Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d94b6283-583f-3eb5-a107-41ff8f762125.roa
File:                     d94b6283-583f-3eb5-a107-41ff8f762125.roa (raw, json)
Hash identifier:          KDc/YtwoEuM9EgxceWf/P1UzRIlm3YpcetncCD0HhBk=
Subject key identifier:   FF:B4:6F:E5:E9:BC:36:2F:1B:64:7A:8B:B8:83:9C:43:42:BB:F5:30
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584AB4EB7FB8833D955F943DFC80
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d94b6283-583f-3eb5-a107-41ff8f762125.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     53508
IP address blocks:        206.255.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:7f:b8:83:3d:95:5f:94:3d:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=2e49932a-cbe6-4173-9c1b-fd089c9e328a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8c:4f:02:fd:34:a6:fe:37:98:16:5a:7b:03:
                    30:88:ed:1a:ce:75:85:0a:6b:e4:b2:a8:75:94:13:
                    49:c1:d5:34:c7:41:f7:37:89:d4:b5:da:fc:58:e4:
                    45:bd:87:fe:4d:8b:30:84:ee:bc:52:ed:98:12:6f:
                    58:b7:25:fb:05:91:4d:4a:b7:75:b4:1e:6c:a1:b4:
                    64:92:09:d6:5f:11:2b:13:95:3c:78:3e:f1:48:bd:
                    ad:2d:de:13:d1:3a:1a:31:3e:af:be:15:ce:98:a7:
                    be:39:4b:f0:b9:bb:e8:dd:4f:94:75:e3:43:9a:d5:
                    6b:14:0b:28:8e:cd:f5:0e:b7:c2:10:2e:3a:3c:d3:
                    17:1b:35:03:87:6a:0b:fd:69:1c:91:e5:ea:87:66:
                    75:a3:7c:a2:b9:1b:62:2e:a0:81:33:b4:c4:0e:bb:
                    ea:0a:f6:be:c9:87:d8:89:98:2a:ff:9d:2b:bc:1d:
                    10:2b:f0:72:09:30:0a:12:5a:6b:7d:45:b4:36:67:
                    e5:44:69:3c:d9:6a:e6:5c:ff:31:07:2f:dd:fa:17:
                    72:05:75:d2:2d:ca:5a:d5:49:05:d3:ef:11:76:37:
                    a0:d2:dd:98:6c:6a:2c:7a:bc:05:09:87:d6:33:11:
                    85:1c:c2:32:e1:2b:0c:58:60:a6:7b:68:57:fa:72:
                    e2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B4:6F:E5:E9:BC:36:2F:1B:64:7A:8B:B8:83:9C:43:42:BB:F5:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d94b6283-583f-3eb5-a107-41ff8f762125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:99:e2:f6:e2:20:cc:f0:5d:1a:a6:a0:ef:a4:36:09:ae:21:
         1c:83:5f:a4:9a:a7:d2:84:5b:5f:7b:23:a1:95:f5:a7:aa:27:
         06:fe:4c:30:ec:dc:44:ec:ec:b2:cf:63:f4:e9:e2:24:52:31:
         11:e6:10:2c:5a:ae:56:81:d7:97:86:02:b4:3c:6f:f6:99:6a:
         75:ac:18:71:bf:8c:a9:e9:1c:80:41:dc:73:61:7d:54:55:37:
         a6:b2:48:70:44:be:5e:f0:f3:b2:fa:71:05:f2:d1:1e:5b:33:
         7e:50:05:b2:be:c5:26:bd:e8:88:9a:90:30:92:19:d9:62:d5:
         6e:43:2e:b9:a9:83:5f:f2:0b:69:2f:43:d7:d5:3a:fe:bd:10:
         55:90:10:cf:b1:bc:05:31:ef:23:cc:a4:9a:02:c4:e5:bd:d9:
         4a:ce:6e:10:37:f0:ba:4b:7b:58:3d:82:e0:6d:d3:74:3f:31:
         3f:ba:18:2c:ea:05:9d:de:95:f3:28:2b:f8:f7:85:cf:95:23:
         92:b0:8c:60:4a:89:5c:d6:76:62:d6:28:18:b7:74:82:45:09:
         f8:7d:ff:37:e2:28:88:cc:79:bc:79:2e:76:bb:4f:50:2f:a2:
         f5:4c:75:5e:15:50:a6:7f:b2:91:cc:5e:98:80:53:99:fb:1c:
         db:6a:36:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:58:15 2025 by rpki-client