Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/968ac5c2-fbdf-3e1c-a5dd-895bf29c2537.roa
File:                     968ac5c2-fbdf-3e1c-a5dd-895bf29c2537.roa (raw, json)
Hash identifier:          0KulDYEUMH0FR+OIs5QBra4RNOytNNcShhAnRpvkblM=
Subject key identifier:   CE:E4:C3:F1:42:AE:F4:70:EB:26:3E:D2:4D:8C:D7:6E:17:93:F5:14
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584B583CA75091864571DAB9D7F0
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/968ac5c2-fbdf-3e1c-a5dd-895bf29c2537.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     376
IP address blocks:        206.167.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:a7:50:91:86:45:71:da:b9:d7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=c89d698c-49f3-452e-90e4-4ee1b8287134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b5:cb:3c:df:8e:6d:3e:8d:06:2a:bb:ad:4b:
                    78:68:90:4e:3c:11:69:23:0d:df:a0:07:66:27:84:
                    82:c2:14:a6:07:da:4a:89:3e:8a:de:21:14:9e:c4:
                    10:c4:3d:ed:de:d4:35:fd:18:f9:7d:07:b3:02:7e:
                    12:5b:ed:bb:4e:6a:c6:79:66:3d:26:17:ba:a9:bb:
                    bb:7a:2e:3f:d0:f7:89:fe:b5:97:da:0d:b4:80:0d:
                    81:c1:7d:12:9a:06:a7:45:f1:2b:63:f1:70:bf:3c:
                    71:5a:0f:be:b2:12:e9:9f:bf:00:d6:4a:6b:37:af:
                    da:34:42:e8:d2:ed:94:de:0b:0d:89:b5:ba:c3:5c:
                    ce:1a:5c:e4:ca:a0:c5:ac:49:81:99:b8:11:79:6f:
                    ad:b4:fb:a9:33:5b:9f:ad:f4:1e:b2:5d:69:5b:65:
                    b4:41:f2:a6:ef:0e:52:d5:07:11:5b:bc:84:b4:6f:
                    a6:6d:3b:6e:84:a8:e1:da:3f:27:30:dd:65:92:98:
                    65:ae:59:11:1d:1d:b2:06:f4:82:7e:80:92:5c:59:
                    42:4c:1e:5d:02:a0:95:08:d4:45:ab:e4:cd:df:c0:
                    03:a2:88:88:22:79:21:5c:4e:72:6e:b5:ef:ba:98:
                    79:69:74:14:02:2c:7a:0a:69:1e:11:1e:8c:db:33:
                    70:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E4:C3:F1:42:AE:F4:70:EB:26:3E:D2:4D:8C:D7:6E:17:93:F5:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/968ac5c2-fbdf-3e1c-a5dd-895bf29c2537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:fd:27:25:b4:ae:02:7a:2a:8d:83:f3:25:14:3c:76:de:0f:
         72:0c:03:f0:80:84:68:09:c4:48:6c:18:3d:20:6b:38:11:af:
         24:30:1e:98:cb:02:9a:7b:59:43:f6:63:f5:e5:2c:fb:5b:91:
         9c:9a:cc:65:b7:ed:b9:d8:61:2e:47:52:2d:ef:c4:5e:b2:3a:
         47:29:68:dd:eb:70:3f:6f:5e:e0:eb:de:15:c9:4b:3e:07:93:
         cb:3b:2f:cb:5d:24:52:2b:9d:6c:be:5e:ca:6f:a1:51:0c:dc:
         cf:a7:44:b9:59:13:5f:30:73:1d:4d:50:ce:5b:03:f6:5a:9c:
         26:a7:8d:d5:89:91:cb:2d:01:88:8d:2b:f5:bc:64:77:a2:70:
         1e:ed:a1:46:b4:26:a2:5a:3c:5c:00:0e:26:0b:26:4e:a9:70:
         79:6c:04:5a:10:60:a0:36:a3:50:8f:52:85:be:9a:ad:79:11:
         62:80:d1:a6:1d:e5:79:92:14:bc:54:e7:75:c3:f4:d0:d9:7b:
         09:6e:18:25:c7:27:4d:6e:be:6d:80:e4:48:56:62:e6:92:b7:
         1f:23:20:d6:76:9f:77:f3:b9:17:a2:c4:27:03:f5:8a:6d:26:
         48:f1:1e:66:9c:0c:1b:b0:8d:c8:3e:96:25:37:c2:e1:10:91:
         c4:24:39:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:00:47 2025 by rpki-client