Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8bddfa08-a0d0-3ef6-8ee2-30e1b86bd2d7.roa
File:                     8bddfa08-a0d0-3ef6-8ee2-30e1b86bd2d7.roa (raw, json)
Hash identifier:          IfOtA0+ZpRy+/MaI6vE6EKAevuVSjlPUqx452c0g/LY=
Subject key identifier:   C7:A5:E3:23:58:87:39:FE:58:8C:CD:C3:24:2D:08:F2:65:F0:44:48
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F43285849DC8FCE48D503AD980909DC80
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8bddfa08-a0d0-3ef6-8ee2-30e1b86bd2d7.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     53508
IP address blocks:        206.255.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:ce:48:d5:03:ad:98:09:09:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=da867689-8fd0-4ccb-af2d-b86fa79f4b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8c:29:e8:3b:58:fb:40:39:be:d9:b4:c2:7c:
                    71:59:70:ab:9c:55:1c:60:57:5f:15:7f:fd:67:82:
                    21:3d:6e:37:c6:48:61:83:2e:b2:a4:75:9e:37:51:
                    13:17:03:38:df:73:de:d7:95:b3:42:cd:b4:a3:9c:
                    2b:94:3d:c1:8b:64:4f:7f:ed:7a:56:83:8e:d0:3a:
                    40:bc:1e:04:ce:cc:6b:b7:36:b8:f1:57:4b:e9:e2:
                    f0:3f:e4:99:43:c9:7d:5d:cd:26:26:21:d5:55:5c:
                    20:7d:1c:e3:63:40:84:77:22:a1:96:f2:fb:8b:b5:
                    0d:88:b9:c0:e1:ff:e9:1d:5b:33:ac:64:5a:c1:b8:
                    a2:a3:24:b4:e8:7d:27:63:ee:d8:35:ed:0a:35:ce:
                    04:96:72:d1:79:5e:ad:b3:54:34:6f:75:9b:83:49:
                    0c:63:a4:ad:e6:5b:77:af:c5:5d:07:a4:4d:20:be:
                    e5:d6:bb:23:73:78:aa:31:ef:70:b0:6c:56:c5:58:
                    ea:cf:dd:2c:e0:da:66:d4:5e:7f:4d:4b:db:5a:b8:
                    ef:fe:a3:45:47:e8:86:98:93:49:31:4a:bc:c9:d5:
                    45:09:93:21:b1:d6:a7:1f:e1:f9:17:0d:05:62:54:
                    35:d9:0d:69:22:33:81:92:b8:21:e1:d4:bc:8f:ae:
                    47:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A5:E3:23:58:87:39:FE:58:8C:CD:C3:24:2D:08:F2:65:F0:44:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8bddfa08-a0d0-3ef6-8ee2-30e1b86bd2d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:2a:c6:d1:09:e4:52:c6:ee:fa:fa:cf:ec:77:43:85:56:86:
         c6:fb:7f:21:35:e3:d2:e2:eb:58:80:55:00:2b:9e:93:37:e6:
         fd:51:b6:91:80:5e:5a:f4:33:da:c1:ae:76:00:0e:78:1a:50:
         b1:91:7b:e3:c5:64:41:6b:ab:88:9b:aa:a8:3f:86:21:ec:41:
         d5:e3:3c:27:e7:b8:b4:c1:f6:86:c9:bc:b5:3d:79:8f:b8:e5:
         ed:c6:09:9f:e1:88:ba:11:0e:09:73:03:62:1e:06:58:4f:42:
         86:6c:07:b3:6c:16:a8:94:5f:cb:8a:6c:e3:5f:a0:c1:52:93:
         b4:9e:29:a7:d1:65:1f:06:00:f4:02:fb:79:25:07:3d:51:fd:
         50:f8:88:48:d5:1d:3f:1c:c1:01:58:d7:dd:e4:b1:fa:1f:3e:
         4a:eb:67:73:bc:37:fc:e5:e9:7f:d9:dd:de:5e:92:41:ac:a2:
         5b:c9:0e:44:f0:e1:bc:49:de:cf:cc:a1:2a:92:9b:86:03:1d:
         77:49:27:79:11:59:12:dd:bb:17:6b:a0:41:c5:70:ff:d9:9d:
         f9:88:c0:37:4e:e0:ff:f7:0a:ab:3f:e2:07:72:bc:71:ff:00:
         d5:80:85:fe:2b:0b:72:b1:e0:4d:5f:dc:e3:e4:8d:e7:f6:03:
         f1:42:89:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:36:56 2025 by rpki-client