Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/dd0e5fa4-6572-343e-88b3-2c309aa9a1b4.roa
File:                     dd0e5fa4-6572-343e-88b3-2c309aa9a1b4.roa (raw, json)
Hash identifier:          PKFpOZpI4z3eLnj4lSqaug7i8Kqkd16N5gI1yZou+AY=
Subject key identifier:   D3:5E:38:64:5F:B1:B1:B1:72:16:CE:DF:56:60:F3:E0:6E:1B:49:36
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F43285849DC8FCE82DB1291D32992FE80
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/dd0e5fa4-6572-343e-88b3-2c309aa9a1b4.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     53508
IP address blocks:        206.255.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:ce:82:db:12:91:d3:29:92:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=6ea6d933-be6a-4bf4-8e4f-69ede3d75dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9b:2a:7c:c9:ef:ae:4f:ae:0b:c8:d2:e9:e8:
                    68:5a:71:7d:ed:19:5d:15:6a:ae:7f:d2:42:f1:32:
                    b5:f9:9f:51:df:76:42:44:5a:13:cb:a0:3d:05:69:
                    24:13:a6:e7:5b:a9:a7:cf:68:cc:87:ca:2f:89:f1:
                    54:ca:41:71:f2:76:97:6d:ff:ef:61:85:23:9e:ef:
                    f8:76:5a:be:1d:ff:91:ff:f7:2b:b6:86:88:48:2f:
                    47:35:71:9d:be:e8:0d:a8:ad:16:e2:86:7a:66:89:
                    82:74:9f:2c:30:b7:7a:f2:7d:1a:8a:7c:01:30:dc:
                    16:23:86:13:01:8c:74:a8:d9:70:70:a5:9c:83:ef:
                    89:1c:fc:d8:7f:d5:d7:a9:96:45:5d:3f:cc:66:99:
                    89:41:04:84:89:3c:04:e5:a2:df:b7:12:52:1b:ed:
                    4f:b1:34:26:92:9a:2a:dd:a4:19:f5:7d:51:67:ac:
                    2f:06:2a:30:38:a3:d1:c0:ed:f3:bb:51:9f:58:98:
                    4f:4a:24:d3:c1:ed:e2:c8:9a:bd:e3:46:a6:08:2f:
                    23:aa:a6:16:bd:a7:f1:39:2b:a7:f0:d4:74:81:d1:
                    0b:0a:2e:c6:17:24:36:10:17:56:6e:14:dd:1d:6c:
                    fd:9e:80:ab:6a:c2:de:85:45:dc:fb:99:14:b2:55:
                    97:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:5E:38:64:5F:B1:B1:B1:72:16:CE:DF:56:60:F3:E0:6E:1B:49:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/dd0e5fa4-6572-343e-88b3-2c309aa9a1b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:50:a8:47:11:3e:fc:c5:7f:b5:e3:be:28:52:07:68:ae:22:
         e9:cf:7a:67:14:65:5e:f9:33:f8:5f:8c:3f:1f:ac:c2:5b:0e:
         73:37:ea:4e:07:70:69:1c:3c:d4:b6:74:01:9c:95:81:06:28:
         0f:2d:e6:2f:16:b1:4c:e2:66:80:50:d5:b0:2f:fa:d0:0c:1a:
         d3:6d:ba:59:77:13:df:61:07:0a:8e:27:eb:9e:66:bf:6e:26:
         53:1a:59:28:dc:2b:2f:ad:d4:fa:8e:8e:3c:eb:22:e8:c9:41:
         d3:ae:a8:fb:0a:e9:07:95:67:b4:7d:fc:ff:64:5c:d9:76:7c:
         6c:68:de:5c:32:f8:ea:0b:5c:34:fc:0d:f1:7f:da:2c:74:2b:
         51:09:68:37:7e:e4:e7:4d:0d:8f:f4:a7:47:c7:4d:13:08:72:
         22:88:ba:c4:81:90:f7:14:e1:87:af:06:44:01:bd:c5:31:a3:
         7b:b1:84:35:d0:1d:5b:3b:09:fe:08:66:3b:cd:7f:d8:3d:4d:
         10:a5:9e:e5:3d:d8:d2:86:cc:b1:e8:f1:33:e0:6c:8d:3c:e2:
         01:8a:c6:e6:c4:9e:0b:a2:fd:db:4f:dd:15:bf:04:1e:8e:60:
         82:4d:6b:c6:d7:83:b9:09:89:b8:33:f4:da:09:55:3e:23:99:
         30:dd:46:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 17:00:41 2025 by rpki-client