5e:c8:33:5b:fb:d5:d5:3b:ed:bf:56:b4:be:53:
                    ff:79:50:27:0d:b9:c5:e2:86:4b:39:80:ec:7c:42:
                    a0:52:7d:45:a8:2e:76:19:38:0e:e4:e0:a5:39:3b:
                    cc:2d:52:8f:67:6b:44:fe:ff:9f:aa:ba:18:ca:8b:
                    c2:87:84:dd:42:52:e0:99:08:e0:8a:d4:c6:63:03:
                    a1:da:1c:30:a8:a7:22:7c:a2:e1:e7:02:62:29:43:
                    0d:1a:a9:27:a1:18:fa:34:b3:47:e5:80:90:cd:54:
                    e4:4f:25:38:bf:14:bd:23:33:9f:6e:37:78:72:7e:
                    70:c5:09:42:7b:43:61:2b:6a:90:c8:e7:95:d4:e7:
                    96:41:47:30:82:b5:1f:d5:cc:94:7a:7e:db:e4:09:
                    5f:7d:9d:f1:71:f8:f8:d5:ee:09:af:c7:13:fc:9e:
                    6f:64:c5:e3:4e:c8:29:69:16:33:52:31:d9:03:29:
                    64:08:28:12:e0:3e:ab:01:d0:37:93:5d:c1:12:e4:
                    28:59:5c:ee:bf:e6:fe:99:66:90:2e:fb:4e:71:8c:
                    fd:c0:0e:05:a6:5a:f6:28:ff:10:b4:94:d6:1b:75:
                    d2:f9:12:13:83:c0:e3:d9:ab:8e:c1:a0:f5:7f:69:
                    a4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:54:2D:E6:CB:71:7A:C4:6C:B2:04:DC:76:0E:1D:EE:52:82:C6:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/30dd3ce4-de72-3391-8e1b-494fd30c7d16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:0f:a1:0b:ad:e8:31:80:17:5e:fa:17:64:92:28:a1:10:a7:
         75:25:49:be:30:88:7b:04:f2:c0:e1:6e:f2:70:98:c2:f6:72:
         14:60:3f:bb:90:3e:30:6e:6a:74:26:d6:22:3e:49:57:64:15:
         55:f2:56:46:40:98:59:74:bc:65:91:cc:e1:b6:52:36:db:fb:
         be:51:1b:4a:59:09:1e:ab:fc:2e:b3:6a:c0:f4:ca:9e:ed:46:
         bc:3f:e8:92:a1:4a:4b:1e:85:62:fe:11:6e:4f:c6:1a:e4:31:
         fc:bd:8b:d4:f3:85:f0:ad:1b:61:f2:66:71:cb:56:4b:05:8e:
         e1:8a:38:40:d3:83:92:46:b7:29:54:63:d9:22:3e:dd:f4:fe:
         e7:c4:59:d3:cf:62:cd:67:10:15:0e:eb:dd:3b:af:2b:35:bc:
         bb:b7:83:72:e6:be:68:35:42:b0:39:c0:f5:14:cc:c9:a8:d4:
         8c:52:32:17:fc:31:5a:2a:3f:cd:c6:6d:0c:9c:6a:33:de:61:
         ec:9a:f1:e3:a5:3f:bc:12:6b:32:15:8b:c2:1c:4d:d2:9d:a6:
         79:2b:83:23:a9:24:16:c5:93:fd:ae:2b:b4:d2:68:4e:32:52:
         0a:0d:ac:45:75:e8:0d:e4:cf:2e:f2:8c:ee:78:c9:5f:08:6f:
         2c:6f:47:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:57:35 2026 by rpki-client