Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/2b900845-48bd-3310-b9f7-31d947c5b00e.roa
File:                     2b900845-48bd-3310-b9f7-31d947c5b00e.roa (raw, json)
Hash identifier:          uYB+UvyFvfYVZm7jiyZTZ0jWTf/v67N2V2MFZBnC584=
Subject key identifier:   BE:B1:29:25:68:0E:CC:0F:1F:07:BD:BE:B8:F7:10:A8:EC:E8:57:BE
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584B44B1BE900E6D72A1DAC69BB0
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/2b900845-48bd-3310-b9f7-31d947c5b00e.roa
Signing time:             Sun 21 Sep 2025 13:00:42 +0000
ROA not before:           Sun 21 Sep 2025 13:00:42 +0000
ROA not after:            Sat 20 Dec 2025 14:00:42 +0000
asID:                     376
IP address blocks:        206.167.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:44:b1:be:90:0e:6d:72:a1:da:c6:9b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Sep 21 13:00:42 2025 GMT
            Not After : Dec 20 14:00:42 2025 GMT
        Subject: CN=736b38d4-ff06-4bd9-ad9a-11f705a8d9b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d8:b5:c1:b1:e5:7e:35:20:82:7b:c7:7d:eb:
                    0a:ff:6e:64:72:a0:bd:02:38:d9:97:bf:14:35:b4:
                    44:5c:1b:e7:61:d5:5a:f4:75:c4:4c:6b:fa:8b:cd:
                    16:6f:ad:53:ee:68:ac:c7:69:73:08:f9:41:1e:15:
                    79:fb:9b:62:a4:d7:96:8a:94:f3:f1:5a:3a:19:49:
                    b7:c3:47:b9:c8:d8:e3:24:fb:9b:2e:24:f8:30:d0:
                    10:64:2f:d5:02:55:8e:16:d0:35:5d:84:0c:fe:fd:
                    d3:4a:3e:5d:71:45:e6:4a:a6:e9:49:8d:1b:8d:f6:
                    78:be:db:02:90:68:1f:fd:70:c3:83:d1:d0:57:2b:
                    9d:1d:1c:78:1b:9a:99:d0:88:8e:d3:32:c9:f3:1b:
                    0d:2d:9b:96:d9:60:52:2e:e7:f6:c0:73:b0:38:46:
                    7e:a7:f9:0b:b9:c8:d1:77:cd:b7:04:c0:d0:41:33:
                    bf:b7:16:22:0e:19:a6:8d:b9:77:64:19:7f:76:bb:
                    38:cd:90:99:77:a6:c0:de:7d:df:b0:90:6f:93:30:
                    03:54:b3:16:15:e3:d8:b2:36:27:fe:c8:1a:0e:30:
                    c2:8d:03:cb:da:45:e3:49:92:60:ba:51:01:36:cc:
                    a5:a9:ed:d9:af:4c:3b:e7:cb:d0:c3:6a:61:d6:40:
                    82:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B1:29:25:68:0E:CC:0F:1F:07:BD:BE:B8:F7:10:A8:EC:E8:57:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/2b900845-48bd-3310-b9f7-31d947c5b00e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:f7:6c:93:4d:70:e9:d5:f8:69:bf:ec:59:8f:e8:06:53:89:
         10:34:7c:0e:f4:fa:2c:fa:11:d3:c7:e5:55:16:4b:ed:0a:ae:
         e3:0c:27:80:6f:d7:cb:65:71:a3:a1:60:41:70:8e:5c:47:48:
         b5:22:bf:eb:85:44:27:a0:f6:e9:5c:6b:c9:dc:f3:22:9d:e8:
         a6:8d:99:8d:29:bc:9b:1e:61:77:c1:d2:2f:3c:d1:d0:65:a2:
         58:94:b9:86:4d:c2:bc:46:81:74:d8:8f:03:07:17:fc:cc:60:
         be:60:7f:57:a8:ba:92:b2:dd:3f:2c:7b:93:ce:5c:e3:73:80:
         f6:f1:5d:74:cf:6e:bf:48:cb:b8:d0:8e:e6:19:f7:47:17:39:
         b7:48:0b:ec:dd:46:3d:bd:fa:83:77:61:ea:76:5f:af:72:c3:
         dd:7e:80:3f:94:99:c9:25:05:91:24:28:a6:ca:fd:aa:3a:0c:
         c2:ce:60:f7:7d:08:88:d9:ab:59:c4:cb:e5:21:3a:f6:af:52:
         1f:85:0d:5b:53:f6:fe:c1:71:eb:31:94:e0:d0:3f:dc:10:da:
         37:ad:c6:9e:18:d5:e2:8b:e5:23:3e:01:4f:fa:6d:6e:79:f1:
         a6:b3:fe:13:7c:fb:22:52:21:f6:53:d7:0e:25:f6:b6:e6:98:
         f6:68:2f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:54:54 2025 by rpki-client