Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/67711168-57b6-3fb5-9d03-dd8b8f2377da.roa
File:                     67711168-57b6-3fb5-9d03-dd8b8f2377da.roa (raw, json)
Hash identifier:          Kcaw8PLx8mbmQ5tqW9xf42o3qzrEI7yjCu7zbVhHqi8=
Subject key identifier:   5B:26:29:84:4A:57:B0:D4:CE:7E:3D:A5:70:E8:6B:54:51:B3:59:CD
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584ABD4BA7A4E6C4D60E18BE1000
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/67711168-57b6-3fb5-9d03-dd8b8f2377da.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     53508
IP address blocks:        206.255.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:a7:a4:e6:c4:d6:0e:18:be:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=9feaf1d3-4a75-4888-88c6-d7dcd26f91f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bf:59:d3:0f:a6:2d:7b:79:1a:eb:3e:7e:f2:
                    e2:2b:5e:9b:5d:75:1d:f9:5c:fc:a9:95:f1:48:0d:
                    c3:a5:53:c7:88:9b:cc:b2:4f:9e:88:bf:d4:5e:b2:
                    f1:64:51:12:2f:9f:28:51:26:a0:8b:90:87:b2:84:
                    82:dd:8a:5d:79:d3:f0:92:61:25:46:2a:6a:cd:17:
                    db:db:5a:c2:2b:00:39:a0:a5:c4:08:13:88:68:5f:
                    01:ad:2f:e5:a9:c9:4c:c5:9b:78:2e:61:ad:cd:82:
                    e9:4b:df:ef:76:2d:3b:b3:a1:f3:ca:f4:d1:24:ed:
                    71:2f:57:cf:13:5d:3e:1e:41:d5:52:00:7f:05:31:
                    c7:c5:d6:f0:0f:e0:03:f8:1a:a8:08:4f:15:70:8c:
                    02:b0:93:cb:d5:41:be:ce:88:9f:f5:a6:68:d5:fc:
                    63:1b:7b:f0:42:87:b4:ec:b1:b8:f2:09:b3:b3:fc:
                    e4:d2:a6:ca:92:69:20:14:b0:5e:ec:22:29:eb:1c:
                    bd:2a:c7:52:ea:c4:f7:bf:9b:9d:ff:36:8a:b2:24:
                    40:04:a5:e8:3c:53:51:f0:91:ea:0c:d0:91:86:d9:
                    1d:2a:5f:a8:7b:09:f5:f0:4c:96:dd:4f:82:ca:35:
                    0f:07:a1:72:e3:b5:20:87:2c:00:37:11:39:af:cb:
                    be:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:26:29:84:4A:57:B0:D4:CE:7E:3D:A5:70:E8:6B:54:51:B3:59:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/67711168-57b6-3fb5-9d03-dd8b8f2377da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:3f:aa:45:20:02:3b:6b:72:2e:f1:cd:d1:0b:aa:1a:db:df:
         70:12:20:f8:be:9d:d1:74:eb:95:f8:c1:15:dd:00:4b:f0:bd:
         d3:4e:12:a7:35:04:de:50:e2:c9:4d:d3:54:17:6c:3e:e9:c0:
         c4:41:05:cf:81:73:06:79:a5:c5:30:cc:8a:8c:00:1b:da:25:
         24:b4:69:2b:fc:65:ea:4c:26:24:d4:64:04:ec:10:ec:af:ca:
         ce:fa:f4:55:75:ac:f9:22:4e:99:5d:09:f7:54:e2:ed:68:ff:
         64:13:4b:7f:67:bb:a2:22:e0:71:9b:2c:67:fa:50:fe:c7:6d:
         ac:ad:cb:71:00:03:63:49:c4:fc:52:04:fd:ac:e7:9d:b0:31:
         5a:26:82:ba:64:49:6d:ff:c8:6f:d2:95:e5:e6:6a:f5:45:e3:
         3e:f8:d3:9d:49:58:fc:54:d9:d3:b4:10:96:d2:bb:51:02:ed:
         58:19:65:d7:9d:73:0c:35:74:4b:7e:30:74:a9:eb:e4:d2:fb:
         dd:f9:dc:f6:21:4c:e3:11:ad:95:52:2f:59:04:4b:9f:28:78:
         a5:2d:1e:73:c1:5a:1b:3d:c4:47:25:9f:12:14:cf:47:fc:10:
         70:87:3d:d6:42:fd:a6:e7:d4:7d:ab:8f:b7:f4:67:4c:22:fb:
         55:86:37:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:11:52 2025 by rpki-client