Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4835837e-b536-369b-934d-51e284434043.roa
File:                     4835837e-b536-369b-934d-51e284434043.roa (raw, json)
Hash identifier:          B02OaFUeRRQ3cHrIjYigcjD/tqLimBApSyvo64qI/24=
Subject key identifier:   05:E0:4D:D6:5E:93:91:96:9F:65:10:C5:7F:35:A6:21:FB:EB:BD:A2
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584B7F5215127CA5A9581A9B1FC0
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4835837e-b536-369b-934d-51e284434043.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     376
IP address blocks:        206.167.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:15:12:7c:a5:a9:58:1a:9b:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=bfa2ea99-6616-4730-a18b-86e25c2c6f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:33:02:e4:57:21:66:88:8d:68:19:70:d1:65:
                    eb:02:70:8a:f9:52:43:81:3b:14:7e:c3:81:c4:c7:
                    81:a8:68:da:a7:8c:e2:30:0c:95:fc:f1:13:06:b8:
                    cf:92:1f:70:a8:25:e4:d7:58:d5:67:8b:75:77:04:
                    53:7e:e4:c4:41:ed:40:6b:4b:4b:70:de:b9:45:eb:
                    03:f8:f4:2f:d1:83:c4:ca:d7:6e:da:52:61:ac:ca:
                    1f:38:1d:44:83:75:fe:e5:fa:a6:ca:8f:03:60:5a:
                    bf:53:85:13:f0:0b:d1:5d:41:09:92:ee:d2:27:bc:
                    07:d4:50:66:89:06:2e:ef:b9:b0:c8:ce:25:dc:45:
                    cd:94:93:6f:d3:1f:d4:69:eb:33:81:14:92:cc:7f:
                    38:e9:7b:7d:86:f9:c9:27:7d:c6:ba:0a:3b:65:f4:
                    88:3f:ef:37:02:fb:22:e1:06:10:6a:2a:18:56:98:
                    42:cc:9e:c2:a6:d2:a4:75:2a:bc:d3:10:7a:df:bb:
                    b1:cf:00:8b:ac:b3:35:5e:24:7e:ba:a7:51:04:4d:
                    43:3d:59:32:03:64:4f:8f:61:af:5e:bb:8a:7d:32:
                    f2:14:a8:7c:b1:0f:93:7f:6c:25:97:54:ac:91:4a:
                    7f:70:46:bf:b9:f3:01:72:41:95:97:ca:7e:5b:43:
                    d6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E0:4D:D6:5E:93:91:96:9F:65:10:C5:7F:35:A6:21:FB:EB:BD:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4835837e-b536-369b-934d-51e284434043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:3b:d9:dd:7e:69:f3:c1:88:84:fa:d6:a6:7e:f0:e7:7b:4d:
         ac:95:fc:09:53:2f:28:6c:67:60:b5:72:bf:27:b0:7f:c8:59:
         53:c9:b7:ba:a1:e0:4b:a6:49:24:b6:dc:b0:32:c0:e4:e2:ab:
         52:a1:fc:16:2a:6a:80:dc:7b:8c:99:ba:f7:88:97:e6:84:73:
         00:04:f5:71:a1:34:c4:1d:87:4e:77:b1:13:cc:2c:e8:88:dd:
         ff:b7:63:c8:a4:4a:43:cc:e3:65:ff:dc:90:52:e8:83:b5:70:
         59:08:a6:25:15:5f:d4:96:b0:ec:9d:3d:9a:66:fc:c2:dc:af:
         1b:04:84:9d:58:67:d0:2e:2c:4e:c9:00:55:25:10:51:2a:bd:
         f8:e2:8a:06:78:09:62:f6:cb:b8:82:c0:82:57:8d:3b:45:f5:
         6f:33:51:42:2c:2a:44:cf:13:56:8e:bf:58:39:6b:9c:29:30:
         9c:ee:4e:b2:25:87:61:c1:77:27:d8:65:5b:57:fc:d2:3a:b3:
         66:0f:48:be:d6:b3:04:a1:9b:70:08:ee:06:66:3f:8c:44:cf:
         67:43:cd:48:c1:41:7d:0b:03:20:78:41:5c:ed:ec:30:45:5b:
         cd:a8:48:f4:36:52:6f:5e:29:0d:8c:cd:ec:2d:d1:27:50:8d:
         8f:01:5b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:13:04 2025 by rpki-client