Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/eb887b7e-b4a0-35a2-a156-fcdc69dff37d.roa
File:                     eb887b7e-b4a0-35a2-a156-fcdc69dff37d.roa (raw, json)
Hash identifier:          EvUIgoankPgS1CMRUh7BZZftBLCQPZobG6Y/TvhMgsU=
Subject key identifier:   A4:83:11:D0:01:B5:7D:72:7C:1B:77:D6:5A:2F:64:E1:3A:03:A5:35
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584B583C9049418A3D3E8FEFAD80
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/eb887b7e-b4a0-35a2-a156-fcdc69dff37d.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     54606
IP address blocks:        206.167.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:90:49:41:8a:3d:3e:8f:ef:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=a39db561-b429-46a6-b530-39d3ea5becc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5f:f5:52:2e:88:81:b6:a8:68:e2:1f:29:04:
                    d2:e6:18:a3:b0:cd:0f:ad:d1:8c:8d:e0:d0:2b:cd:
                    1b:86:78:7d:4d:17:5d:bb:c9:28:60:d6:f0:80:29:
                    52:d7:60:09:20:6a:02:72:da:62:88:da:e3:8e:53:
                    03:a6:36:88:14:1e:82:06:61:a0:ac:2f:02:41:97:
                    46:4a:9d:bb:c0:30:71:13:3b:21:43:9f:25:fe:3d:
                    4c:80:84:85:69:9d:c9:b4:a6:cb:3f:f4:fa:8a:f1:
                    00:8a:77:81:a0:27:2e:12:75:9a:23:aa:4c:03:39:
                    52:13:7b:fe:15:8b:2f:ae:76:3d:db:ba:ad:45:04:
                    11:19:4e:5c:69:84:04:96:39:06:d9:46:ce:ab:32:
                    cc:4c:04:3a:cf:82:d7:32:3b:ac:1c:5d:91:ed:a4:
                    a5:2e:f7:73:c6:38:c7:66:35:aa:16:50:0b:b2:8e:
                    9a:f3:50:d3:d5:02:f7:62:3d:f5:fc:8e:38:5a:e8:
                    07:83:33:38:ac:4f:49:51:9a:6c:21:58:fe:83:80:
                    ae:d2:99:19:2e:8b:ad:89:61:e8:c5:ba:75:41:f0:
                    eb:b2:52:61:93:dc:b2:84:9e:1f:05:61:fc:01:67:
                    9d:0a:ee:2c:46:3b:43:4c:17:0b:f6:be:37:f4:75:
                    b3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:83:11:D0:01:B5:7D:72:7C:1B:77:D6:5A:2F:64:E1:3A:03:A5:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/eb887b7e-b4a0-35a2-a156-fcdc69dff37d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:c8:d8:0e:f3:c3:02:82:cc:fc:36:c0:cc:f2:fb:5e:51:9a:
         1a:8c:94:d8:bf:a4:85:9e:93:b8:64:27:88:3a:65:79:15:22:
         c4:bc:e4:3e:2c:60:fc:1a:73:b9:5f:f0:21:d7:d6:3c:9a:3d:
         2c:fe:a7:d8:9a:99:6e:97:de:a8:8e:36:91:34:2f:85:c0:d1:
         51:22:18:a8:1d:2a:79:7f:6f:94:9c:70:b2:6d:22:fb:11:7e:
         51:39:09:8d:7b:71:90:95:c5:6e:dd:4e:dc:39:08:2f:f8:e6:
         61:e3:1d:ea:5d:2c:90:d8:70:c5:d3:49:82:dc:8e:88:46:c1:
         4c:31:93:a1:e9:37:8c:fe:b2:28:f0:c3:5f:9f:1f:4e:a5:f5:
         f6:54:f6:4a:f0:d3:59:88:02:29:ab:62:14:96:22:53:7b:85:
         f2:d6:9e:9d:af:f5:76:8d:d8:0a:7e:5f:e6:c4:1c:74:be:ce:
         d5:29:33:23:03:4f:19:0b:65:82:67:68:24:69:e0:03:a7:65:
         63:19:81:58:1f:21:9f:76:4b:fa:c5:67:7d:21:7a:e9:75:35:
         1d:49:3b:25:fd:1e:70:eb:58:6c:0a:79:34:2e:80:43:e0:82:
         e8:6b:09:38:89:f5:1c:56:89:d2:6e:a5:b9:ed:86:d0:99:23:
         ca:c2:86:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:15:06 2025 by rpki-client