Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b6c5154d-44b0-356c-bd4c-ed4cbf555273.roa
File:                     b6c5154d-44b0-356c-bd4c-ed4cbf555273.roa (raw, json)
Hash identifier:          GaRPhpQsFns+gP7QNvnLpfTZk4KC47ib8bVtGGBJo88=
Subject key identifier:   58:E3:08:51:54:BE:0F:52:14:BB:8D:56:A7:C5:49:38:69:A9:67:49
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F43285849DC8FC5A733E68D4C7DD7F500
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b6c5154d-44b0-356c-bd4c-ed4cbf555273.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     53508
IP address blocks:        206.255.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:c5:a7:33:e6:8d:4c:7d:d7:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=c4738ea0-71d0-4071-98ff-9c76a837a4f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a3:77:78:2c:77:0d:29:3d:4b:16:60:51:83:
                    f6:37:14:39:38:89:46:42:f3:95:95:bf:f5:33:26:
                    ba:bb:32:2a:fd:f8:33:a5:f4:aa:1c:bd:04:79:76:
                    68:dc:68:c1:59:1a:67:c6:d6:33:f2:97:6a:bf:4b:
                    f8:6e:95:0b:3c:06:93:61:65:ff:78:18:4d:54:2d:
                    f2:e0:89:b9:e4:1f:83:ef:16:21:27:22:55:b3:ec:
                    0e:29:ab:e5:e6:60:a9:02:eb:db:21:3c:6a:c3:64:
                    e5:02:30:7c:31:ba:be:73:26:45:d4:5d:37:47:8a:
                    a2:11:f4:3b:68:d3:03:57:0e:d0:e1:8a:9e:56:c7:
                    06:98:5a:68:37:b2:3c:ec:a9:f6:1f:34:10:cc:44:
                    ff:8d:03:0e:81:76:c4:d4:10:5d:a0:4f:d5:ab:fe:
                    90:19:58:21:e9:4e:27:9d:97:b4:e9:3e:11:ab:13:
                    15:32:18:07:59:60:dc:d2:31:c9:7b:6d:02:c9:3e:
                    a0:0b:3e:c9:1d:99:1e:f2:08:2c:02:d3:fa:0a:b9:
                    c1:2b:f9:95:40:99:28:d7:43:f5:a7:bd:15:12:74:
                    18:73:1a:57:41:ed:da:97:e6:3b:d6:47:42:57:6b:
                    85:11:94:e9:d7:80:35:61:6e:d1:fe:2a:64:88:77:
                    1f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E3:08:51:54:BE:0F:52:14:BB:8D:56:A7:C5:49:38:69:A9:67:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b6c5154d-44b0-356c-bd4c-ed4cbf555273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:75:d5:f5:d8:45:6a:8d:4e:44:eb:16:98:f7:9f:a6:7f:96:
         f2:61:b9:39:cb:86:73:a5:e1:1f:19:b6:7b:e4:ca:70:ef:55:
         ba:a6:b4:b5:76:56:6c:bd:70:91:8c:10:5e:55:ac:8e:57:c2:
         77:dc:2c:62:fe:cf:08:a4:dd:31:de:fe:6f:8a:50:64:9f:06:
         90:31:50:bc:f9:b6:14:9f:f1:cb:2c:ad:5d:ef:fd:c0:0e:37:
         18:d6:71:7b:01:4a:6f:6a:55:eb:40:79:b0:d1:94:89:25:28:
         30:94:9f:b9:1b:92:bd:cd:7c:88:de:32:63:9a:80:b1:c0:eb:
         59:8e:f7:cc:7a:72:fd:73:04:c3:e4:02:ee:95:b1:eb:60:21:
         3e:ac:3e:b1:df:a6:b4:7d:8b:65:23:39:33:77:3a:e3:0b:9e:
         ac:32:4c:02:30:dd:17:37:92:59:62:b3:bb:52:69:d8:7c:4d:
         99:44:7a:b4:03:39:2c:d0:70:2c:80:1c:da:c6:17:2b:37:59:
         74:d4:86:48:11:1a:94:dc:47:b0:05:3b:73:37:13:d5:23:40:
         1f:14:0e:0e:4b:20:72:fc:6c:ca:07:b2:4b:c6:98:12:e8:f7:
         ad:73:22:fa:13:7d:56:6d:ae:26:4b:57:77:51:f7:c2:cf:35:
         b0:c5:c6:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8WnM+aNTH3X9QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz
NmMzMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk
YzQ3MzhlYTAtNzFkMC00MDcxLTk4ZmYtOWM3NmE4MzdhNGY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6N3eCx3DSk9SxZgUYP2NxQ5OIlGQvOVlb/1
Mya6uzIq/fgzpfSqHL0EeXZo3GjBWRpnxtYz8pdqv0v4bpULPAaTYWX/eBhNVC3y
4Im55B+D7xYhJyJVs+wOKavl5mCpAuvbITxqw2TlAjB8Mbq+cyZF1F03R4qiEfQ7
aNMDVw7Q4YqeVscGmFpoN7I87Kn2HzQQzET/jQMOgXbE1BBdoE/Vq/6QGVgh6U4n
nZe06T4RqxMVMhgHWWDc0jHJe20CyT6gCz7JHZke8ggsAtP6CrnBK/mVQJko10P1
p70VEnQYcxpXQe3al+Y71kdCV2uFEZTp14A1YW7R/ipkiHcffwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFjjCFFUvg9SFLuNVqfFSThpqWdJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4
MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYjZjNTE1NGQtNDRiMC0z
NTZjLWJkNGMtZWQ0Y2JmNTU1MjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0
MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0
MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk
ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv/oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABR11fXYRWqNTkTrFpj3n6Z/lvJhuTnLhnOl4R8ZtnvkynDvVbqmtLV2
Vmy9cJGMEF5VrI5XwnfcLGL+zwik3THe/m+KUGSfBpAxULz5thSf8cssrV3v/cAO
NxjWcXsBSm9qVetAebDRlIklKDCUn7kbkr3NfIjeMmOagLHA61mO98x6cv1zBMPk
Au6VsetgIT6sPrHfprR9i2UjOTN3OuMLnqwyTAIw3Rc3kllis7tSadh8TZlEerQD
OSzQcCyAHNrGFys3WXTUhkgRGpTcR7AFO3M3E9UjQB8UDg5LIHL8bMoHskvGmBLo
961zIvoTfVZtriZLV3dR98LPNbDFxsw=
-----END CERTIFICATE-----
Generated at Wed Jul 2 04:14:12 2025 by rpki-client