Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ab05f2d4-dc9f-384f-a577-7bb39d9bc66f.roa
File:                     ab05f2d4-dc9f-384f-a577-7bb39d9bc66f.roa (raw, json)
Hash identifier:          hnCMVvGn5QxYV1huz3Z3RiRI2omzxmdXK3qLyeQ2Sjo=
Subject key identifier:   43:EC:41:BE:E0:FE:95:AC:07:73:21:B3:1F:6F:D6:18:E6:5D:D2:03
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584B9E07B8B2BCBA5C754C8EC460
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ab05f2d4-dc9f-384f-a577-7bb39d9bc66f.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     53508
IP address blocks:        206.255.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:b8:b2:bc:ba:5c:75:4c:8e:c4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=0f9d0acb-44de-4e55-bf62-6ecc775abd96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:53:58:79:bf:8c:41:3b:40:84:aa:b6:54:18:
                    49:59:cf:83:cb:90:e3:fc:ed:96:1f:2d:46:8e:16:
                    14:7e:a7:2d:2d:c2:ff:ee:7b:12:ed:e6:9d:e6:0b:
                    88:37:62:10:91:8c:9e:bf:c8:85:d5:bd:85:be:e7:
                    49:18:bc:2d:77:ff:e8:ce:69:64:07:f2:1f:d3:50:
                    f2:fd:78:7c:70:a9:e2:14:ff:ca:b9:54:b2:5a:bd:
                    b4:8e:86:f3:56:f5:6b:d6:a1:d8:85:55:d0:f6:cb:
                    e6:d9:2f:5d:68:b2:ce:c4:e2:45:5a:5c:4a:ba:ab:
                    12:f0:f3:18:35:95:2b:61:43:a4:59:6d:5e:ec:0f:
                    7a:26:a2:d9:8d:6c:2f:d8:80:78:66:75:d5:19:70:
                    bf:07:e3:50:1e:50:b4:b1:23:a5:23:5f:53:f7:4f:
                    5d:7d:19:72:d8:44:36:75:39:71:de:dc:66:ab:b9:
                    78:f5:fc:9e:82:53:ae:a5:b9:7f:a4:50:1e:a7:fd:
                    05:0d:c6:af:c0:61:7e:6d:77:54:17:79:9b:c5:a6:
                    38:7a:48:0d:e3:73:c6:b9:73:61:93:f1:11:56:cd:
                    55:3b:84:9a:85:79:2b:e1:3f:94:91:5e:3b:be:2e:
                    bd:3c:fe:dd:63:1f:c7:a8:53:3a:78:a9:ef:9f:cb:
                    ae:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EC:41:BE:E0:FE:95:AC:07:73:21:B3:1F:6F:D6:18:E6:5D:D2:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ab05f2d4-dc9f-384f-a577-7bb39d9bc66f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:a4:9f:09:43:50:ef:af:c0:dd:e6:ef:c5:06:01:1a:74:ba:
         47:fc:85:d5:1b:10:d0:20:cb:50:34:a3:40:57:d9:ad:d7:d4:
         2a:1f:14:c2:a6:81:e3:e5:15:3a:ef:fe:94:86:0e:66:0a:fa:
         77:4f:db:5d:55:1b:cb:e0:15:1e:80:b6:1d:bd:76:04:0b:83:
         04:87:ef:8b:cf:c8:12:ff:f0:e1:87:63:09:29:34:0c:b0:d6:
         ef:65:14:a9:75:ad:c5:bd:36:af:2c:bc:0e:64:55:dd:a9:21:
         1d:ca:f7:fe:4e:38:5a:61:2e:eb:78:86:2e:c0:9e:46:64:e4:
         af:01:4f:0f:4f:7c:37:f6:5b:69:73:43:7f:33:97:b2:38:b0:
         59:73:18:62:38:2d:6e:5d:7f:c1:5a:a1:62:0c:ef:90:58:36:
         b5:c2:bc:6c:02:2e:45:ed:c6:63:b1:12:36:a7:5b:a0:a8:eb:
         c5:30:8e:d4:a6:81:27:a1:c1:0c:5b:fe:10:b9:41:4f:7e:fa:
         9c:36:0d:41:e2:e7:b4:fb:93:41:6b:e9:ca:95:56:12:40:e7:
         78:8d:54:00:cc:9f:67:f0:75:88:ef:3f:99:d3:68:1b:01:2f:
         fe:49:93:8c:47:78:e9:4b:4d:0d:e7:94:e2:60:ed:0c:97:f4:
         47:45:01:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:46:28 2025 by rpki-client