Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7893e0d4-9358-36ee-8995-d40319972b35.roa
File:                     7893e0d4-9358-36ee-8995-d40319972b35.roa (raw, json)
Hash identifier:          S2GXGvk6uzc5CZZ3X26oygiq2xeitPM5U6MHVuZEmGI=
Subject key identifier:   B7:A4:B9:52:BC:B1:AB:6C:2D:9F:4D:78:8D:FC:A6:BE:40:C6:6E:B2
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584B583CA56A53B2A27D6A8C9A80
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7893e0d4-9358-36ee-8995-d40319972b35.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     376
IP address blocks:        206.167.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:a5:6a:53:b2:a2:7d:6a:8c:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=ef4fc9bd-6e78-43e9-b82b-c3f7aa73e492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:be:d0:c7:12:f1:e4:fd:36:a8:58:0d:76:1b:
                    67:b7:44:11:46:e5:ca:ae:23:ee:42:5c:a6:20:27:
                    71:72:39:6e:d5:0a:7a:3f:f4:f6:5b:f1:90:3d:f3:
                    1a:f8:9a:93:0f:94:46:92:8e:be:6d:5f:4f:1c:33:
                    b9:21:fa:14:c9:8f:b9:74:38:6a:8c:70:74:7a:06:
                    02:b2:e6:7d:7e:2d:c8:0d:96:5a:89:16:70:88:09:
                    24:9f:87:2d:d2:62:aa:c5:cf:6e:19:d0:70:9b:46:
                    a5:52:81:ae:a4:71:e6:77:ad:7b:28:d0:33:28:1a:
                    e3:67:22:dd:d7:83:62:73:3d:f3:15:6d:1e:b3:57:
                    a6:09:71:a5:83:e4:3a:39:fb:fa:48:e6:60:36:f8:
                    80:1b:d4:86:eb:83:8b:35:47:a4:29:3d:0b:8f:ac:
                    93:e6:ec:1b:b0:4c:d9:26:dc:ab:5f:49:1d:d6:a4:
                    8e:45:75:c7:d6:1a:06:4f:11:8d:75:23:67:fa:f3:
                    7a:a9:11:ad:17:9c:1e:28:49:51:b4:59:ba:db:5f:
                    e1:6f:4e:7a:e9:1d:08:87:35:f4:69:04:21:46:ed:
                    23:6b:31:ae:d4:20:01:4b:ea:36:51:7b:36:de:68:
                    e2:40:41:97:8e:cd:96:f8:01:94:35:27:89:f7:20:
                    ed:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A4:B9:52:BC:B1:AB:6C:2D:9F:4D:78:8D:FC:A6:BE:40:C6:6E:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7893e0d4-9358-36ee-8995-d40319972b35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:e7:ac:d8:9f:7e:c9:40:cd:df:e2:fe:ef:c3:27:7e:db:8c:
         f3:3b:9c:81:95:ac:d0:2b:6d:4c:02:24:2b:6d:e4:32:2f:fb:
         87:50:1d:68:67:93:18:94:bd:0c:bc:0c:c0:ea:fb:80:ce:52:
         2e:69:97:58:22:db:46:eb:52:42:fc:af:73:a4:3c:92:22:b9:
         70:55:49:67:7b:65:78:f7:72:5a:49:85:8e:26:6a:e4:a7:3f:
         21:23:f7:9d:41:3b:44:af:d6:1f:64:fd:59:d6:b4:bc:9e:53:
         4d:aa:6f:8f:ea:8d:3b:fd:ad:8a:46:00:ac:d1:1e:e2:bd:28:
         59:c1:6d:44:9c:61:6e:0c:d9:f2:b5:46:0f:9e:af:13:18:bb:
         c6:81:09:3d:b1:42:2f:89:70:2d:7a:6a:79:04:27:f8:d4:76:
         0a:e5:90:4b:c8:a9:12:78:ff:c7:fd:65:e6:30:b1:2a:12:db:
         a5:c7:21:ec:de:3f:6c:52:00:18:aa:67:30:a7:7b:5d:6f:98:
         bf:9a:1a:e4:27:77:ea:95:61:98:4f:b9:ba:8a:70:c4:96:4e:
         fe:7d:1c:5b:f2:db:4c:92:ab:34:bb:2b:b8:54:f7:5f:b6:92:
         50:e9:ae:c7:f4:de:61:56:76:b3:be:bc:34:10:64:41:7f:76:
         11:0d:f1:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPKVqU7KifWqMmoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy
ZDk4MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk
ZWY0ZmM5YmQtNmU3OC00M2U5LWI4MmItYzNmN2FhNzNlNDkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm77QxxLx5P02qFgNdhtnt0QRRuXKriPuQlym
ICdxcjlu1Qp6P/T2W/GQPfMa+JqTD5RGko6+bV9PHDO5IfoUyY+5dDhqjHB0egYC
suZ9fi3IDZZaiRZwiAkkn4ct0mKqxc9uGdBwm0alUoGupHHmd617KNAzKBrjZyLd
14Nicz3zFW0es1emCXGlg+Q6Ofv6SOZgNviAG9SG64OLNUekKT0Lj6yT5uwbsEzZ
JtyrX0kd1qSORXXH1hoGTxGNdSNn+vN6qRGtF5weKElRtFm621/hb0566R0IhzX0
aQQhRu0jazGu1CABS+o2UXs23mjiQEGXjs2W+AGUNSeJ9yDthwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLekuVK8satsLZ9NeI38pr5Axm6yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj
NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvNzg5M2UwZDQtOTM1OC0z
NmVlLTg5OTUtZDQwMzE5OTcyYjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1
NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2
MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0
NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqekMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAILnrNiffslAzd/i/u/DJ37bjPM7nIGVrNArbUwCJCtt5DIv+4dQHWhn
kxiUvQy8DMDq+4DOUi5pl1gi20brUkL8r3OkPJIiuXBVSWd7ZXj3clpJhY4mauSn
PyEj951BO0Sv1h9k/VnWtLyeU02qb4/qjTv9rYpGAKzRHuK9KFnBbUScYW4M2fK1
Rg+erxMYu8aBCT2xQi+JcC16ankEJ/jUdgrlkEvIqRJ4/8f9ZeYwsSoS26XHIeze
P2xSABiqZzCne11vmL+aGuQnd+qVYZhPubqKcMSWTv59HFvy20ySqzS7K7hU91+2
klDprsf03mFWdrO+vDQQZEF/dhEN8bk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:53:50 2025 by rpki-client