Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/95046647-8acc-37d8-ac31-873a1a69ae01.roa
File:                     95046647-8acc-37d8-ac31-873a1a69ae01.roa (raw, json)
Hash identifier:          ULn4se86hOnUsulbZEtKEdkgcPT8mh+cPtKca8kAWcc=
Subject key identifier:   BC:25:F5:29:6A:66:AD:75:FA:5F:F9:AC:23:C2:43:1D:26:72:88:2E
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584B9E07C4F72029F40D5BB08D00
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/95046647-8acc-37d8-ac31-873a1a69ae01.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     53508
IP address blocks:        206.255.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:c4:f7:20:29:f4:0d:5b:b0:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=cd61c5ab-b142-4a69-bf53-3ea489bd06dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d5:00:2b:04:74:f0:66:aa:19:27:95:d0:86:
                    bb:f1:65:79:16:1d:31:b2:3d:14:31:a7:65:c0:60:
                    a9:be:d4:22:7f:b2:4a:21:91:ba:f9:c6:a9:83:5a:
                    b5:99:92:40:64:d3:1b:19:28:64:d1:3f:ac:24:45:
                    99:57:ac:fd:bd:7b:55:6b:8e:04:bd:1a:7d:bf:6f:
                    65:be:c4:99:47:a4:e6:ad:d9:03:0f:af:6f:71:05:
                    0f:94:f6:f0:68:eb:bd:df:69:fe:4d:4a:b6:57:c6:
                    ea:2d:00:85:ea:e8:a7:db:6d:c8:34:79:d2:52:6d:
                    47:03:f9:b5:6c:d7:b2:58:84:0b:9c:af:b3:9e:c2:
                    bd:b0:d7:cc:bb:d6:3d:b4:8c:4d:bd:16:22:97:d4:
                    44:b4:38:97:dc:03:f7:49:14:cd:ff:13:e0:e1:81:
                    b6:b8:4e:74:81:fd:58:99:27:34:ff:e3:a0:30:74:
                    c7:c9:76:ae:28:cb:ad:0b:a4:89:bb:cf:62:78:77:
                    62:62:5f:12:63:1a:e3:be:59:03:3a:b6:87:e3:7e:
                    52:a2:65:dc:37:b9:f4:78:da:9c:6a:10:80:b4:b2:
                    ed:76:a0:45:a8:16:70:be:82:70:76:6d:1e:6e:b1:
                    ac:18:df:3b:3f:c8:d8:ec:a2:ff:56:3f:fd:7d:0e:
                    a8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:25:F5:29:6A:66:AD:75:FA:5F:F9:AC:23:C2:43:1D:26:72:88:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/95046647-8acc-37d8-ac31-873a1a69ae01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:48:fe:c7:be:39:3b:7a:68:1f:68:7b:09:73:17:1c:41:c5:
         0c:59:df:98:4a:fe:80:02:76:e7:0b:54:9e:96:64:7d:ec:1e:
         05:92:e9:a0:95:21:31:ad:e5:c1:de:77:48:28:35:72:fe:72:
         8b:50:f9:8e:ee:4c:2b:63:80:8c:ae:dd:42:8c:56:bc:db:a4:
         0f:c0:b9:0c:b6:e5:84:d9:c4:ee:dc:7d:29:c4:b0:6b:7a:b5:
         d8:97:21:3b:40:ed:88:9f:e6:6a:3c:01:a1:ad:42:9e:27:db:
         b9:17:15:e0:5d:ab:c6:1c:01:5a:0f:7b:fd:04:db:bc:8f:a1:
         7f:59:de:5f:f9:49:47:63:6d:aa:e5:10:60:e9:15:59:10:62:
         41:d2:03:dc:d9:b7:2c:ca:a0:cd:17:63:b1:67:b3:f7:37:57:
         7b:ce:85:4e:c1:79:1e:85:d7:0c:9a:a2:cd:04:73:51:10:f6:
         fa:9c:f9:fa:fc:24:d9:11:f7:bc:4f:8f:c7:a6:a8:65:7a:82:
         a8:bb:8f:0c:d4:f3:78:31:e8:36:f4:f0:23:e6:07:99:2d:f8:
         d8:02:6a:5e:05:ef:6c:ab:c7:32:61:6f:7c:37:c0:24:2a:ef:
         eb:88:e6:4d:7b:3b:2c:61:6f:11:e1:ef:37:9e:9e:a7:1b:7b:
         d9:39:ae:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:00:15 2025 by rpki-client