Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/27185d50-68d0-3740-a559-31bc7203a3a6.roa
File:                     27185d50-68d0-3740-a559-31bc7203a3a6.roa (raw, json)
Hash identifier:          8EpyXFKsC8c4UfB9LQI3DOXP/cGXnlJQMLl9LbziS0Q=
Subject key identifier:   8F:00:03:35:DF:D9:DE:F5:87:33:6E:62:90:6B:4C:F4:0B:53:F0:FA
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584B583C9BB4C9F7465C9E1B4D40
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/27185d50-68d0-3740-a559-31bc7203a3a6.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     376
IP address blocks:        206.167.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:9b:b4:c9:f7:46:5c:9e:1b:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=357dab1b-69a0-4954-8cfc-cdd5d23f5588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ac:ce:b6:c1:ef:eb:f2:33:80:a1:f9:f5:d9:
                    17:89:c2:d8:ad:85:e5:29:21:c7:69:e2:a5:3e:b0:
                    b8:84:bf:a5:ab:dc:9f:6e:6f:bf:3a:d1:3b:06:c2:
                    d7:19:ac:a9:6a:a5:9a:09:fd:34:91:99:67:58:dd:
                    cf:9f:02:fc:3d:17:52:7c:f5:5a:b0:66:ab:22:31:
                    c8:d5:43:49:11:4b:b8:89:3a:04:dd:ae:fd:04:33:
                    13:f0:e4:ad:03:fa:4a:66:af:0f:b4:de:df:46:9d:
                    5c:c8:69:0e:71:ea:d8:47:4c:88:74:9c:53:a6:4d:
                    f6:e1:a0:31:4a:fc:29:76:f5:df:a4:57:fd:58:ed:
                    97:22:67:3c:8e:54:fc:12:68:43:8d:2a:af:60:4b:
                    74:5c:37:ec:49:dc:10:86:d0:c2:2a:55:66:df:d2:
                    e0:70:be:b6:fb:52:75:91:e1:44:c9:f2:ed:cf:6f:
                    ed:17:2f:83:b1:42:62:08:a1:42:39:b8:99:87:45:
                    af:33:63:be:7e:f4:bd:cb:f8:1b:47:29:ab:d7:ed:
                    e3:17:29:68:c3:87:6b:58:c4:aa:0f:7b:ee:39:e1:
                    2a:e5:77:f8:0f:ff:af:b0:d2:c7:c2:77:81:6d:82:
                    31:14:fe:89:4b:93:45:2a:3b:87:44:37:ec:3e:d8:
                    df:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:00:03:35:DF:D9:DE:F5:87:33:6E:62:90:6B:4C:F4:0B:53:F0:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/27185d50-68d0-3740-a559-31bc7203a3a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:f0:41:4d:ca:49:12:61:a9:2a:d7:80:2d:9f:53:79:05:44:
         be:40:7b:5f:11:5d:68:92:de:78:95:70:d0:8f:24:32:86:90:
         a4:a5:0f:ec:f4:16:e8:40:86:ae:ea:99:a8:57:09:e4:86:09:
         bb:bc:a6:f0:51:c7:9c:d0:30:03:ed:e8:29:bb:98:43:a0:1e:
         cb:9b:f1:68:b0:99:d6:28:dc:7d:20:98:c6:31:14:22:8c:7b:
         02:13:e1:59:0e:f0:52:2e:c4:09:b4:61:8e:e7:5e:fa:4f:ad:
         ba:6f:b6:4d:68:b4:da:48:2d:d2:a5:69:32:6f:22:27:b5:fe:
         23:16:96:19:31:08:54:8d:39:f7:36:d2:c7:69:34:9d:04:8d:
         a3:44:ee:ba:d8:e7:b6:34:72:0d:c5:ad:88:da:15:d0:fb:64:
         19:9f:c7:8f:04:23:ff:da:ac:de:6a:90:17:43:79:aa:f7:db:
         a8:81:a6:f3:ed:b7:73:2c:36:c4:71:4a:74:ce:47:23:6f:65:
         97:5c:20:d4:4d:c1:78:76:1b:bc:63:ea:f0:84:e4:67:27:b6:
         c2:0f:4e:50:82:3b:2f:7a:e8:14:b8:cc:0c:c0:8c:d3:e3:4a:
         16:b9:82:0b:a6:f3:2a:39:3a:d1:90:81:f6:eb:93:cd:5c:0e:
         10:49:65:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:08:22 2025 by rpki-client