Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3160331e-7569-3786-8250-26b377505c71.roa
File:                     3160331e-7569-3786-8250-26b377505c71.roa (raw, json)
Hash identifier:          dHxyuKVcDz4QI9WVbbMuKwHgWS+ixJGuYZMiMhBGIxg=
Subject key identifier:   19:B9:33:50:A3:22:65:69:0E:96:F8:98:D9:E1:8B:67:27:FD:88:7E
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584ABD4B9AA237C517EBF59098C0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3160331e-7569-3786-8250-26b377505c71.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     53508
IP address blocks:        206.255.136.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:9a:a2:37:c5:17:eb:f5:90:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=5084317c-510c-4853-816f-2db251c123ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:af:6a:4d:f5:87:7f:05:af:c2:3d:7a:83:c3:
                    35:f7:3a:1a:f0:1f:42:f4:ef:e5:dd:27:0d:81:6f:
                    7f:b9:1e:36:64:29:af:4a:61:50:34:f3:dd:9a:56:
                    6f:30:65:fa:64:9b:7f:50:d2:45:a0:e5:96:45:05:
                    17:e8:1a:3d:45:0d:8b:7a:3d:2d:c3:7c:24:56:eb:
                    e4:e7:f0:c5:d3:fa:dd:77:b9:83:64:62:b1:f9:ef:
                    8c:1e:1d:22:09:da:49:62:26:3d:a0:d5:60:8a:51:
                    a4:ea:31:5e:b9:69:a3:69:1e:79:1a:b0:4d:b1:1b:
                    82:ed:c9:f7:0f:6f:71:d1:40:3f:b0:9f:b1:bb:b3:
                    15:df:69:47:aa:99:42:11:32:4e:e0:26:44:74:5d:
                    bf:28:88:4d:35:26:81:90:6f:93:0c:aa:09:b2:ba:
                    de:1f:2b:f2:66:7e:c1:66:bb:ee:b6:7f:ce:ae:71:
                    62:93:21:39:e9:95:b2:48:40:7c:55:3f:53:57:4c:
                    77:e4:50:38:d9:e3:0e:c2:e2:0c:0a:f8:97:a6:72:
                    64:6d:18:b4:bd:fa:ff:d1:49:90:b8:69:b3:32:ce:
                    9d:99:5c:4d:1a:93:05:cc:04:df:cd:ca:4a:fb:f4:
                    f5:f8:2a:09:65:88:81:d0:7a:ac:a1:b3:c4:c8:2b:
                    c4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B9:33:50:A3:22:65:69:0E:96:F8:98:D9:E1:8B:67:27:FD:88:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3160331e-7569-3786-8250-26b377505c71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:14:c1:0d:db:3d:12:c2:ca:0f:c4:4d:c5:42:18:8f:69:00:
         fc:2e:bb:40:d6:09:31:2c:42:3f:76:bb:cc:28:66:75:9d:e4:
         60:04:4c:e0:bd:24:a9:1e:0f:9a:9b:1c:08:37:90:78:6e:a0:
         4b:cb:a1:53:a2:35:75:12:69:3f:64:4b:48:ff:36:a7:d7:60:
         72:ee:63:ca:fc:bf:5f:65:50:cc:55:9b:29:aa:98:46:60:8f:
         92:ce:98:89:96:6f:d8:16:d0:d6:3f:01:34:62:a8:3f:19:dd:
         86:d7:62:1b:09:b8:b9:86:21:f8:af:34:fb:26:76:99:ed:02:
         a5:9a:16:80:58:f1:f5:46:c8:35:32:f2:a8:3b:8b:a1:45:4d:
         d0:e5:c6:80:7c:83:14:d9:9d:65:ce:75:07:1e:b7:4b:e5:10:
         f7:8c:ac:7d:99:d3:ce:e3:3a:00:2a:4e:da:ca:de:4f:64:bc:
         17:0d:e7:63:36:67:40:a0:4e:b3:d9:41:16:02:c7:d9:43:65:
         40:6d:56:a1:c9:cc:01:4a:85:c8:1e:3c:1b:32:18:72:5b:aa:
         0f:70:ad:a3:e9:74:98:46:42:bb:4f:00:64:f9:fd:c1:d9:f6:
         ec:8c:6d:90:ad:a2:70:de:05:68:af:92:36:91:c3:7b:3d:dc:
         60:bc:97:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S5qiN8UX6/WQmMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz
NmMzMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk
NTA4NDMxN2MtNTEwYy00ODUzLTgxNmYtMmRiMjUxYzEyM2VmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK9qTfWHfwWvwj16g8M19zoa8B9C9O/l3ScN
gW9/uR42ZCmvSmFQNPPdmlZvMGX6ZJt/UNJFoOWWRQUX6Bo9RQ2Lej0tw3wkVuvk
5/DF0/rdd7mDZGKx+e+MHh0iCdpJYiY9oNVgilGk6jFeuWmjaR55GrBNsRuC7cn3
D29x0UA/sJ+xu7MV32lHqplCETJO4CZEdF2/KIhNNSaBkG+TDKoJsrreHyvyZn7B
Zrvutn/OrnFikyE56ZWySEB8VT9TV0x35FA42eMOwuIMCviXpnJkbRi0vfr/0UmQ
uGmzMs6dmVxNGpMFzATfzcpK+/T1+CoJZYiB0HqsobPEyCvEMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBm5M1CjImVpDpb4mNnhi2cn/Yh+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4
MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMzE2MDMzMWUtNzU2OS0z
Nzg2LTgyNTAtMjZiMzc3NTA1YzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0
MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0
MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk
ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzv+IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABwUwQ3bPRLCyg/ETcVCGI9pAPwuu0DWCTEsQj92u8woZnWd5GAETOC9
JKkeD5qbHAg3kHhuoEvLoVOiNXUSaT9kS0j/NqfXYHLuY8r8v19lUMxVmymqmEZg
j5LOmImWb9gW0NY/ATRiqD8Z3YbXYhsJuLmGIfivNPsmdpntAqWaFoBY8fVGyDUy
8qg7i6FFTdDlxoB8gxTZnWXOdQcet0vlEPeMrH2Z087jOgAqTtrK3k9kvBcN52M2
Z0CgTrPZQRYCx9lDZUBtVqHJzAFKhcgePBsyGHJbqg9wraPpdJhGQrtPAGT5/cHZ
9uyMbZCtonDeBWivkjaRw3s93GC8l3U=
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:30:22 2025 by rpki-client