Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/56a6fcbc-1e34-3343-bfd5-531dbf8f1c6f.roa
File:                     56a6fcbc-1e34-3343-bfd5-531dbf8f1c6f.roa (raw, json)
Hash identifier:          htbLjP3u89KW6dlsruGjM5Wgs9MVBemVsi/WpmepILw=
Subject key identifier:   D3:80:19:0C:78:A7:9B:65:79:2B:16:E7:E0:7A:3D:98:2A:65:7A:D1
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584B9E07B78E8796F24A57545725
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/56a6fcbc-1e34-3343-bfd5-531dbf8f1c6f.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     53508
IP address blocks:        24.244.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:b7:8e:87:96:f2:4a:57:54:57:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=e327e0d9-d71b-49ca-88c3-05c0d9eea470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2c:35:8e:fa:ae:26:5c:5e:98:99:27:da:22:
                    f0:53:64:11:80:eb:6d:a1:9b:d8:21:31:08:7b:60:
                    66:7e:88:76:1e:2b:fa:0a:a2:30:05:64:96:c8:b8:
                    6e:04:eb:40:3d:ec:68:6e:91:46:13:88:40:02:13:
                    a3:70:24:93:f4:07:01:6c:f1:00:6a:e3:04:ff:42:
                    be:6e:ae:e0:1c:aa:c0:94:d8:a3:05:4b:ae:5b:8f:
                    f8:3a:2f:ee:40:00:df:2c:80:06:9f:8e:4f:20:06:
                    4f:72:ff:0c:41:a1:5b:99:23:ab:83:b7:51:9d:7d:
                    e5:10:31:53:6b:63:5d:58:7f:1d:45:ca:77:35:42:
                    e7:59:55:7b:81:19:08:7c:c6:b5:90:98:9d:2c:e1:
                    12:2d:2e:4f:d7:74:06:19:f1:c0:9f:e6:61:d2:14:
                    c1:46:08:3c:20:0a:04:4c:81:3e:29:5e:47:09:28:
                    4e:46:89:fc:6a:c1:c6:4d:ae:6d:e2:98:23:1c:23:
                    14:21:91:5c:e8:e6:1a:9e:8c:bc:2a:27:0b:ce:c1:
                    a8:31:b9:bf:ab:91:52:eb:1a:8c:e4:2d:67:a2:94:
                    ac:89:db:bb:5a:18:ff:37:98:f4:cd:0d:63:42:14:
                    bd:5c:74:87:c3:70:e7:c0:ba:9b:80:5b:43:62:70:
                    fa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:80:19:0C:78:A7:9B:65:79:2B:16:E7:E0:7A:3D:98:2A:65:7A:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/56a6fcbc-1e34-3343-bfd5-531dbf8f1c6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.244.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:8a:e7:5a:43:81:b4:84:9e:cf:a1:e7:27:43:c7:15:2d:1d:
         0b:59:c9:ab:32:10:8a:8e:39:bc:67:2a:30:f0:62:60:18:a2:
         0d:7b:12:e7:67:dc:37:90:e4:a1:ac:69:52:e2:4b:eb:b0:2e:
         82:d3:49:77:8b:4e:8f:8e:3a:4c:ca:df:b3:9e:f6:d5:8d:f2:
         6b:b8:ce:71:fa:72:48:ce:18:ee:81:e5:5c:eb:80:77:4b:3c:
         ed:ae:2e:d8:44:0b:a4:c2:68:f2:2c:77:0b:95:15:41:cb:13:
         36:55:67:41:c5:a4:ee:de:09:97:c0:e5:83:07:20:52:73:f9:
         ea:11:58:47:ed:52:bb:1b:d5:6b:f5:c7:9e:89:0d:74:ff:d9:
         b9:89:c7:8d:64:48:fa:7a:2f:b9:48:20:0c:47:34:45:23:c8:
         34:79:58:0c:64:be:5c:49:a4:99:3f:05:9a:2a:7e:a0:e1:87:
         d7:45:3c:5e:53:6c:c6:6d:d1:85:c3:da:6f:d5:de:32:af:3a:
         ec:0b:b5:86:60:67:73:1d:f0:17:33:61:34:0d:78:98:b6:94:
         7b:05:79:fb:30:9d:4e:c9:94:d9:ed:06:84:93:49:50:f0:d9:
         a3:7a:3c:94:ae:41:de:ac:ab:85:16:f0:38:1e:eb:ed:df:a9:
         3a:13:11:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:32:27 2025 by rpki-client