Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7e2175eb-4a04-310c-b9fd-72861a506b88.roa
File:                     7e2175eb-4a04-310c-b9fd-72861a506b88.roa (raw, json)
Hash identifier:          nCj3X/tNii2kZDdkkvcE5A9k8AkgbVB94y7XW6X+UdU=
Subject key identifier:   26:12:8F:25:D5:51:99:F6:2F:81:ED:F5:56:E2:FF:1C:C9:98:03:08
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584ABD4B994C2AFC72B41BED1180
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7e2175eb-4a04-310c-b9fd-72861a506b88.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     53508
IP address blocks:        206.255.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:99:4c:2a:fc:72:b4:1b:ed:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=dcedb473-ec13-4315-8058-423845c4b9f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:48:d7:bb:79:05:da:e7:4c:fd:30:14:02:6a:
                    6d:19:6f:7a:70:ea:c7:52:9e:33:5a:01:33:ad:3a:
                    73:9d:86:50:6e:1d:7c:dd:df:3f:ab:90:c3:d2:b1:
                    40:5a:26:23:b8:82:33:57:77:9e:40:45:66:70:98:
                    59:f2:4e:94:79:90:a8:6a:85:3a:93:7d:ac:f9:15:
                    1f:a9:d2:71:83:0c:32:31:46:98:ac:50:65:84:07:
                    65:df:e9:78:1a:bd:c5:1e:64:62:89:60:7b:6e:fb:
                    2b:eb:04:a8:ba:3c:47:72:c6:66:f8:85:cf:c7:eb:
                    a7:8c:ed:4a:b2:1a:c1:5b:22:91:f0:28:1e:6d:42:
                    0c:00:32:5a:24:e6:92:9a:d4:82:3f:f0:11:bd:1a:
                    db:f3:72:99:6c:0d:6e:8e:1f:d3:b2:46:bd:5c:74:
                    46:85:b0:85:25:c2:14:e9:6c:16:7a:77:d3:cd:a8:
                    5b:a3:5c:8a:1d:4f:c2:ac:e1:5e:3a:b6:ef:09:ae:
                    a1:75:eb:30:5c:ab:10:fd:c0:2d:a8:25:76:5e:48:
                    2f:08:64:f0:ec:20:5e:4f:92:ea:8a:3b:77:87:85:
                    af:33:de:ed:54:c0:6e:0f:6e:7f:1f:82:6e:e7:41:
                    42:ce:44:64:b9:42:33:ea:3f:6f:8d:0d:b2:0c:6b:
                    27:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:12:8F:25:D5:51:99:F6:2F:81:ED:F5:56:E2:FF:1C:C9:98:03:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7e2175eb-4a04-310c-b9fd-72861a506b88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:f7:2b:d7:66:d3:dd:87:de:06:2f:e0:fe:20:52:a5:7a:da:
         0f:e6:81:ee:e5:e9:af:8a:e2:2f:d0:d4:2d:00:dc:61:b0:a8:
         d6:82:8f:16:69:2f:81:e2:35:df:94:09:22:c4:78:79:6c:1c:
         8d:11:e5:d5:8e:b3:da:3a:53:96:25:ab:d8:dc:f9:7e:f2:02:
         ca:76:91:b1:7c:50:b5:dc:37:47:30:e7:c7:8c:a6:10:bf:f6:
         52:09:ae:91:f9:7f:6b:82:12:04:4f:f7:e3:55:cd:00:ff:b9:
         f3:4a:27:92:a3:9c:f9:4d:e8:57:c6:bd:6b:1d:c5:be:44:34:
         48:fe:23:a2:6e:06:13:c9:15:85:5f:bd:85:b6:d6:d4:90:f4:
         a2:ea:cb:25:a9:5d:f9:86:3e:80:01:48:72:84:d7:74:ff:b8:
         fa:5c:a1:3b:ea:0f:c6:68:db:ee:c1:7c:f7:0e:94:b2:67:51:
         45:91:2b:98:cc:72:ef:a4:b8:b8:ef:01:8c:4e:61:08:bb:56:
         a0:6f:8e:e7:58:66:82:66:c1:5d:1f:24:a4:bf:4a:f7:10:ee:
         3b:36:a5:2b:41:51:87:33:71:1c:ca:8a:d1:36:d9:ac:7b:2e:
         a4:20:e0:f8:3b:f3:79:25:0d:57:83:ff:db:81:4d:1c:36:32:
         be:ef:0e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:21:50 2025 by rpki-client