Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/56a6fcbc-1e34-3343-bfd5-531dbf8f1c6f.roa
File:                     56a6fcbc-1e34-3343-bfd5-531dbf8f1c6f.roa (raw, json)
Hash identifier:          pMMmCLJQqNwb4zz0TXUEjyF+JWsXW/Hym0YhAu21DdI=
Subject key identifier:   46:FE:F2:0C:3B:1A:72:65:D9:78:AA:0A:61:8D:33:6D:81:65:07:93
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584EE0C2061C29AD288D201A9B80
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/56a6fcbc-1e34-3343-bfd5-531dbf8f1c6f.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     53508
IP address blocks:        24.244.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:06:1c:29:ad:28:8d:20:1a:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=ed417f1a-1751-4527-8ff7-61349c633b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:50:0e:d0:72:87:b9:29:03:78:3d:a9:05:a7:
                    46:f1:8c:7b:3d:77:53:0e:60:18:fc:68:5d:b7:94:
                    1b:3e:09:9d:fa:ab:ab:93:74:1e:bc:3a:02:85:1c:
                    ef:ef:65:4f:53:a8:19:8b:85:8c:0f:c5:dc:2c:c1:
                    e2:ce:66:a5:ce:07:f4:4b:86:06:f2:d5:41:64:99:
                    c5:e6:1a:e7:f6:65:0d:1f:93:22:42:c5:22:b6:c6:
                    d5:80:aa:28:eb:6f:e1:94:84:4f:63:19:5a:78:c6:
                    14:82:ce:11:94:6c:94:c3:d1:fe:81:a0:54:45:9b:
                    ff:73:14:bf:04:72:55:7d:4e:99:1a:6f:11:55:10:
                    0c:89:79:36:d4:b1:21:14:f5:ad:ab:d8:e8:2d:4f:
                    a8:68:e7:c8:25:09:fd:37:98:31:db:ce:19:31:3b:
                    ea:e5:d4:37:d9:f6:05:ef:82:ea:ca:4f:85:55:67:
                    58:8d:b9:50:a1:d2:fd:01:f7:c6:7e:c4:66:4b:98:
                    7d:21:f4:ab:86:2b:a5:ba:56:9a:81:5f:f5:8f:9e:
                    82:fc:af:2f:2f:2e:a6:80:66:d9:cb:bf:96:3b:3d:
                    18:d2:89:b4:db:58:b6:5a:4b:a9:09:ac:ca:2e:88:
                    30:e9:71:c4:13:cd:27:c7:39:d1:3f:32:d5:54:8e:
                    84:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FE:F2:0C:3B:1A:72:65:D9:78:AA:0A:61:8D:33:6D:81:65:07:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/56a6fcbc-1e34-3343-bfd5-531dbf8f1c6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.244.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:57:9c:6f:d3:ca:1c:92:0e:41:a2:dc:44:65:8a:d4:40:76:
         81:89:ae:c9:47:49:f3:24:36:c3:2b:de:19:5e:16:15:cb:c1:
         90:a3:a1:f1:3a:94:e7:94:bd:8a:ae:da:ea:da:49:a5:55:87:
         35:5b:ff:79:57:ac:5f:84:86:d2:2f:ed:5b:7b:e8:01:9b:a3:
         2c:73:c7:73:1b:a4:34:00:72:5e:bd:3f:13:9b:ba:ea:74:7f:
         78:b1:a3:36:81:bb:f2:9f:91:d8:20:bc:4b:c2:03:86:c5:49:
         fb:fb:fe:0c:71:8b:88:58:c9:ea:a6:3c:d1:4e:7d:5b:b5:bb:
         b9:19:a9:66:24:34:78:39:99:a0:4a:96:cd:df:64:f7:cd:d5:
         91:22:e9:f2:73:da:19:de:3e:c6:31:eb:15:9d:b7:f2:83:ab:
         31:9f:7b:15:97:5b:1b:0f:ed:c3:46:d8:65:ad:91:20:26:3b:
         ff:b0:9a:62:6e:95:4f:dc:94:58:f2:56:7c:78:af:a1:39:82:
         df:8b:77:3e:e0:5b:8b:50:6f:d5:1e:55:77:0a:a1:16:c0:25:
         92:2c:63:db:25:c6:ca:7f:31:74:54:67:c7:f8:fe:86:af:b9:
         e9:9b:80:e0:8f:b5:16:9a:f5:54:2a:cb:47:5b:85:7d:cd:eb:
         1b:b6:f5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:37:40 2026 by rpki-client