Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a5f21eee-f45b-3f27-83d1-af5ce445c42b.roa
File:                     a5f21eee-f45b-3f27-83d1-af5ce445c42b.roa (raw, json)
Hash identifier:          oHSeQ5k7x3tNsANFC0veW7XFsYCzBqf7HxP+q8hhWOQ=
Subject key identifier:   15:B8:50:B2:C9:D2:87:11:70:57:55:FF:97:46:97:9E:6B:04:F5:2D
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584ABD4B9A51FEA5577CBE516600
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a5f21eee-f45b-3f27-83d1-af5ce445c42b.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     53508
IP address blocks:        69.50.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:9a:51:fe:a5:57:7c:be:51:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=2a42c342-3cad-4346-8db3-769731bf91f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a2:40:ae:30:65:12:a2:b3:19:c4:54:13:09:
                    72:92:71:a6:94:24:65:8d:89:3d:6d:30:54:cd:8d:
                    87:e1:b1:ce:7a:31:70:56:85:96:ef:50:06:81:a8:
                    51:be:bf:37:9e:71:30:11:9d:af:b1:df:f7:cd:2b:
                    55:58:0b:8c:2d:52:ab:e8:d8:f3:64:6d:60:ee:67:
                    4b:2a:d7:9d:da:61:a8:00:61:9d:4b:f7:5b:99:c9:
                    86:50:04:d7:ee:ea:4f:c6:a2:a1:3b:9c:6d:df:a4:
                    e9:3b:ef:c8:1a:b7:a5:0f:a9:05:8c:62:70:b9:98:
                    c0:80:73:62:0d:23:47:21:e6:75:ca:ca:36:45:b6:
                    a2:f6:f5:51:8e:0a:0a:cb:4f:31:03:cb:d2:28:7b:
                    5c:23:1e:80:ac:f0:ea:57:1f:11:bb:f0:82:61:78:
                    c3:29:d5:fa:75:07:c3:55:2b:70:44:fc:fe:d2:33:
                    c9:4f:74:f8:45:7a:55:f7:4b:ec:a1:8d:f1:ac:f5:
                    52:17:63:44:04:75:90:16:55:f5:76:6e:d6:38:65:
                    dd:cd:bf:a1:31:1e:4d:a0:ed:be:43:f7:7b:bf:99:
                    1b:05:2e:5e:df:c6:1a:bf:fe:76:3e:7b:77:dd:9e:
                    29:f2:5e:a9:fe:78:6d:ef:40:4d:a9:39:0d:84:2d:
                    2d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B8:50:B2:C9:D2:87:11:70:57:55:FF:97:46:97:9E:6B:04:F5:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a5f21eee-f45b-3f27-83d1-af5ce445c42b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.50.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:74:d8:b5:0a:48:f6:e0:67:30:2f:31:cd:74:8a:22:00:91:
         6c:28:14:07:c0:5d:1c:3a:59:0b:42:b0:10:4d:26:b8:d0:59:
         95:1c:f6:a0:42:86:41:e0:5f:9d:4f:69:fc:93:58:8f:5b:aa:
         96:82:c0:a3:8f:22:ad:a7:72:2a:79:25:02:47:e6:cc:c5:4d:
         8e:eb:09:54:1c:38:8f:a5:2b:c3:59:b5:d2:34:26:0f:24:66:
         00:42:8d:76:4a:e5:c1:3b:25:8d:b2:a2:54:0a:49:f1:8c:c6:
         0a:5a:6c:0c:05:68:29:0d:88:1b:02:30:a7:15:64:2d:7b:ad:
         83:5a:57:ed:6c:26:e3:c1:c2:20:61:fd:96:75:f8:12:54:26:
         d3:d8:8a:29:72:f5:30:d7:1e:a2:61:cf:6d:cb:2e:70:87:4c:
         f0:da:19:4d:c4:fe:1e:68:13:17:7f:90:f2:63:f6:45:dd:31:
         1b:d4:bc:19:9e:65:bb:39:b9:ad:6f:2d:47:80:f0:03:50:6f:
         81:b8:60:00:c2:ba:93:08:2e:f0:1b:2e:d2:ba:ff:41:d6:b6:
         ce:7f:8c:6b:40:cc:be:a7:7d:83:37:9b:2e:2a:50:8b:03:b1:
         4f:a9:b8:ed:ac:2a:59:68:c7:0c:bf:dd:6f:b8:9a:e8:39:8f:
         fc:12:39:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:31:53 2025 by rpki-client