Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/11305ab5-138a-3cbf-9e57-2ee475abcd04.roa
File:                     11305ab5-138a-3cbf-9e57-2ee475abcd04.roa (raw, json)
Hash identifier:          FmEP83MufYrSNkIoc/6bEXcQyIW1s6bZUYAofvcfksU=
Subject key identifier:   FF:E7:71:91:52:BB:DA:16:1A:4F:8D:A8:57:65:08:C0:DE:88:6D:50
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584B583CA5094FB85DD94B9D1980
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/11305ab5-138a-3cbf-9e57-2ee475abcd04.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     376
IP address blocks:        206.167.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:a5:09:4f:b8:5d:d9:4b:9d:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=aacccd02-91cc-4986-92e9-2dbe6a68beae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:97:5d:70:41:f3:cb:30:37:73:94:80:ab:e0:
                    41:67:ed:9f:5d:4c:32:e6:ae:bd:d0:f7:e0:63:a6:
                    56:a5:3b:65:1c:68:7a:9f:71:38:c4:82:4d:fa:8e:
                    6f:e5:ef:09:e3:ed:d5:31:e9:a6:cd:27:b1:b3:ff:
                    a9:fe:17:20:d2:de:80:35:83:ff:d4:e5:6a:be:5c:
                    47:36:38:e4:bd:70:64:35:2f:7e:16:5a:c4:cd:44:
                    4f:12:4c:70:19:4f:bb:58:0e:94:ea:fd:db:43:86:
                    50:b2:e8:08:34:09:e5:bd:17:78:ee:5c:3e:8f:24:
                    ac:8f:19:01:fb:57:21:c3:48:17:64:0f:29:53:b0:
                    dd:24:32:09:b2:a2:f4:9d:3c:00:7f:c6:b4:d1:ed:
                    4b:c7:6c:c9:88:88:c8:3a:30:56:45:3c:c3:a0:a2:
                    e6:18:90:e7:b2:af:65:cf:26:51:5b:95:0a:f0:45:
                    30:f3:92:23:f0:8a:db:cb:1e:2a:80:59:e1:c4:fb:
                    71:63:88:ca:94:32:5f:76:b7:d4:4b:2f:9b:92:4c:
                    3b:f3:47:76:b3:32:fe:26:91:f7:54:53:27:98:33:
                    c4:cf:95:be:ef:80:7c:f6:c5:ae:ac:2b:1f:9e:52:
                    02:0a:bd:f0:c9:89:32:1f:44:bb:73:ed:b3:57:d3:
                    d6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E7:71:91:52:BB:DA:16:1A:4F:8D:A8:57:65:08:C0:DE:88:6D:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/11305ab5-138a-3cbf-9e57-2ee475abcd04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:dd:d0:ce:fd:3b:44:f4:90:48:a0:43:81:7c:f4:06:60:9d:
         8c:91:0a:5c:5b:c6:88:62:c5:00:37:b0:64:b5:f8:9e:b6:61:
         c2:09:62:68:b6:ae:71:bc:0e:d8:c5:bc:70:d7:d5:4f:82:20:
         f7:25:e4:7b:31:a4:b6:4e:8d:e7:5c:ee:a8:e8:dd:66:5a:bf:
         40:21:69:26:12:97:07:cc:af:57:44:3e:a4:e5:52:5f:b4:f4:
         4d:cc:a5:2f:23:81:c4:00:91:5a:14:a0:5b:3a:99:ef:90:e2:
         38:31:7a:14:db:56:3d:cf:fe:be:ac:67:7c:59:91:d9:28:5c:
         e6:fc:36:02:73:b4:85:30:12:ed:ad:ff:91:7c:71:32:e1:3b:
         ed:af:4c:f3:db:26:c2:21:7f:64:44:58:92:b7:e4:8d:c4:5e:
         56:d9:9e:e7:98:30:c9:d8:7b:f8:5f:cf:2f:0d:c8:08:64:5c:
         dc:30:a1:1f:70:da:76:30:8c:3a:3e:f2:92:b5:d5:c8:9d:bd:
         cd:c4:50:09:15:87:5f:d4:d2:29:db:87:39:bc:86:5b:38:32:
         c2:fc:b8:a6:a3:a2:ca:c3:57:8e:9b:01:81:ea:40:04:ae:51:
         0f:c6:dd:f0:af:82:28:1c:14:48:d4:97:d9:34:44:a5:a1:9e:
         0f:9f:30:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:54:32 2025 by rpki-client