Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/464587b1-a42f-3716-8424-038ecaadc820.roa
File:                     464587b1-a42f-3716-8424-038ecaadc820.roa (raw, json)
Hash identifier:          q5PBongqoCvDsdvVFEQiilmRNQ9Id6ANbiGkdfhkklE=
Subject key identifier:   D1:7C:EC:E0:91:03:92:9E:2B:BF:27:36:D7:21:95:5F:4C:D5:42:03
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584ABD4BA7856B7D0495AA1A3B84
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/464587b1-a42f-3716-8424-038ecaadc820.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     53508
IP address blocks:        206.255.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:a7:85:6b:7d:04:95:aa:1a:3b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=300fe4d0-0ff4-4640-8d8f-2c8e46e33999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:67:8c:32:18:5f:5b:37:42:6b:a0:0d:27:d8:
                    3c:87:62:99:46:ad:35:da:69:a8:18:41:5e:6c:32:
                    53:8a:de:37:74:ef:fb:8e:08:d7:0c:89:8c:b3:a7:
                    da:9f:7e:81:28:03:f3:bc:1a:b0:47:62:d9:9d:d4:
                    fb:94:6e:58:9e:6e:78:79:48:16:46:5c:5d:c6:d5:
                    e5:1e:bf:64:f8:77:f5:4d:aa:44:fc:88:82:9a:53:
                    5c:f2:13:4f:fc:0a:db:a6:1f:2c:b0:9e:c7:16:2c:
                    88:d5:0f:c7:31:ab:4d:bd:d6:fe:4a:87:79:f6:06:
                    e5:9e:b1:0c:c9:cb:f8:cc:f8:87:48:51:ef:fd:42:
                    b4:0e:01:a6:04:13:f5:4a:53:3d:19:e0:27:2b:85:
                    2c:49:39:40:68:9d:bc:d0:c9:70:5e:c7:f9:5e:27:
                    a8:48:b6:08:00:d0:8b:c2:aa:35:7d:8a:2b:1b:36:
                    4a:06:76:05:d6:fa:d4:be:75:86:c9:39:46:97:29:
                    06:e1:71:51:4c:65:f3:f5:fa:55:59:9b:03:f7:d3:
                    f4:1d:72:cf:c8:5b:79:8d:dc:c4:58:bc:d8:4c:4a:
                    d5:6c:f8:0e:43:6b:4d:d8:68:15:b6:0d:d2:e6:8e:
                    b4:84:b6:b4:f5:67:3e:8c:f9:10:33:f5:34:c7:32:
                    62:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7C:EC:E0:91:03:92:9E:2B:BF:27:36:D7:21:95:5F:4C:D5:42:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/464587b1-a42f-3716-8424-038ecaadc820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:91:fe:82:f6:c1:bf:87:c2:a1:6d:ae:28:20:68:ff:89:41:
         99:81:da:96:de:ab:28:04:4e:ce:40:41:4b:54:a3:f2:70:bb:
         2e:3d:f6:3d:f6:b3:05:b8:6f:49:96:03:e8:42:a9:ac:1d:b8:
         82:4f:59:4c:9f:ff:b8:04:3e:ee:32:82:2e:3b:7a:66:34:7a:
         27:9b:b8:0d:25:a8:4e:91:0d:81:57:1c:c4:ed:6f:06:4e:e5:
         a6:d2:78:c5:6e:47:05:48:7e:3a:bd:96:94:d2:de:80:f3:24:
         78:83:ea:1a:f0:59:4a:bc:14:84:bb:ad:95:87:f6:fc:02:79:
         1e:69:dc:f4:c6:11:67:27:8a:1d:4f:db:f5:80:00:01:49:07:
         ec:30:5b:82:21:e6:d0:de:3e:92:96:cc:04:49:7e:5d:bc:c8:
         8f:f3:9f:88:30:50:49:09:c5:2e:9e:04:9f:bf:ec:2f:b5:84:
         aa:e3:01:2a:da:da:7d:c5:62:60:c7:c2:cf:03:3b:65:02:f0:
         8f:59:2b:9f:4f:98:dd:be:1c:b5:49:c9:44:db:11:52:0a:7d:
         20:db:ff:53:ed:7a:db:f6:91:68:63:da:f9:35:c2:f4:99:00:
         85:48:5f:ff:b2:eb:48:92:3f:b4:2a:30:b0:da:d3:f8:bc:d8:
         e7:6c:fc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:38:36 2025 by rpki-client