Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b39705dc-aa8e-3894-ae97-fe60e59e609d.roa
File:                     b39705dc-aa8e-3894-ae97-fe60e59e609d.roa (raw, json)
Hash identifier:          84WmvKxQ2KeLsXfX0Z6QMYbblprH83WMMrJXE9F8CKE=
Subject key identifier:   1B:E1:10:1D:AD:1D:73:CE:4F:72:74:C1:58:B4:35:93:28:97:06:DF
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F43285849DC8FC4BD04D755906B416760
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b39705dc-aa8e-3894-ae97-fe60e59e609d.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     53508
IP address blocks:        206.255.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:c4:bd:04:d7:55:90:6b:41:67:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=ab543df3-4a45-43d3-9f71-094e1793d0fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:50:24:42:53:3c:c3:bc:72:e8:2a:59:01:78:
                    87:0c:e1:a6:ee:60:27:69:46:d7:69:ba:3e:3c:31:
                    47:99:ef:d8:1b:b3:93:bb:a8:00:86:2e:ac:31:44:
                    21:f0:a8:54:d3:9d:05:da:cf:74:9e:fd:69:4e:59:
                    d0:6b:7d:d0:15:4e:b0:c3:39:97:60:af:ca:b2:c6:
                    9c:bb:f1:25:fa:66:f3:76:0c:b7:9f:ca:81:aa:66:
                    c4:60:5d:65:e2:d5:e6:55:65:54:34:c5:ef:f5:0a:
                    3b:2a:ab:59:43:1a:ad:6b:b7:39:de:4a:ba:ef:d7:
                    c3:87:23:4e:f4:25:95:10:88:ba:77:4c:7a:88:08:
                    9e:d4:16:81:a2:89:9a:79:d0:be:72:0d:f5:8d:5c:
                    ed:07:5d:13:4e:fc:41:41:a4:86:62:af:f1:29:86:
                    39:92:0c:80:ee:8a:48:aa:c1:86:19:df:a8:99:89:
                    1e:f2:f7:d4:12:dc:49:56:49:bd:7b:71:37:24:05:
                    8d:af:03:81:52:45:3d:6e:d4:d7:ee:51:9d:2e:ba:
                    a4:ef:a3:37:58:09:03:bf:d5:d0:05:43:9a:65:26:
                    5c:2e:06:f4:9d:fd:ca:a2:22:50:5c:6c:02:1b:7c:
                    78:fd:eb:d7:fd:c2:6c:10:44:7f:b6:53:17:55:33:
                    f7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E1:10:1D:AD:1D:73:CE:4F:72:74:C1:58:B4:35:93:28:97:06:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b39705dc-aa8e-3894-ae97-fe60e59e609d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:24:39:e4:7c:cb:34:2c:eb:e6:c0:31:5a:23:fa:8b:51:e9:
         c7:23:e8:d1:c8:54:9e:f8:25:be:4f:ec:90:55:dc:f5:45:7d:
         62:88:85:b5:9d:d2:42:80:b7:0c:16:af:24:ca:e0:c2:47:c5:
         4a:bd:2b:3c:0f:b4:86:0f:0e:1c:2f:df:9a:8e:7d:88:5e:aa:
         ec:7e:ca:eb:f5:d6:31:eb:e2:da:f5:57:a5:92:fb:e1:33:b0:
         1e:4c:15:34:fd:5d:b8:9d:e7:23:11:8a:5d:2d:da:2e:0a:9c:
         e5:78:d0:fe:00:4d:2c:0d:3c:f1:e1:b0:a4:3a:d5:83:bf:eb:
         89:11:3f:07:cb:d7:ae:fe:48:07:f7:3d:43:81:e1:da:9a:e5:
         23:15:5f:cb:19:69:24:f4:19:ff:c7:e4:1d:54:50:5d:80:a2:
         29:13:6b:e1:df:f0:66:c5:a5:44:38:90:50:0b:93:82:1c:32:
         37:2b:c1:dd:8a:4c:f2:b5:03:1f:ca:c8:2f:af:e0:b1:74:62:
         98:02:c5:1a:7a:7f:9a:6a:27:ed:c0:69:e3:ab:a9:7c:87:2f:
         17:47:27:fa:25:d3:b2:7d:2f:9e:5a:1f:9c:53:ff:4b:a5:07:
         c8:c7:d7:8c:96:76:d4:23:b3:4b:7d:16:9d:5a:e8:b4:9e:26:
         13:5f:6e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:49:47 2025 by rpki-client