Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8e3a54ca-0c07-3623-aaf9-7167e4525d39.roa
File:                     8e3a54ca-0c07-3623-aaf9-7167e4525d39.roa (raw, json)
Hash identifier:          rqZ9GUZOfSF/wNbuEoOlM/LaN3iFcJyYu+DS9XYQ6ds=
Subject key identifier:   51:BC:BE:29:D8:FF:3E:99:B9:DB:36:62:46:07:E6:D1:10:50:93:20
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F43285849DC8FC599271F44E3901DC080
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8e3a54ca-0c07-3623-aaf9-7167e4525d39.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     53508
IP address blocks:        206.255.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:c5:99:27:1f:44:e3:90:1d:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=4f3f022d-76b0-44e2-92f2-911e00c521fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:07:b3:82:f4:49:94:1b:56:af:c2:7e:cf:bf:
                    43:63:94:fc:66:e1:26:f9:7a:6e:6b:35:2f:8f:24:
                    e3:fb:0d:39:e0:b3:b9:e7:0e:b1:32:11:48:91:e9:
                    1f:48:ab:64:46:d1:ee:44:61:b6:ba:23:e8:c5:d2:
                    6c:71:33:a9:70:36:35:08:c0:1d:9b:da:56:40:b9:
                    7f:ff:84:af:da:2a:06:15:4a:ee:16:3a:49:b1:0f:
                    23:54:76:55:e7:b0:37:d1:af:d9:17:4a:f1:80:e6:
                    53:b3:e9:f8:9d:57:1b:02:bb:c5:f1:17:38:55:3b:
                    bf:20:d7:5d:85:ea:7f:19:e9:c4:7e:f7:25:d0:b4:
                    e3:55:fa:05:b6:d7:5a:0a:7d:17:0a:1a:d6:4a:6b:
                    1b:af:05:fc:be:42:bf:9a:fc:c3:4c:0d:ce:8e:a9:
                    a5:59:ba:80:af:65:65:31:f3:e2:97:a3:cb:7a:22:
                    21:b4:d2:60:34:71:5e:b6:f4:19:ef:72:b8:3e:02:
                    bd:ac:c5:53:31:a8:80:44:75:76:04:44:fa:57:63:
                    a4:4c:39:de:d4:13:84:18:5a:8e:ae:1a:6b:9d:99:
                    ba:5b:3c:8e:54:ee:47:45:eb:5e:56:da:3b:a1:f8:
                    c6:15:81:ef:1b:bb:a0:d3:b2:b1:e7:f3:d2:43:c9:
                    25:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BC:BE:29:D8:FF:3E:99:B9:DB:36:62:46:07:E6:D1:10:50:93:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8e3a54ca-0c07-3623-aaf9-7167e4525d39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:f0:a8:46:21:0a:bc:95:42:b0:dc:e3:1c:72:ad:a0:43:46:
         40:ca:dc:f4:8d:38:10:f8:9f:eb:80:1a:d7:08:1a:27:c1:ef:
         09:11:a8:ba:eb:9f:b4:1a:4c:94:78:4a:6f:df:be:32:b3:74:
         f9:6a:96:d7:7e:7c:9d:32:e6:35:b5:7e:d0:93:64:16:23:4d:
         c1:3c:ff:d1:0d:8c:52:54:7d:cf:c3:14:51:43:0c:b7:e3:09:
         15:93:b2:7a:c4:f6:2c:4c:ea:1f:f4:4e:5c:e0:12:43:83:e3:
         48:a6:71:08:76:b4:d6:7a:72:1c:8c:ff:f5:1a:1b:a0:5c:a2:
         94:7d:b3:83:ad:dc:85:c3:cf:a2:19:8a:e7:a4:e4:b7:c1:8b:
         0c:9d:1d:42:c5:31:45:01:ea:ec:45:83:b0:23:03:6c:dd:2b:
         94:9c:2f:7e:26:06:65:e1:ea:e6:fb:5a:28:4e:61:b9:10:c2:
         fa:1e:cb:95:4f:2c:03:1d:d8:c0:b5:64:bb:41:c9:1a:86:90:
         3d:fc:ef:c4:8c:f3:ef:0a:e0:88:e2:8a:b5:82:7e:98:61:b0:
         fa:87:6d:a8:f0:13:18:5e:97:1d:ba:e4:b4:66:6a:f8:fe:86:
         a3:f8:e2:d9:4d:1e:cc:9a:21:bf:a0:a9:f0:8a:8b:b9:60:a2:
         04:ac:22:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:30:30 2025 by rpki-client