Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ab05f2d4-dc9f-384f-a577-7bb39d9bc66f.roa
File:                     ab05f2d4-dc9f-384f-a577-7bb39d9bc66f.roa (raw, json)
Hash identifier:          /HInYSDKQlGEfJwzJbijaTXZH6P2ASwu9sTS3448fQ4=
Subject key identifier:   67:3C:CF:07:D1:A4:1E:66:50:E2:AD:86:01:64:BF:EC:9E:AB:3F:5C
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584C7D7C5F92B9FB657AACDAB140
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ab05f2d4-dc9f-384f-a577-7bb39d9bc66f.roa
Signing time:             Sun 11 Jan 2026 14:00:39 +0000
ROA not before:           Sun 11 Jan 2026 14:00:39 +0000
ROA not after:            Sat 11 Apr 2026 13:00:39 +0000
asID:                     53508
IP address blocks:        206.255.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:7d:7c:5f:92:b9:fb:65:7a:ac:da:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Jan 11 14:00:39 2026 GMT
            Not After : Apr 11 13:00:39 2026 GMT
        Subject: CN=d6295db7-56e0-403c-b2d4-be48a11e47a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9a:fe:97:ab:09:82:b0:37:02:60:5d:6d:64:
                    a1:ad:2c:fc:7c:c6:b1:97:0c:cb:6f:ae:ad:92:75:
                    af:1b:17:f0:ed:75:d5:9b:48:ac:17:e1:1a:ea:03:
                    b3:b3:b7:b1:83:3c:4c:fe:24:13:1c:53:22:05:c4:
                    0d:a7:f5:81:3a:83:48:fb:b8:4f:a3:02:60:82:19:
                    be:83:22:2f:a1:a6:0e:34:2c:92:bb:6e:16:b0:17:
                    3b:57:d6:c1:26:be:6b:1f:99:37:55:d7:d2:7f:0e:
                    6a:29:13:21:f1:bc:ff:ca:4e:8f:dc:8d:4d:3a:a7:
                    b8:07:a5:71:ff:36:3f:be:ed:74:b5:d9:d1:06:9e:
                    06:dc:64:04:84:49:42:13:78:2b:cf:8c:5c:c5:ae:
                    49:84:72:6b:ea:1d:ac:11:4d:02:1d:25:22:5c:78:
                    81:f0:a3:c2:55:de:51:37:09:db:bd:06:3e:f3:2d:
                    bc:bd:6a:34:cb:53:51:a4:80:0b:ac:0e:fc:9f:07:
                    62:e1:ff:44:3b:ab:7b:46:26:c0:55:f7:5a:b1:63:
                    d8:eb:d0:75:3a:d9:f0:bb:37:61:57:51:68:92:a2:
                    90:f3:59:3c:9e:38:01:42:99:ce:5f:bf:1e:24:9d:
                    63:0f:41:cf:37:7c:d8:da:4d:cd:ee:c5:88:d7:1c:
                    82:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3C:CF:07:D1:A4:1E:66:50:E2:AD:86:01:64:BF:EC:9E:AB:3F:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ab05f2d4-dc9f-384f-a577-7bb39d9bc66f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:09:c7:b4:37:f2:a4:48:96:aa:95:b1:36:3e:ab:d7:df:4b:
         76:fa:12:2e:f1:d1:1c:7b:56:91:20:20:48:eb:b9:ec:ea:41:
         21:4c:01:1e:2d:51:d2:2c:66:1a:c4:55:63:da:d5:c5:39:85:
         30:e8:b4:37:f2:79:fa:24:09:84:9b:21:34:22:dc:58:c5:dc:
         cf:87:d7:75:ad:3c:2a:8e:ed:f7:9c:d1:72:a7:d3:c1:1c:ea:
         cf:05:3d:c2:91:e4:61:90:34:68:e8:24:d6:ac:d3:2b:61:c4:
         73:2c:9a:16:4d:f9:85:ff:5a:e3:6a:bd:c5:e4:c0:c6:88:c5:
         11:50:41:40:96:2c:e6:5b:d0:e1:e9:4d:ad:79:b0:a7:23:1f:
         2d:5a:be:5a:06:57:6e:c7:92:b9:6c:f6:d6:7c:6c:4b:bc:33:
         8b:52:5a:c3:16:28:73:6e:27:85:36:2c:29:09:82:e0:c5:84:
         5b:fb:b6:9d:00:c3:d0:c9:fa:91:1c:27:11:5f:01:87:8b:6e:
         3c:a2:05:fc:4c:bd:0a:2c:fd:d5:d5:a7:14:c3:8a:d7:bb:e3:
         cf:4c:15:ab:80:50:57:af:bd:3e:f2:9a:93:f0:33:f8:9a:43:
         3f:d9:2c:ce:b5:12:cf:70:c4:53:6c:e6:65:52:8a:5b:60:99:
         fa:57:32:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:48 2026 by rpki-client