Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/81af0be6-f23c-30fe-8f01-107b7f0d4738.roa
File:                     81af0be6-f23c-30fe-8f01-107b7f0d4738.roa (raw, json)
Hash identifier:          b0Iz5jLJnvb28EciWG4MHY6K34gAvSYnrgrbNE39x8M=
Subject key identifier:   02:FA:8E:51:9D:33:32:C1:8C:8B:B2:FA:E6:0F:11:5E:90:37:C6:B1
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584ABD4BA6729991BD2385AC6BC0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/81af0be6-f23c-30fe-8f01-107b7f0d4738.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     53508
IP address blocks:        206.255.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:a6:72:99:91:bd:23:85:ac:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=475ee9b9-c4ca-4c14-9aba-eed8ba5a01f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fa:f2:e5:8d:e0:9a:28:e5:4f:15:69:cc:1e:
                    26:a3:aa:97:92:c3:22:8e:0d:a1:09:dd:b5:f3:95:
                    77:f3:3b:8e:38:5f:58:73:b3:7c:06:38:ea:0b:48:
                    b3:c2:94:3a:f4:c0:0d:98:aa:25:de:f5:7f:d0:12:
                    b9:5d:dc:80:e0:26:b9:7f:eb:9b:92:4f:67:c7:50:
                    17:20:26:a6:a4:70:09:4a:99:a7:0d:fb:e4:b1:04:
                    22:ed:c7:66:fc:a1:42:78:ce:57:20:0a:29:84:ac:
                    6c:be:54:03:66:dd:20:47:9a:fb:96:c5:a7:a3:ef:
                    c2:b4:4a:e2:33:c0:e0:73:cf:3c:87:fc:12:b0:74:
                    e4:cc:80:16:4e:d7:df:05:8b:00:73:2d:2a:ef:69:
                    de:58:56:e1:0c:6d:1b:35:09:ee:b5:d3:2a:f4:b3:
                    39:61:ad:6c:b5:d6:e3:67:49:63:ea:15:56:8a:ca:
                    d0:bd:fd:49:a7:f3:27:77:0c:8e:5e:75:9e:4f:43:
                    5c:6f:6e:e6:2c:7d:17:d1:49:8b:64:d8:c9:31:cb:
                    59:3b:d5:0d:8e:b2:5c:c5:44:02:f2:a0:55:92:0a:
                    b9:b9:54:2b:75:62:71:c3:3f:bd:08:ad:82:3a:24:
                    1d:11:3c:75:67:1f:97:6e:20:fa:11:0a:f7:bd:be:
                    2c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FA:8E:51:9D:33:32:C1:8C:8B:B2:FA:E6:0F:11:5E:90:37:C6:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/81af0be6-f23c-30fe-8f01-107b7f0d4738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:5f:8f:04:5b:d1:7c:fa:bf:37:1d:32:69:a6:84:11:ec:b2:
         8a:b4:90:a2:dd:8b:35:ea:dd:3a:1a:f5:be:fb:28:61:d2:2f:
         8c:ac:09:86:5b:ce:57:5f:e2:b4:95:39:73:0c:69:ac:f9:0c:
         f4:4e:77:4f:30:d3:2c:5b:2e:89:52:81:4a:fc:56:02:b7:a0:
         9c:42:b6:7d:a8:2a:fa:21:f3:c5:30:3a:07:db:2c:1a:03:28:
         51:d7:0b:e0:49:e7:ba:61:67:42:ab:13:63:c4:9c:23:46:64:
         9e:10:4d:2f:4f:a7:8f:bc:7b:c9:3f:09:ae:1f:28:51:b2:44:
         48:44:66:92:7e:74:9b:d7:fa:0b:f9:47:44:f7:06:3b:6a:17:
         85:db:be:6e:2d:5a:cc:db:ca:40:2d:9a:7b:32:8c:c2:eb:42:
         db:35:a9:b8:3a:66:31:e9:9d:76:29:b9:75:3f:e2:94:c5:3a:
         a0:ea:eb:9f:e0:20:ba:39:46:17:68:be:ff:8b:ed:1f:db:bf:
         af:2d:9b:0c:f0:bc:1a:1d:24:aa:af:4d:d7:26:54:09:c9:3b:
         01:3f:a9:26:82:d1:d6:4d:1a:ce:68:b8:94:b6:8f:bc:05:d0:
         e4:df:72:68:e6:61:a7:96:e9:6f:02:2f:39:78:c4:00:13:ea:
         03:fb:74:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:58:51 2025 by rpki-client