Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ecb1b9f1-b041-388f-9435-4d1d857917df.roa
File:                     ecb1b9f1-b041-388f-9435-4d1d857917df.roa (raw, json)
Hash identifier:          PojsiC6GuisOfPPfHq47a7KyQ9QdEcgUbuFsK4jqvCw=
Subject key identifier:   18:A4:31:BA:09:BD:9A:7B:D8:78:8B:DA:93:ED:2F:A8:A6:62:84:67
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F43285849DC8FC47C87FAB686106CD480
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ecb1b9f1-b041-388f-9435-4d1d857917df.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     53508
IP address blocks:        206.255.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:c4:7c:87:fa:b6:86:10:6c:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=e6b58d02-bd14-4235-94fd-21356598601e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:97:81:ed:aa:eb:ea:88:36:c9:c1:54:53:c1:
                    ab:35:10:ec:ed:ff:5f:01:6d:0c:93:b4:36:b1:f1:
                    00:44:b3:4f:ca:42:6b:e5:ad:d5:42:ca:c8:fb:06:
                    e3:8e:63:33:05:6f:33:8d:25:af:ca:07:7d:6f:fa:
                    e5:ec:b5:2b:5b:25:b1:da:64:07:b1:49:51:17:dc:
                    26:16:cf:46:df:37:cb:29:79:00:bd:52:da:97:b8:
                    ca:0d:a7:5d:d7:15:52:ca:0b:e7:34:22:4c:15:12:
                    ce:dc:d0:ff:99:72:95:67:01:78:76:ec:2e:9b:bb:
                    07:ab:bf:17:3c:fa:5f:95:59:0f:58:13:cd:30:cc:
                    8c:e5:53:3d:c3:75:4e:e0:4f:8a:ab:7c:db:35:c6:
                    ca:26:f7:59:86:7c:ce:74:6c:e9:4f:8d:ec:d7:08:
                    53:b3:aa:c5:dc:d3:7d:be:c6:8d:93:e7:53:ad:fd:
                    a9:d8:08:7e:0d:8d:23:48:68:84:47:f4:96:bb:cf:
                    33:09:04:44:62:d4:9f:40:a3:15:02:bc:0d:8e:f9:
                    bf:72:d3:9b:c0:fb:6b:cc:64:9d:a0:13:21:87:ca:
                    8e:fd:2e:d4:4d:f0:48:65:f1:ca:89:8b:89:9b:87:
                    ac:d1:3a:cb:d3:a5:15:24:e8:f9:50:0e:63:5e:b8:
                    a7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A4:31:BA:09:BD:9A:7B:D8:78:8B:DA:93:ED:2F:A8:A6:62:84:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ecb1b9f1-b041-388f-9435-4d1d857917df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:a7:f9:41:8b:db:4e:eb:3f:6e:40:03:2b:8a:5f:bd:f8:f6:
         c3:dd:aa:c4:64:c7:4d:05:ec:74:e6:d7:80:f3:3e:03:76:09:
         7f:58:a8:46:15:bf:3b:15:0f:5d:c1:a9:65:ce:23:ed:e0:3c:
         db:51:f7:1b:2f:84:51:4d:e7:61:01:6b:9a:7e:2a:92:ea:e1:
         fb:c0:4b:42:37:79:4c:df:37:e7:b9:e7:40:25:ac:d9:af:a9:
         5d:47:c5:b4:03:5a:f9:46:55:01:94:6e:be:76:27:bf:54:43:
         e7:0f:16:5c:07:09:37:5b:40:1f:c5:ff:12:99:3a:5e:92:55:
         ae:05:10:d9:d6:a8:5b:f8:67:55:3b:c9:d8:b5:83:27:a8:90:
         1b:ef:2f:84:3a:31:b1:b2:69:c6:1b:be:a5:29:a3:11:9b:38:
         6b:60:76:76:9b:9f:13:a3:21:c7:3f:79:ed:ea:e2:fc:bb:fa:
         3b:92:1a:60:9f:54:01:74:42:62:cb:22:d0:c0:dc:12:ab:fc:
         55:e2:26:f9:3c:ea:ab:88:6e:a0:ae:82:34:8a:b6:9d:70:b2:
         68:99:36:7e:6d:4c:0f:10:66:51:fc:54:d0:70:43:fa:05:ef:
         08:a9:cc:be:94:bc:69:8e:9e:81:f9:e4:85:bf:6c:18:7b:7a:
         d2:40:c4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:07:27 2025 by rpki-client