Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7d529866-f0df-3e1d-90b5-07acca65da96.roa
File:                     7d529866-f0df-3e1d-90b5-07acca65da96.roa (raw, json)
Hash identifier:          a9lSLRzsinTQiCWdxx/MQjD2QT87ZbWE90tBHwIPExI=
Subject key identifier:   F2:53:95:83:AD:CF:18:8A:48:83:2E:07:55:8F:40:43:66:36:44:70
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584B583C9AEA122331FDD9594B80
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7d529866-f0df-3e1d-90b5-07acca65da96.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     376
IP address blocks:        206.167.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:9a:ea:12:23:31:fd:d9:59:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=b80ba150-c514-4374-91b2-b9711ff238f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a8:59:39:57:b8:8e:a5:a0:16:40:5e:ae:84:
                    59:d5:30:ef:c8:f1:8c:6f:a3:74:b5:e6:a2:3c:f8:
                    8f:ee:cf:bd:76:4a:11:85:f5:c8:9f:e6:2a:0e:39:
                    ea:db:b9:b6:99:3b:75:36:68:73:c3:af:6a:c3:b9:
                    5d:02:a9:45:41:bb:7a:d8:2a:86:56:3d:c7:a8:a7:
                    1b:b2:83:21:b6:87:b7:09:f7:34:67:b4:4c:a9:97:
                    33:26:cf:4f:1a:fd:08:81:1f:25:19:d3:5d:36:9d:
                    38:ea:4c:07:8a:61:88:a8:fd:c8:68:68:ae:81:a2:
                    a3:40:eb:8f:ae:24:39:72:cb:65:99:3a:34:82:f6:
                    8b:e1:9d:e2:30:69:f9:8b:de:cb:19:b5:2d:48:c9:
                    64:f6:b6:14:a5:cb:f2:eb:a8:b4:87:57:46:c3:9b:
                    d1:77:a8:ec:7a:3c:b4:68:d6:88:75:f4:b0:f9:66:
                    c6:d0:ad:04:d0:e8:e8:18:2e:ab:fe:8c:69:16:91:
                    23:3a:73:d4:a8:6d:fb:53:2c:a3:0e:cd:d3:11:0a:
                    4b:42:64:d8:a3:b3:65:44:84:fd:8a:ff:f3:25:ee:
                    21:75:56:6f:37:5e:23:9d:5d:00:89:cd:55:60:a1:
                    5f:78:5c:1e:2f:eb:b1:61:81:9d:ac:5b:f5:aa:58:
                    cf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:53:95:83:AD:CF:18:8A:48:83:2E:07:55:8F:40:43:66:36:44:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7d529866-f0df-3e1d-90b5-07acca65da96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:50:e9:76:d2:70:c4:14:f1:99:be:e3:2a:50:2d:92:a8:9a:
         4a:12:5b:26:d8:a0:a2:ec:2b:38:7d:5f:9e:ec:8e:61:2e:4c:
         3b:25:0c:74:0b:59:2d:39:6b:80:fe:72:65:70:c3:b4:8f:93:
         53:f8:cd:85:b7:7b:4e:ac:f3:b5:ac:ea:66:c8:ea:0d:c5:a3:
         19:18:26:5a:cd:01:fd:f6:30:8a:10:65:78:b3:f1:0f:d5:14:
         d3:ff:8d:a2:92:93:8b:74:89:a1:31:b4:e5:78:14:34:fb:0c:
         71:97:ed:e0:5d:9f:6a:34:32:20:32:88:61:d5:c8:a9:77:79:
         15:11:59:07:91:de:14:bf:c2:ff:41:38:2f:2a:04:cb:c1:d1:
         c1:fa:2c:ff:89:c4:a8:d5:55:31:f6:4f:06:6d:70:2b:66:78:
         84:54:bf:70:a8:97:17:6e:4a:f0:33:1b:1d:4f:99:21:b0:3f:
         fc:dc:4f:8f:03:5a:a9:11:49:a9:6b:0c:ae:d5:90:bc:b7:62:
         ef:c3:21:c6:12:13:81:60:c5:df:66:9e:ee:63:97:ae:10:c3:
         71:a2:f2:16:00:2b:bd:53:d1:eb:07:a4:6b:03:49:79:4c:e8:
         b1:05:0c:c4:be:a4:14:bc:b0:7b:e2:43:f4:8d:3e:d0:42:74:
         04:f3:e7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:55:15 2025 by rpki-client