Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/bb3db11c-6dc9-3dc1-aad9-70cd5241e1a9.roa
File:                     bb3db11c-6dc9-3dc1-aad9-70cd5241e1a9.roa (raw, json)
Hash identifier:          0ZK/BksKQIjr8vWJtJ/dydvrSEAtr8HYfqQRJGoml2M=
Subject key identifier:   26:35:02:7D:83:B3:47:8E:81:C8:19:21:E1:8F:25:40:81:A0:B7:EF
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584B76F25EAE4EE10705AB60A280
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/bb3db11c-6dc9-3dc1-aad9-70cd5241e1a9.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     376
IP address blocks:        206.167.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:5e:ae:4e:e1:07:05:ab:60:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=908c0d28-733b-4a6c-8a4a-0e2c02d34e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9a:1f:b7:4d:96:ac:51:56:d5:73:a9:f1:f1:
                    29:7d:e8:c3:a8:00:fb:f4:d0:8e:f0:db:f0:3e:fb:
                    a7:69:b2:6f:5d:7f:6f:7a:96:eb:c0:3e:8a:f3:61:
                    c8:cc:a2:3d:05:af:ea:eb:f9:67:7d:b0:59:66:17:
                    9e:41:a7:52:99:7d:86:c3:88:c8:eb:10:9b:10:cd:
                    14:97:7e:66:8e:de:d4:0a:07:09:e5:a3:a3:d5:c5:
                    c8:34:ae:09:ee:98:17:99:60:24:0f:2f:2c:9f:7b:
                    cb:3f:c2:56:17:b1:0d:6e:6a:f2:c5:18:9f:3f:dc:
                    ae:54:e0:e5:68:4f:a4:97:25:37:96:02:53:36:89:
                    ab:b7:5c:4f:84:41:78:e2:d1:2b:90:9b:85:8f:4d:
                    37:29:f4:fd:ba:f7:b7:21:d6:58:c7:f4:1f:78:f8:
                    5c:86:3a:59:01:2c:dc:6d:53:b6:9d:03:1d:27:d5:
                    58:86:f7:36:32:31:f7:1e:84:c4:ce:ae:c0:d0:e5:
                    f3:9f:d3:c2:ab:d1:77:f2:96:bb:a2:4f:dc:8a:2b:
                    30:97:8a:08:d3:59:ec:5f:3e:0f:fe:68:bb:b0:01:
                    33:1e:1e:ba:4f:6e:a6:86:bc:a0:7c:72:c3:de:ba:
                    24:6e:f1:b3:2c:87:47:9b:ec:3d:4e:ca:c9:48:e3:
                    d7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:35:02:7D:83:B3:47:8E:81:C8:19:21:E1:8F:25:40:81:A0:B7:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/bb3db11c-6dc9-3dc1-aad9-70cd5241e1a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:86:d2:a7:6b:c2:dd:c8:bf:fd:1d:05:c9:af:3d:32:91:c2:
         bf:57:ce:e7:33:6c:fa:c5:28:92:60:b9:14:76:55:f0:8f:50:
         fe:0d:1a:eb:af:76:36:d1:22:d7:c5:23:94:3d:9f:2b:01:1f:
         66:02:d1:18:2c:0f:6f:9c:d3:a2:4d:c9:0b:a4:f7:ce:9c:72:
         c5:44:0d:d3:15:74:24:bb:16:68:ac:11:c0:f3:6b:34:37:7d:
         ae:9a:d4:37:06:30:5d:f0:eb:39:0c:48:b8:dc:0a:2d:e3:1a:
         87:d9:a2:0e:a1:4a:85:1f:bd:dc:b4:d3:99:5e:8c:bd:b3:ba:
         a0:7f:d7:0e:21:24:bc:25:34:cc:75:c2:fa:65:25:7d:7e:5a:
         93:fc:6a:3d:c3:86:9d:42:66:04:7d:f9:54:23:6d:37:48:4c:
         54:53:ba:0b:0f:d1:2d:84:6f:00:90:b0:5f:96:76:1b:34:97:
         5b:1a:23:24:30:07:6c:04:59:78:f9:6f:df:00:fd:65:c6:40:
         4c:85:56:ad:db:7e:79:ae:c0:b5:6d:f5:53:16:6f:7e:e4:ed:
         f8:77:6d:5b:a7:13:ff:54:67:c8:ba:b0:ac:52:9f:93:22:8c:
         47:86:2e:ce:f7:b2:df:e2:be:cc:ce:8c:70:af:81:6d:78:7c:
         ce:31:3c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:14:52 2025 by rpki-client