Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e4831eba-b01a-33ad-ac5b-40d86ec8345b.roa
File:                     e4831eba-b01a-33ad-ac5b-40d86ec8345b.roa (raw, json)
Hash identifier:          tSlnLW8w7jG3LPCDDQxwYPUXpdtrRHj98ZypOgGbwbs=
Subject key identifier:   DA:A2:AC:D2:F0:95:86:F7:51:86:82:CA:76:63:0B:AC:2C:7C:17:47
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F43285849D42FB5C4C69F97F1BE615F40
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e4831eba-b01a-33ad-ac5b-40d86ec8345b.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     53508
IP address blocks:        206.255.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:b5:c4:c6:9f:97:f1:be:61:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=d9d54b45-6bb7-43c8-96d7-1c2244104ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0d:e6:09:4d:e2:a5:87:79:03:a6:54:f6:66:
                    f7:4f:82:39:f7:ce:50:1e:ab:25:85:16:f4:80:ec:
                    42:a3:42:21:39:df:5a:46:5a:1f:cd:6b:e2:dd:99:
                    43:c9:d6:c0:3f:1d:70:81:ed:de:74:f8:8f:88:dd:
                    c4:20:ad:fc:4f:96:d3:d5:ed:10:c5:84:70:42:dd:
                    d8:24:82:60:2a:ff:ee:59:30:99:d1:ac:a6:a8:3a:
                    0a:7a:3c:2f:b3:e7:83:cd:de:c8:d6:40:a2:10:ec:
                    ce:ab:4b:2b:2e:9b:44:22:73:66:bc:4a:6c:63:76:
                    f0:b7:80:dd:49:b9:05:ba:40:ff:10:c1:59:f8:60:
                    c0:94:43:97:bc:28:e5:cf:1f:67:06:70:c2:75:3b:
                    09:1d:06:70:45:95:20:1f:2f:43:9d:f1:ec:5e:85:
                    69:53:de:c5:7a:96:d9:35:ef:68:1e:10:db:8d:f9:
                    83:68:c3:6e:72:42:cb:09:f3:3c:b7:1b:f2:36:34:
                    e9:c3:94:f4:da:86:66:d5:69:47:e5:0d:4d:7b:ab:
                    58:73:a0:64:d5:e0:2f:0e:12:9b:1c:02:3b:57:6b:
                    1b:0d:df:b8:72:0d:89:62:e3:50:de:76:63:cc:14:
                    1d:3c:dc:9a:e3:0c:4a:dd:18:f0:56:06:96:72:4c:
                    5c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A2:AC:D2:F0:95:86:F7:51:86:82:CA:76:63:0B:AC:2C:7C:17:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e4831eba-b01a-33ad-ac5b-40d86ec8345b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:76:bd:71:c0:0e:47:74:f1:4c:d4:ca:72:c3:3b:ba:1d:b9:
         67:45:d9:d5:aa:10:e6:87:59:03:de:06:29:1f:3f:c4:5e:64:
         7f:56:86:05:bb:81:5f:5e:85:4f:d2:e7:cc:ab:03:4a:00:4a:
         3f:03:aa:2e:81:2a:53:78:57:18:b4:23:fc:e3:fb:61:3b:d3:
         a1:c6:e8:93:55:42:6f:4c:f7:1b:c2:a8:d2:c8:d1:64:52:c8:
         6a:ab:db:5d:e8:54:03:1c:8c:ae:cf:52:52:65:6b:44:a6:95:
         f7:e8:ac:37:0e:d9:18:b5:13:0a:9e:f4:41:da:a3:13:2f:ea:
         a2:38:72:63:5e:e2:84:04:a8:6d:11:f8:9a:79:68:c0:35:0b:
         9d:e5:02:2e:bd:9d:78:38:46:53:75:de:ae:96:3f:15:33:fb:
         75:35:a4:68:ae:3d:c7:5b:d1:ed:70:b2:12:4c:27:c8:4f:5d:
         cc:f0:ff:c2:7b:2f:69:f0:10:9a:5c:3b:61:c6:d6:a4:a2:f4:
         d9:4b:cb:da:6b:5b:f6:15:72:13:11:de:f8:c6:41:64:61:9d:
         70:9b:df:23:6a:8a:b2:03:94:09:2c:c9:d2:5c:b0:63:c1:3d:
         96:89:57:16:6d:35:c3:b7:7d:d0:ad:3d:61:f9:59:b1:33:24:
         01:2d:37:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 04:59:43 2025 by rpki-client