Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8bddfa08-a0d0-3ef6-8ee2-30e1b86bd2d7.roa
File:                     8bddfa08-a0d0-3ef6-8ee2-30e1b86bd2d7.roa (raw, json)
Hash identifier:          Icyv9KFtcoRgruDdPKX5ZYIiqqJ+b8XbgmOx5TRzp/g=
Subject key identifier:   06:7C:0B:41:54:BD:32:BE:23:DB:39:6B:8C:54:A3:47:D3:7F:D7:57
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584EE0C20F8EFD45F4BD12298980
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8bddfa08-a0d0-3ef6-8ee2-30e1b86bd2d7.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     53508
IP address blocks:        206.255.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:0f:8e:fd:45:f4:bd:12:29:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=812e3cb1-179a-499a-95d8-0b5ada00542e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ba:1c:9f:93:38:7e:1c:11:b4:53:33:df:57:
                    db:3f:a3:4f:64:49:dd:4b:1f:28:7a:0b:d2:c2:c8:
                    fb:ac:b1:61:b8:b5:7b:25:1c:d0:bb:1e:2b:5b:47:
                    f0:03:29:fe:3a:ec:d9:ad:e6:3d:47:87:05:85:55:
                    cc:92:d0:3f:ab:ef:4c:08:95:0f:82:e6:c1:99:58:
                    04:05:be:78:47:03:fd:a5:2f:bf:46:9f:99:0c:2c:
                    ef:25:b7:a6:96:21:df:a8:6e:ec:0e:4a:3c:32:95:
                    90:25:e8:f9:dc:0e:81:5e:75:ca:9d:be:f7:48:f7:
                    b1:e3:24:09:6a:aa:b2:16:7f:40:86:50:8e:9d:0e:
                    7a:2d:7c:be:64:09:af:60:e3:12:49:4e:52:0e:54:
                    26:44:5b:d7:6f:8d:7c:c2:f2:05:b4:39:de:43:29:
                    39:d9:fe:5d:d2:e5:37:fd:03:8f:27:ad:07:b3:95:
                    6d:da:7e:d5:92:11:95:b0:4a:f2:fe:2f:cd:69:31:
                    54:38:54:3d:05:6c:a7:dd:ed:2c:51:85:88:69:34:
                    11:5f:b4:5e:dc:22:5e:33:67:c7:50:03:0d:26:e8:
                    36:1d:d5:45:7e:8f:b3:db:bb:38:96:3a:cf:49:eb:
                    bb:71:9e:0d:67:f5:c4:9c:6e:7e:a8:b0:81:d9:ce:
                    af:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7C:0B:41:54:BD:32:BE:23:DB:39:6B:8C:54:A3:47:D3:7F:D7:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8bddfa08-a0d0-3ef6-8ee2-30e1b86bd2d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ff:1d:0e:f1:ed:6f:37:87:e8:06:37:30:5c:c0:59:71:63:
         8d:6c:86:80:3b:c0:2c:d2:f4:bd:ec:47:b0:bb:00:34:bc:84:
         ed:a7:4d:50:c8:46:fa:09:20:86:55:dc:4f:2f:f8:4d:f6:a5:
         01:c1:8c:4d:50:08:71:fa:24:af:38:5a:04:55:5a:2b:c6:69:
         92:af:37:3b:20:1a:1b:95:9e:ee:cb:8c:39:82:e2:fc:61:ae:
         57:9b:09:3e:c5:b7:1d:0f:e2:59:34:09:6e:5c:51:8a:c5:2c:
         82:27:9f:b5:76:9d:43:fa:26:dc:e2:71:80:c2:f1:3a:39:d7:
         ec:78:ea:64:5a:ce:c1:9b:a2:17:73:a0:e9:77:b0:e7:89:24:
         dc:ff:87:83:f4:cd:fd:a4:19:23:d0:69:28:07:6c:78:55:52:
         e2:17:e0:82:e7:9d:03:2a:83:e5:df:11:3b:49:c0:f2:6f:d7:
         83:a6:4c:65:b6:3f:95:6f:ca:00:76:1e:20:8b:1c:b8:49:e7:
         a6:64:8b:af:62:63:06:85:e9:23:3c:c6:0b:95:25:62:c9:24:
         ba:9c:fa:19:84:4c:dc:70:d7:0c:48:91:4b:22:da:05:78:67:
         31:9a:47:b7:22:f3:2a:7f:de:a1:9d:73:fc:ea:78:d9:b6:64:
         9e:57:fb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:01:29 2026 by rpki-client