Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/df486b45-27a1-3963-96c9-dedf4273b1fc.roa
File:                     df486b45-27a1-3963-96c9-dedf4273b1fc.roa (raw, json)
Hash identifier:          Ts4ocoi+caIrbeJmQL2eZecRawVb5Ty3LN/I3lPaTeI=
Subject key identifier:   19:B4:83:71:BD:4E:9C:EB:BD:5B:76:B6:62:05:DF:AC:08:3B:AC:45
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584B583C9AB08F37E3C0D609B510
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/df486b45-27a1-3963-96c9-dedf4273b1fc.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     376
IP address blocks:        206.167.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:9a:b0:8f:37:e3:c0:d6:09:b5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=c344bced-73f3-44d5-9034-8a96de643cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0f:e8:8f:58:30:f9:78:9e:2a:49:f6:04:bd:
                    fb:ea:3d:dd:9f:29:33:fe:0a:92:05:8c:df:ab:cd:
                    d8:0f:b0:5b:de:db:13:ce:88:b0:6e:97:ab:3a:80:
                    fd:a4:04:04:c0:0d:5a:1d:54:9d:73:b6:5e:c0:52:
                    32:3d:ac:07:3d:68:86:99:6c:e3:f5:fb:ac:09:fe:
                    70:f4:38:51:a8:89:21:48:38:13:5a:a2:34:c2:63:
                    7d:ee:d9:55:83:75:f7:b3:c5:07:81:aa:7a:6f:ac:
                    cc:52:33:13:50:5d:2f:c8:88:7f:82:7c:bd:00:8e:
                    f2:cb:86:63:12:9a:b0:f0:08:a8:76:e4:da:78:c0:
                    d6:1c:4a:46:a7:c7:1a:6f:93:e7:64:81:48:b2:56:
                    dc:bd:78:62:97:2e:17:17:04:e0:97:cd:a4:4d:6a:
                    9d:b4:a0:68:0c:b4:13:b9:e9:e1:fd:e0:6e:10:5b:
                    53:3c:a7:39:49:1f:4d:3e:d5:96:3b:e9:37:9f:39:
                    5d:4a:41:07:05:5d:71:76:32:b3:b0:9b:86:1e:ae:
                    fe:28:9b:89:2f:60:3b:2b:75:51:f7:2b:1b:80:20:
                    9e:f6:b9:7b:a4:5b:24:16:06:dc:8b:a4:6c:31:9e:
                    5e:d8:e0:df:7c:c4:93:d8:31:8b:8c:fc:3b:1c:10:
                    e8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B4:83:71:BD:4E:9C:EB:BD:5B:76:B6:62:05:DF:AC:08:3B:AC:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/df486b45-27a1-3963-96c9-dedf4273b1fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:3d:cd:9c:a8:00:7a:b2:1b:5d:85:21:4f:eb:3e:c2:d5:9f:
         80:01:02:97:24:1e:58:4a:dd:ab:02:ef:88:e3:b6:0e:c1:d8:
         b0:91:75:9b:77:1d:3c:38:e9:97:89:d1:9d:10:c6:2b:13:d6:
         00:71:31:82:29:88:c7:34:1d:02:c5:d0:fd:02:a2:46:6e:63:
         3c:da:f6:d9:dd:81:da:09:fa:14:b4:77:39:37:f5:47:26:62:
         06:b1:7b:b5:1c:2a:e6:c3:c3:38:0b:e2:e8:7b:f6:04:4c:b2:
         1e:42:f3:f4:4e:b5:66:68:5b:17:91:14:bb:7a:33:9a:4e:73:
         14:6c:f1:df:a0:3b:16:b1:a7:ce:27:c4:97:c0:18:81:a0:9f:
         ca:ca:c4:94:a7:76:b1:50:ea:ea:92:8b:80:29:dd:fb:3f:e2:
         d7:82:ba:1b:b8:a3:94:b8:4f:b7:e6:cb:63:89:26:77:df:70:
         aa:4c:0c:46:98:92:5c:b9:40:6d:e2:31:0e:9c:14:48:4f:1a:
         ba:21:68:b6:38:16:41:db:87:fa:0b:3a:01:e0:28:a9:06:1a:
         0c:60:a3:4a:ec:e8:2b:b3:35:ab:b4:95:ab:77:5f:c1:99:29:
         75:50:6c:04:68:e9:ff:f2:95:18:99:38:35:0c:95:46:2b:fe:
         7a:4c:b2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:54:06 2025 by rpki-client