Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/c0025222-3a7a-3299-b9e6-86ddb22829a5.roa
File:                     c0025222-3a7a-3299-b9e6-86ddb22829a5.roa (raw, json)
Hash identifier:          m24Wu8i1seM1Ain1uD1USaG/ol+clwSgO6MlXCSVHxc=
Subject key identifier:   DD:74:51:34:28:3E:78:26:DF:BB:CE:6E:6A:B7:C8:85:62:0B:CA:AB
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584AB4EB7F42DBC9EE677C19FEA0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/c0025222-3a7a-3299-b9e6-86ddb22829a5.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     53508
IP address blocks:        206.255.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:7f:42:db:c9:ee:67:7c:19:fe:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=d34169f0-44c9-46c7-9071-a6675c23263a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1e:31:ac:33:d1:ae:93:49:63:1e:ce:44:46:
                    ab:cb:b0:3e:3f:d0:3a:f9:23:7c:0c:a5:93:8f:73:
                    38:05:0b:b7:e7:48:93:af:04:f0:78:fc:a9:6a:18:
                    a2:08:e9:2c:91:f9:e2:c7:74:a9:ad:13:27:97:eb:
                    91:2c:cd:5a:a2:71:82:2e:83:e7:32:c7:97:62:9d:
                    f3:76:b6:b6:b5:34:86:1b:28:98:e6:cf:21:99:d2:
                    53:70:ae:00:a1:0f:86:2b:41:23:16:e3:0e:3f:32:
                    c5:44:54:07:9e:0a:70:63:9a:66:38:21:52:bf:6c:
                    38:3d:c4:9a:d5:2f:37:31:27:43:74:96:9b:f7:1a:
                    dc:b5:7b:47:87:90:9f:22:68:8e:95:c6:54:f3:e7:
                    5c:d4:46:d5:23:fa:bc:32:23:67:0c:14:35:73:13:
                    ef:ed:14:14:14:b2:74:f8:f0:bb:df:ed:d5:eb:6a:
                    6c:7f:01:be:1f:36:6d:36:ef:97:48:87:a2:a4:43:
                    c6:11:76:50:6a:01:70:06:bc:f9:4e:1d:8e:68:e9:
                    c3:a0:ef:0a:70:cd:16:6d:c5:93:9a:a0:7b:46:20:
                    e8:93:1f:95:44:08:cf:cb:55:9a:3f:f0:97:6e:a5:
                    4e:5b:e7:d2:8b:8f:bd:99:9f:c1:4b:36:d3:5e:6b:
                    11:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:74:51:34:28:3E:78:26:DF:BB:CE:6E:6A:B7:C8:85:62:0B:CA:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/c0025222-3a7a-3299-b9e6-86ddb22829a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:bb:7e:60:7f:1e:80:17:39:c9:a9:a7:94:13:99:b4:66:d9:
         27:4a:53:1d:cd:81:25:e7:4f:92:2c:d8:2e:d6:f0:b1:65:0b:
         39:35:0f:3f:f8:52:05:6a:79:72:b3:8d:e2:32:a7:66:01:eb:
         df:aa:04:ea:93:52:a2:ee:ee:7d:d4:78:60:eb:e2:7c:39:5c:
         d8:a3:32:57:1d:4f:9b:4b:e4:ce:45:4b:bc:30:6f:1c:ca:a6:
         27:48:9d:73:b6:0d:d5:85:57:bf:44:3f:51:9f:c6:6b:eb:64:
         5b:21:06:5a:12:7d:d0:63:06:36:1e:a9:07:9a:23:3a:ac:80:
         23:83:b7:9b:fa:15:58:92:98:fd:d8:f9:90:ae:bd:9b:45:a7:
         39:b0:30:26:3a:79:03:f0:ee:53:a8:26:3e:4b:b2:31:30:40:
         ac:d4:14:3e:59:3e:b8:85:60:a1:52:52:90:7e:b7:b0:c6:d1:
         a8:c9:6e:c2:52:3c:fc:d3:76:1d:35:a1:b2:bd:62:1d:74:06:
         00:b8:c6:28:2b:6e:58:74:d2:0b:66:20:b9:fe:e9:fc:7d:de:
         15:ac:36:91:ae:35:72:5d:08:ed:1f:d2:27:84:03:e5:cc:cd:
         ae:9e:c7:af:bf:28:65:db:23:9c:3b:a9:dc:1d:ff:30:2f:b9:
         da:bc:c0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:01:05 2025 by rpki-client