Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/de3fdd00-d655-39db-8f4e-e0e97e9907a4.roa
File:                     de3fdd00-d655-39db-8f4e-e0e97e9907a4.roa (raw, json)
Hash identifier:          FiXBZZKN+Uya2tp8WkpWriQyVkQmyvPdydRVrbsdY+0=
Subject key identifier:   9B:22:01:F0:BB:E1:24:C0:C5:2F:F3:F1:E9:15:EF:E8:3B:E5:38:36
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584AEE268D36A07F27689A93CC80
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/de3fdd00-d655-39db-8f4e-e0e97e9907a4.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     376
IP address blocks:        207.162.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:8d:36:a0:7f:27:68:9a:93:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=1c1dbbe3-3a17-4ef8-a4a6-bf73be3b12bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:44:af:c6:fa:14:a9:91:bd:fd:29:2e:82:e0:
                    2b:b5:90:58:01:13:c1:6f:3f:d5:47:7f:b2:f1:1b:
                    8f:cb:53:a6:6c:45:6b:44:17:35:ec:3e:6a:a4:a3:
                    8f:49:8b:96:a7:14:1e:e6:8b:50:62:82:0c:86:7a:
                    31:ac:16:d1:dd:1e:3e:0d:7c:99:99:67:80:be:97:
                    8b:69:cd:2d:f2:29:60:c2:9a:20:5c:99:f1:ac:8d:
                    38:02:22:10:8b:59:51:97:4d:e1:fe:6b:aa:9e:70:
                    d6:04:59:87:12:b0:a4:51:49:eb:c5:4a:10:c0:44:
                    31:39:1a:80:7d:c9:b8:83:e4:8e:77:9e:d2:17:59:
                    2f:48:11:0f:f9:dc:ff:0f:12:b6:c1:61:74:75:59:
                    84:ef:c2:5c:4d:a1:98:ad:30:c5:62:e4:99:2e:b8:
                    7a:2d:30:17:f2:4b:bb:fd:e1:c2:07:95:b1:56:ea:
                    86:74:89:11:e0:a5:51:36:f0:a2:e0:f0:82:1e:92:
                    6a:7b:35:b9:9a:77:43:52:5f:c5:cc:55:6c:f8:82:
                    1a:ca:a4:75:1d:84:c9:6e:b3:2e:0a:b8:c1:da:f5:
                    0b:b6:2f:ce:e0:f6:d1:6d:a4:85:25:c0:b5:fb:60:
                    8d:12:60:d7:5e:52:cd:e1:5f:be:5a:3b:61:c4:3f:
                    8b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:22:01:F0:BB:E1:24:C0:C5:2F:F3:F1:E9:15:EF:E8:3B:E5:38:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/de3fdd00-d655-39db-8f4e-e0e97e9907a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:8e:5c:7c:43:78:91:c0:aa:13:b1:19:08:aa:cd:30:f9:64:
         ec:79:e8:89:a3:26:90:43:0a:6b:a1:df:f3:86:f2:a1:51:03:
         bf:b6:64:3a:32:fa:67:66:bc:73:2e:4f:40:95:0f:bd:b3:62:
         6e:f7:c8:cc:09:c5:70:be:e4:f2:05:7f:b4:12:f3:dd:ff:f7:
         d8:bf:5a:06:67:3b:5c:00:8d:c6:28:75:cd:4f:1d:e9:56:df:
         3e:f6:3b:92:1b:9c:fb:f5:9d:de:97:59:10:60:da:14:89:23:
         af:cd:62:77:6e:11:4c:55:dd:06:ec:d9:bd:94:65:4f:6c:52:
         b2:58:d9:1b:3a:c7:98:77:48:de:94:ad:fb:31:d8:00:21:1c:
         e2:0b:7a:35:9d:a7:87:25:9d:26:aa:05:f4:f2:27:74:6a:23:
         98:d6:ab:69:f7:3b:35:35:e7:43:da:5e:1a:97:d2:d2:8b:56:
         48:7b:8e:be:e6:87:3d:e1:67:de:07:45:33:25:d7:ac:ef:a2:
         e7:f1:61:65:8a:05:e6:bf:8d:3e:27:c4:2f:2d:5b:4d:88:0e:
         d2:63:0a:15:b5:3e:49:89:3d:f5:fd:bd:3d:29:26:16:38:64:
         ce:a1:3f:cf:86:46:38:c0:67:0f:10:dd:9a:c7:36:cc:e8:01:
         ac:07:e1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:57:07 2025 by rpki-client