Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/c0025222-3a7a-3299-b9e6-86ddb22829a5.roa
File:                     c0025222-3a7a-3299-b9e6-86ddb22829a5.roa (raw, json)
Hash identifier:          wFsB21MDGH4oPdL571+1GzZL+d1tcP9GAlDxGnsYWCc=
Subject key identifier:   57:F6:5D:50:D8:46:03:F5:97:94:7F:51:18:95:01:FF:5F:60:4A:3E
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F43285849D42FB57B9BE51E7D71342800
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/c0025222-3a7a-3299-b9e6-86ddb22829a5.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     53508
IP address blocks:        206.255.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:b5:7b:9b:e5:1e:7d:71:34:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=010fd1bc-0021-491b-ba5f-0ce79677ceb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:95:01:f2:74:ec:da:c0:a0:bc:12:59:84:0b:
                    95:4e:cd:2f:05:f4:e2:29:e8:84:b7:0b:05:88:dc:
                    ab:06:93:cd:5f:9d:d7:9d:0b:fb:77:1c:8f:8c:84:
                    7e:09:eb:4e:55:25:ce:fd:2f:5b:50:ca:c9:69:57:
                    3e:6e:b6:07:e6:53:3d:85:a8:dd:65:73:33:b3:ec:
                    6f:98:e4:30:34:7e:43:8c:1f:64:d9:d7:5e:f8:66:
                    1a:c1:bc:b9:34:38:14:02:8d:bf:91:16:75:ce:44:
                    09:33:0c:82:53:ba:5d:5d:60:3f:f5:d9:8c:6b:36:
                    34:d8:0d:ba:c0:9b:e4:75:d3:d7:4b:d6:7f:c3:14:
                    a0:a6:5d:8b:64:09:2a:cc:07:3b:8d:e7:43:26:e4:
                    d3:37:aa:9f:ef:3c:a2:6e:3e:f6:2f:2e:23:65:15:
                    ce:2f:29:eb:56:20:b7:55:49:80:e6:74:df:a0:e8:
                    db:a6:c9:a6:95:00:69:c4:47:6d:8c:44:ce:b1:d4:
                    c9:48:b7:1b:33:ae:5b:93:7f:d7:47:05:ae:fa:b2:
                    99:0e:f8:b2:6c:05:88:e4:96:80:72:88:f5:18:be:
                    1f:07:cb:2f:c8:22:b6:2c:e1:32:03:51:45:c8:cd:
                    b5:5d:a3:89:ed:d0:2d:22:c2:d6:65:5f:5b:1a:17:
                    15:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F6:5D:50:D8:46:03:F5:97:94:7F:51:18:95:01:FF:5F:60:4A:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/c0025222-3a7a-3299-b9e6-86ddb22829a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:d1:ff:51:ec:fc:b1:8b:40:fc:06:9c:e3:c8:19:9e:5b:5e:
         97:e6:e4:89:96:88:fb:ec:c1:3f:52:f7:72:09:bd:bc:40:30:
         41:4b:19:13:a7:26:8f:95:e3:e6:b6:e6:4f:2d:5d:85:81:98:
         2b:72:35:66:3f:d0:c2:56:c9:64:84:37:14:2c:d5:16:57:01:
         4c:77:a8:cf:72:cc:e2:c6:a3:2d:76:20:14:a8:75:5a:e0:8f:
         4d:37:83:c1:56:90:4d:86:3f:11:f9:bd:18:a2:77:46:68:a0:
         29:9f:7c:f3:ee:8e:4c:5e:43:59:c9:8d:ff:c9:58:8a:a0:71:
         fa:4f:61:79:fa:c2:e1:b4:95:38:aa:8d:b5:76:ce:ae:28:ee:
         75:20:41:99:3d:61:86:65:e4:68:7d:13:c1:33:20:55:04:75:
         e4:48:61:3e:ef:14:78:d4:da:1b:93:e3:50:19:42:7b:dc:71:
         32:ca:ec:2b:a1:fc:7e:f5:8e:cb:d2:c6:30:45:72:29:22:14:
         9e:db:15:f1:d1:d5:f8:e6:ae:95:10:63:6f:27:d7:0c:ee:65:
         fe:fd:13:c8:6a:72:3f:5f:ad:29:4e:46:f6:1b:ba:15:af:fe:
         e4:2b:78:38:70:ca:91:5b:d1:d3:19:30:78:d0:89:39:7b:02:
         fd:9b:a7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 04:54:07 2025 by rpki-client