Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/bca18a91-c1b0-3a65-bb89-16bada346372.roa
File:                     bca18a91-c1b0-3a65-bb89-16bada346372.roa (raw, json)
Hash identifier:          R+JLBcZMdYCJprrcsGXSmymq7Ihssn7UKAQHKfxEyEA=
Subject key identifier:   F2:71:09:F1:03:5A:53:9A:10:47:55:78:35:3E:B4:E3:96:90:03:23
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584B583CA6F950D2D871CD2B0400
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/bca18a91-c1b0-3a65-bb89-16bada346372.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     376
IP address blocks:        206.167.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:a6:f9:50:d2:d8:71:cd:2b:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=66cfdf73-8f19-4d72-9898-3f6436e161eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:03:d2:a9:49:ce:c9:bc:da:4b:f9:4e:4a:af:
                    33:9e:fb:75:44:63:dd:f1:fb:e3:ce:a7:ce:05:10:
                    47:20:66:12:87:43:8b:8d:1f:74:74:ed:73:7d:bc:
                    11:0a:3d:ed:ba:95:1b:f1:0e:f5:8a:b2:cb:78:3b:
                    93:9b:cf:ce:37:16:d9:5c:ff:56:e7:e9:c1:e1:3b:
                    0f:a3:0d:6b:e3:84:04:38:7d:11:79:ca:a6:dc:98:
                    c6:0a:16:d7:f9:48:66:dc:60:21:dc:b1:ed:52:88:
                    37:15:68:67:70:b0:91:8a:cb:f0:e4:3d:1b:b8:20:
                    a6:4f:09:ff:33:5d:86:d5:7a:e9:82:01:ff:a5:54:
                    18:6d:43:a5:ef:2b:c1:92:38:cc:bf:ab:b6:4d:f0:
                    f8:ac:95:93:14:dd:0d:f8:93:a8:c7:4d:53:72:23:
                    c3:9f:52:04:0a:ac:58:25:ba:69:cd:b0:f5:2c:8d:
                    57:1d:c3:29:35:d5:ab:72:d7:96:de:9c:12:9c:39:
                    d3:e7:00:73:4f:a3:ae:d5:8f:a1:f9:1e:82:75:6e:
                    2d:9f:c8:cd:e3:76:a4:f1:20:3f:36:1e:ba:16:e6:
                    c6:a1:e2:3f:00:59:2d:aa:57:d6:6f:f8:bd:ef:78:
                    b1:b1:65:74:a7:19:f1:28:3a:a6:e5:63:86:61:df:
                    de:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:71:09:F1:03:5A:53:9A:10:47:55:78:35:3E:B4:E3:96:90:03:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/bca18a91-c1b0-3a65-bb89-16bada346372.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:dd:e2:02:d5:4e:72:c8:3e:88:7d:60:1b:bb:e9:5b:81:40:
         a7:8f:09:e8:6c:33:bf:3a:a1:a8:5e:0b:7a:a7:00:c5:e1:e8:
         9d:cb:8c:4d:5d:e5:f7:e6:d5:1a:44:12:d0:ed:fd:f6:b8:9a:
         d1:48:52:67:a4:c9:ef:fd:95:17:b1:3a:e4:1b:bd:f0:ef:06:
         81:e4:27:c4:d9:c3:a8:20:63:a7:e5:75:ae:fb:78:3e:18:bc:
         22:bc:08:b7:a8:0c:15:12:0b:06:2f:6f:c7:3d:f7:38:ec:70:
         1e:17:27:1a:61:91:5d:0b:a9:46:d9:ca:09:ee:a2:44:e7:41:
         b8:93:65:e6:61:e9:ce:b8:dc:0f:df:bd:4a:7e:de:4e:36:5c:
         68:f1:8d:3f:f4:60:b4:e5:30:e9:ea:e4:02:eb:f3:1a:3d:33:
         9f:5b:5d:8e:da:57:61:0c:e5:05:2a:22:ee:67:98:8c:24:76:
         70:c6:82:ef:a8:2f:6d:99:27:2d:d3:39:54:9a:1e:c5:bb:ec:
         fd:ff:d1:8d:da:f0:65:05:a7:7e:9f:a0:1b:39:c4:67:ff:c0:
         7a:fe:aa:d0:61:3e:f3:75:2c:96:ff:a2:30:eb:8c:3c:cb:54:
         ae:e1:20:ac:ee:de:0c:02:81:b1:41:70:d8:c3:2a:9b:29:3a:
         b5:bf:19:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPKb5UNLYcc0rBAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy
ZDk4MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk
NjZjZmRmNzMtOGYxOS00ZDcyLTk4OTgtM2Y2NDM2ZTE2MWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAPSqUnOybzaS/lOSq8znvt1RGPd8fvjzqfO
BRBHIGYSh0OLjR90dO1zfbwRCj3tupUb8Q71irLLeDuTm8/ONxbZXP9W5+nB4TsP
ow1r44QEOH0Recqm3JjGChbX+Uhm3GAh3LHtUog3FWhncLCRisvw5D0buCCmTwn/
M12G1XrpggH/pVQYbUOl7yvBkjjMv6u2TfD4rJWTFN0N+JOox01TciPDn1IECqxY
JbppzbD1LI1XHcMpNdWrcteW3pwSnDnT5wBzT6Ou1Y+h+R6CdW4tn8jN43ak8SA/
Nh66FubGoeI/AFktqlfWb/i973ixsWV0pxnxKDqm5WOGYd/e6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPJxCfEDWlOaEEdVeDU+tOOWkAMjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj
NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvYmNhMThhOTEtYzFiMC0z
YTY1LWJiODktMTZiYWRhMzQ2MzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1
NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2
MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0
NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqdzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIbd4gLVTnLIPoh9YBu76VuBQKePCehsM786oaheC3qnAMXh6J3LjE1d
5ffm1RpEEtDt/fa4mtFIUmekye/9lRexOuQbvfDvBoHkJ8TZw6ggY6flda77eD4Y
vCK8CLeoDBUSCwYvb8c99zjscB4XJxphkV0LqUbZygnuokTnQbiTZeZh6c643A/f
vUp+3k42XGjxjT/0YLTlMOnq5ALr8xo9M59bXY7aV2EM5QUqIu5nmIwkdnDGgu+o
L22ZJy3TOVSaHsW77P3/0Y3a8GUFp36foBs5xGf/wHr+qtBhPvN1LJb/ojDrjDzL
VK7hIKzu3gwCgbFBcNjDKpspOrW/GSc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:54:40 2025 by rpki-client