Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b6c5154d-44b0-356c-bd4c-ed4cbf555273.roa
File:                     b6c5154d-44b0-356c-bd4c-ed4cbf555273.roa (raw, json)
Hash identifier:          HyiVaJRofiyoERIjYvI5PCsJK+/cP572q1n45s/FS/s=
Subject key identifier:   4B:B1:91:05:A8:D6:26:A2:B7:1A:B4:6B:1E:B3:74:9A:BE:08:65:1A
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584ABD4B9AEA4C6A80D9B1152120
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b6c5154d-44b0-356c-bd4c-ed4cbf555273.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     53508
IP address blocks:        206.255.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:9a:ea:4c:6a:80:d9:b1:15:21:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=1b92df1e-9ed1-4a7b-b11c-cd75539e50ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:33:a4:28:84:2f:9a:4b:c0:25:5e:a9:8c:b5:
                    00:5e:36:1b:f1:d7:b9:d4:5c:c6:70:5e:0f:fb:9d:
                    ec:b9:e1:86:13:00:94:5d:38:06:4b:3c:56:0c:c3:
                    66:aa:a8:19:52:0a:45:42:62:12:d7:0f:c0:93:f4:
                    ae:73:6c:08:31:a5:0b:3e:7c:53:33:d7:97:02:62:
                    46:1c:18:f4:73:a1:64:9d:84:8c:67:86:d6:2b:70:
                    de:a4:aa:07:64:f3:bc:29:dd:f6:b3:c1:5b:e0:e9:
                    14:b8:8d:77:0e:ae:6b:cf:58:97:b2:65:27:f8:35:
                    67:21:22:35:d3:a6:35:e0:e8:f2:4a:4c:57:53:c4:
                    3e:07:5b:1b:75:96:fd:e9:a9:7d:d6:6a:8a:80:99:
                    24:bb:c3:24:62:14:cf:82:e6:ff:6e:c5:3e:be:1e:
                    fc:50:9a:0d:1e:36:fe:4f:26:7f:a2:c5:4e:41:8a:
                    c9:92:58:71:5f:d6:71:44:2f:58:13:23:ae:cf:ac:
                    22:a6:2a:41:78:1c:2a:ae:2d:40:92:0d:d1:72:5f:
                    f8:dc:8b:20:59:9a:1f:ca:b0:b4:93:d0:d3:45:55:
                    2f:03:66:64:3f:58:e8:52:ee:33:39:e0:fa:2b:8b:
                    82:ed:6e:0a:1d:b1:16:4e:04:70:0f:65:be:fe:c6:
                    5e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B1:91:05:A8:D6:26:A2:B7:1A:B4:6B:1E:B3:74:9A:BE:08:65:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b6c5154d-44b0-356c-bd4c-ed4cbf555273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:2f:09:a6:b9:91:58:8b:58:52:57:70:b1:07:6b:7d:0e:d1:
         58:dc:0f:2f:b9:bb:83:6c:0c:91:b3:60:cc:26:0d:55:00:c0:
         1a:d0:a1:ca:6f:64:63:e5:b2:78:ad:23:27:ed:7b:df:90:d1:
         1f:7c:99:11:dc:7e:83:f8:d6:fe:df:6b:c3:0d:9c:02:2e:b9:
         cb:f4:ad:17:ca:54:ff:48:96:1d:32:87:ca:5d:d8:49:49:0f:
         01:e2:dc:82:83:65:6d:32:55:03:61:10:5c:f2:a0:0e:8f:1a:
         b5:1d:8e:23:d4:3a:9c:ed:f9:6e:ce:df:0e:fd:38:3f:5b:99:
         ad:d2:46:2c:5a:49:b5:a9:25:51:99:32:f8:e1:dc:a9:15:ae:
         60:a9:f6:7a:a5:7c:ad:09:5e:68:21:a7:77:af:73:96:53:88:
         a6:4f:40:3d:d7:c2:72:b4:12:3d:a9:72:81:9d:b4:05:7a:31:
         35:e6:6e:7f:f1:e3:16:6c:7e:45:c7:97:42:58:66:cd:ca:4e:
         64:31:85:4c:71:9d:9c:23:7f:e6:90:4a:5f:bd:14:6d:3e:f8:
         9c:58:91:a8:84:de:f3:ad:e9:e0:e0:5b:cf:56:a8:59:1f:b2:
         4a:78:2e:5f:b5:68:a7:6e:0d:a4:b3:ab:5f:3d:50:16:37:9b:
         5a:d6:65:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:21:23 2025 by rpki-client