Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7f714529-39bd-3cf2-9df1-63cfd06563ae.roa
File:                     7f714529-39bd-3cf2-9df1-63cfd06563ae.roa (raw, json)
Hash identifier:          TSrB1gRmkz9IAZCm2T1Td7Ehy9R0v0vxPNm1sIdXCEk=
Subject key identifier:   F9:73:C6:B9:BD:EA:87:28:92:98:D0:80:60:03:01:FF:E0:FA:7F:C1
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584EE0C20705C826AD29B472BF00
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7f714529-39bd-3cf2-9df1-63cfd06563ae.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     53508
IP address blocks:        206.255.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:07:05:c8:26:ad:29:b4:72:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=bc11c9d1-80fe-4de3-8669-f44cc03aa849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:11:96:b2:e8:04:66:9f:f3:f5:05:a8:b1:ca:
                    c5:f4:bb:31:c3:37:4a:41:be:72:a0:bc:20:36:92:
                    e0:23:d3:3f:96:52:3e:33:a9:94:49:db:9e:e4:59:
                    b5:54:ce:24:61:c5:7f:42:82:e3:29:27:4e:4a:b4:
                    6f:ee:8a:0d:df:48:29:f8:cc:24:04:06:77:91:93:
                    40:23:4e:9c:be:af:af:f1:19:55:eb:7e:a3:b2:e3:
                    60:6a:56:a5:75:c9:5d:7a:c6:f9:c7:00:3c:19:cf:
                    fe:ad:68:b6:25:b4:f3:32:3f:71:4a:0f:86:8a:dd:
                    64:cc:b8:76:ea:91:17:04:d6:ea:58:34:af:c9:c2:
                    cf:46:47:c3:3d:cf:f3:ba:7f:c9:f3:93:77:7a:52:
                    cb:1b:19:5a:4e:d5:cd:62:05:71:93:b3:03:51:5c:
                    96:19:39:3a:ee:05:5c:c3:24:1f:50:1c:ec:57:5e:
                    81:2a:56:bb:19:91:90:cc:86:e2:47:e8:67:92:36:
                    70:c9:77:0e:2e:bb:5c:47:93:fe:52:45:60:91:d7:
                    47:04:7c:c4:a1:3b:f4:82:23:05:80:63:cc:6c:fb:
                    1a:c6:32:72:33:40:ab:8d:a5:ed:18:39:4c:b3:05:
                    f4:cf:4b:4f:22:4d:a9:f2:ca:52:0c:e5:6d:ac:96:
                    e8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:73:C6:B9:BD:EA:87:28:92:98:D0:80:60:03:01:FF:E0:FA:7F:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7f714529-39bd-3cf2-9df1-63cfd06563ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:e6:c3:c0:f2:7b:64:dc:03:ed:4f:1a:dc:10:4b:47:b5:e8:
         1e:83:70:ce:81:9a:e6:ed:69:94:3b:af:a6:9d:27:a6:49:26:
         c1:fc:bc:f6:b8:50:51:78:f4:4f:7a:06:f8:45:cd:4a:e5:82:
         7d:7b:93:92:20:e1:7d:db:55:d5:a9:0f:bf:98:9b:8b:6b:fb:
         6c:bf:35:4a:92:cd:35:3a:86:d4:fd:62:05:7b:c2:2e:30:4d:
         0d:44:e8:ed:23:16:97:7f:13:85:7f:ae:17:97:53:c2:e3:bd:
         c4:5f:df:a1:7d:c6:ac:41:fe:dd:a5:cc:cf:84:1f:5d:b1:e2:
         aa:38:66:92:b3:a9:e1:4d:75:ce:0e:e5:73:2b:fa:84:ba:d3:
         b0:37:11:c6:f4:fa:0c:43:7d:81:20:96:7d:b6:84:b5:a8:3d:
         5f:4a:9c:74:5b:c6:4b:fa:81:b0:4d:33:85:4e:8d:27:2a:bd:
         3f:6e:c7:2e:bb:ed:2e:28:e2:5a:f9:5d:b1:a4:e7:db:08:a8:
         c2:4a:b2:1a:03:13:f4:0a:4b:c0:2e:6f:45:35:e9:80:31:b3:
         e7:8d:53:af:0c:47:6a:82:3e:49:42:ec:7c:ad:b0:25:fe:4b:
         98:44:21:c7:61:27:52:9d:d6:34:86:04:b6:ed:13:c4:09:bc:
         ae:b0:55:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:33:12 2026 by rpki-client