Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/86f52288-e2ff-362f-b9f8-e011462874e0.roa
File:                     86f52288-e2ff-362f-b9f8-e011462874e0.roa (raw, json)
Hash identifier:          6ssU5AGnU+5U3WiCW/O/TOMNIf4GGr41NeKiwoh1Oqw=
Subject key identifier:   60:94:99:90:48:FC:A8:82:B6:F4:80:07:4A:67:EC:50:02:E2:C4:91
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584B5B0761FB9E826B6973C02900
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/86f52288-e2ff-362f-b9f8-e011462874e0.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     376
IP address blocks:        192.77.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:61:fb:9e:82:6b:69:73:c0:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=ed3edf75-0643-45ad-bf2b-90dd5a399eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b9:6d:de:b0:fb:c9:f3:32:54:78:88:35:9e:
                    57:73:91:66:54:30:0f:60:a3:c3:bb:ea:fc:d5:20:
                    ff:b8:85:21:ad:08:4b:fc:88:46:94:a6:51:1d:52:
                    a3:10:62:c0:25:bf:c0:55:82:c8:ec:e9:d2:53:e2:
                    03:10:64:fc:72:75:92:de:fb:08:ca:41:a9:2c:54:
                    f6:ea:64:d2:59:33:16:4d:04:d0:c3:d6:f7:bc:20:
                    58:63:3b:45:08:20:3a:43:9f:9b:c9:51:15:87:02:
                    21:d8:37:b1:a1:9a:c4:f9:a6:10:63:59:a3:27:a4:
                    e7:90:74:98:d9:8f:6a:50:d3:a2:77:a7:22:1c:2f:
                    30:af:8c:e0:f9:92:ed:9b:20:81:dc:3d:26:66:58:
                    17:eb:4d:7d:a5:d5:43:b8:3f:fa:5d:5a:af:61:e9:
                    36:3d:d8:fd:bc:5c:0b:e9:34:d3:36:fc:70:c9:69:
                    18:21:20:02:ab:f7:1d:46:e6:c6:72:c0:5d:de:d2:
                    e4:51:03:3d:0e:4b:05:c3:bd:bb:b5:58:87:73:ea:
                    11:26:b1:55:81:4f:93:d7:b8:10:0b:24:06:00:fb:
                    26:b8:91:6e:2c:19:2b:c2:ed:f5:51:8b:f8:e4:b7:
                    e1:b0:02:8e:ed:3f:e4:4f:81:4b:2c:e6:6c:79:40:
                    79:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:94:99:90:48:FC:A8:82:B6:F4:80:07:4A:67:EC:50:02:E2:C4:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/86f52288-e2ff-362f-b9f8-e011462874e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.77.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:03:5d:da:96:36:a9:1d:f7:45:fa:24:f6:da:4d:9e:20:85:
         96:d0:f8:6b:14:c7:70:4a:fb:16:44:57:2f:30:4f:03:38:88:
         69:b0:24:e0:af:ff:c9:d0:85:27:61:1d:ed:25:f2:22:26:61:
         1a:23:36:89:0c:e4:cb:29:1f:eb:f9:eb:3a:9e:4e:66:a1:e5:
         f5:72:bf:62:82:90:9b:f1:c6:1a:d0:5f:0d:a2:5d:9e:e9:c2:
         73:27:36:2e:0a:7b:26:03:12:72:f4:f7:e2:bc:7b:c7:4c:48:
         a4:1f:ce:3a:33:bc:e8:2a:5e:90:15:ce:50:f3:b7:dc:32:4e:
         6f:19:56:be:7b:85:54:8a:02:b9:01:e2:ca:ee:d1:72:8a:f0:
         62:ef:88:96:e5:22:f9:1c:63:44:7f:fb:e2:13:e2:e9:f4:77:
         54:d0:ee:8e:23:de:38:b1:15:ae:29:65:e8:a2:82:f4:63:88:
         db:89:64:03:2b:b8:99:16:d6:22:a5:b9:10:df:40:9a:75:80:
         c8:55:71:75:8b:d5:5b:ff:0b:39:f3:79:fa:eb:dd:9f:30:ed:
         9e:66:79:59:6b:d2:84:34:0b:8a:f9:00:de:b0:7f:d5:cf:3e:
         1a:38:b9:96:df:90:e9:7a:fa:12:34:e0:8f:bb:8c:1d:0a:0f:
         82:aa:9d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:54:46 2025 by rpki-client