Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/90cfec58-4264-38d3-98a5-78ae8dc09541.roa
File:                     90cfec58-4264-38d3-98a5-78ae8dc09541.roa (raw, json)
Hash identifier:          GsIueVqPC4vbD5jhGVQNby9uxkZNcem0ICf1mLfdi5g=
Subject key identifier:   66:12:5B:01:87:B6:0F:9E:80:35:0D:0D:73:67:72:C0:95:E7:56:31
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584EE0C206BD267BA565F74090C0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/90cfec58-4264-38d3-98a5-78ae8dc09541.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     53508
IP address blocks:        206.255.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:06:bd:26:7b:a5:65:f7:40:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=a9e8d344-ad7d-4017-821e-81e1131f78f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:32:bf:98:7c:aa:be:ef:19:c1:b7:b9:80:ca:
                    da:c9:f8:b7:34:c8:3e:14:d2:a0:b3:b5:e8:ca:cd:
                    8f:c1:d7:16:ea:93:89:8c:c4:d8:25:56:ee:c9:52:
                    12:a7:b4:40:cc:d0:75:e8:ad:de:cc:00:0f:4c:66:
                    2a:d2:85:e6:74:7b:09:6b:73:ef:71:3c:62:6c:c4:
                    09:2c:75:5f:28:1e:05:8e:7a:93:a6:73:88:3a:d9:
                    0c:49:67:4e:e9:92:ef:bb:c6:1d:d4:9a:e5:58:b0:
                    52:7a:e0:ef:2f:af:6a:d1:44:ba:60:12:5a:1f:37:
                    8c:55:28:a6:7f:36:bf:0d:9d:52:94:ff:56:ff:9e:
                    fd:13:f2:54:01:b0:f1:1b:b5:88:aa:f9:f7:a4:4b:
                    73:49:61:dd:33:81:65:b1:63:65:6f:b8:5f:ed:f0:
                    35:d9:c9:8c:c8:5c:29:1e:51:89:49:cf:a3:cc:e8:
                    a4:5f:fd:7f:e8:dc:0c:f2:24:68:6c:03:bb:82:b9:
                    80:44:91:c9:1e:9e:b7:b3:8e:81:28:fd:3f:b7:bd:
                    9f:af:3e:d9:9f:66:b6:60:19:ee:c3:fd:5f:36:10:
                    86:0c:97:8f:1c:91:aa:c9:06:bf:08:82:f5:63:cd:
                    44:6c:a9:a5:50:20:7d:6a:fd:b7:2f:dd:f3:23:30:
                    c3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:12:5B:01:87:B6:0F:9E:80:35:0D:0D:73:67:72:C0:95:E7:56:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/90cfec58-4264-38d3-98a5-78ae8dc09541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:eb:22:c5:1b:99:30:39:42:3e:d6:39:74:e9:7b:1f:45:50:
         35:0c:8e:9d:c2:45:4f:47:9f:2f:4e:9d:4c:13:2b:f9:4e:7b:
         dc:ec:9e:83:9f:9c:e0:5d:2c:60:bf:e9:02:58:e0:8e:13:20:
         8f:6c:a9:50:6a:f2:62:30:ad:d9:06:bc:68:d1:d0:be:37:71:
         e5:7d:f6:44:49:3a:7b:13:d9:b5:a7:12:aa:5b:be:89:7c:aa:
         94:93:25:b2:c7:40:f5:1a:c7:f1:74:a8:22:b1:d1:ba:2a:70:
         5b:3d:9e:fc:2c:1e:57:9f:5c:82:86:d0:ec:85:51:dd:05:57:
         77:36:8a:83:ea:5f:f3:6a:a1:0c:a2:57:91:c9:8d:a8:1d:7a:
         f9:4f:f1:4f:e9:f0:9c:82:f2:13:23:55:5f:dc:5c:9f:0a:97:
         ff:92:24:4a:3b:36:a5:94:87:a3:30:f6:47:eb:1c:dc:ea:3a:
         b2:ef:56:07:c9:14:47:67:d7:17:c0:26:fa:87:c1:2c:f6:84:
         d2:52:d8:0a:d0:d1:65:be:fb:b0:1a:55:44:15:95:5f:cd:71:
         ec:bf:cd:fd:a4:91:41:b4:62:e5:06:b6:da:3b:eb:db:84:ea:
         f4:b3:f0:52:40:dd:ea:eb:56:f1:a4:a2:57:e8:d9:d4:4b:07:
         05:fa:06:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:50:51 2026 by rpki-client