Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/29fdf730-ae52-3a60-8d34-6d8e4640aaaf.roa
File:                     29fdf730-ae52-3a60-8d34-6d8e4640aaaf.roa (raw, json)
Hash identifier:          hG9fn0A6nEMnpn4e0pLGiQ9GE4zhUemV2jdiz8dN4Wk=
Subject key identifier:   37:57:F7:9C:1D:68:D9:9B:3E:53:F8:1E:3D:99:A1:A9:11:3F:1B:7F
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584B583CA679F15252AE0BACF580
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/29fdf730-ae52-3a60-8d34-6d8e4640aaaf.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     376
IP address blocks:        206.167.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:a6:79:f1:52:52:ae:0b:ac:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=4002ba16-f1e9-4ad8-80ef-e8d375554202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2f:61:0c:4d:4d:97:58:b0:6c:26:6f:28:68:
                    6a:19:42:d6:ec:cf:a5:9d:0b:7c:10:46:d3:39:01:
                    ce:7f:28:45:fe:5e:83:30:09:d2:67:70:cf:83:80:
                    4b:5e:7a:c5:86:4d:c2:83:c4:25:7b:c9:af:9c:45:
                    3e:6c:31:8e:46:2b:41:20:87:18:48:76:71:cd:8e:
                    b3:29:12:70:c2:a5:87:cf:c1:ae:f7:de:55:fe:e8:
                    cd:ea:1b:e3:e2:07:b6:93:a4:d5:7d:67:fc:eb:ac:
                    44:f1:74:4e:48:01:12:1c:f0:82:b8:93:30:6b:5d:
                    1e:66:28:ff:2b:ec:8c:f5:85:94:bb:9f:82:79:90:
                    79:8b:b6:96:a3:5d:86:4d:5a:ee:61:26:f0:f7:9a:
                    b7:c6:6a:de:f8:b8:61:3d:19:65:13:3f:11:3b:cc:
                    ab:51:cb:d0:0c:62:b4:43:7a:88:7e:9f:3e:f9:9b:
                    34:60:28:d6:f2:53:fb:51:1c:48:35:78:3b:61:de:
                    93:ba:69:9d:8e:4f:f2:34:8a:df:0b:20:df:79:5b:
                    42:91:dd:47:32:e0:01:a0:b2:d3:07:61:0c:f5:d8:
                    1d:3d:aa:66:aa:94:66:53:5c:30:e7:4b:bd:f5:26:
                    e3:fa:e0:f9:3b:b0:03:83:a5:ae:f9:62:ab:4a:5a:
                    db:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:57:F7:9C:1D:68:D9:9B:3E:53:F8:1E:3D:99:A1:A9:11:3F:1B:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/29fdf730-ae52-3a60-8d34-6d8e4640aaaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:fb:dc:7e:9a:0b:21:a9:f3:b6:0b:01:85:54:e9:17:41:6a:
         46:e0:94:83:f9:9f:58:f0:e3:28:f0:78:d2:f0:d1:6e:fe:b8:
         29:4e:6b:f1:e5:6d:92:51:ff:79:e4:d4:e6:3a:52:11:0a:b3:
         78:05:d1:96:23:d0:6d:70:75:15:96:1e:70:f8:25:a9:c0:07:
         b3:74:63:a0:02:02:98:d4:2e:1b:f4:55:6b:07:c2:56:4f:d8:
         6a:9d:56:26:32:e3:de:78:5e:4a:4c:cd:bc:dc:a9:47:2f:ba:
         5c:aa:5d:93:68:a8:a7:7a:b6:b2:0b:f3:e3:d8:e4:13:69:f8:
         ad:55:a4:d5:55:8c:2d:45:1f:b8:ec:24:75:4a:66:d4:ad:11:
         d4:db:0d:e9:d6:8b:06:db:c8:7c:70:59:5d:87:1a:ac:30:8f:
         e6:cd:78:2f:60:89:00:71:38:4f:e1:5c:01:b1:0a:de:9b:a4:
         51:05:74:be:86:b7:c6:5c:87:89:3c:f2:7d:67:b2:45:89:85:
         4c:43:62:46:2e:fe:47:87:49:ba:b5:33:98:11:a0:ff:30:fc:
         a2:69:e7:0a:32:a0:27:47:11:fa:5e:9c:06:08:e2:bc:b0:2c:
         ca:43:39:4a:de:cf:0a:25:db:31:91:57:23:c6:70:f9:9c:17:
         bb:ed:e1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:53:54 2025 by rpki-client