Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/ebef459f-54c1-3ed9-aabd-ce541811dc35.roa
File:                     ebef459f-54c1-3ed9-aabd-ce541811dc35.roa (raw, json)
Hash identifier:          NnJzAYwzcpbVEF0GTF8F0JJlP4J5uhSk5okPOwMx8v8=
Subject key identifier:   66:72:18:53:A6:10:06:C5:E8:15:7B:E8:F7:55:CC:28:0D:54:55:76
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584AEE269725135E75C1C28E3680
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/ebef459f-54c1-3ed9-aabd-ce541811dc35.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     376
IP address blocks:        207.162.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:97:25:13:5e:75:c1:c2:8e:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=7d82594f-91bd-40a4-a0fb-bb42af029665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:16:54:80:39:aa:31:fd:8e:2c:16:19:c3:78:
                    29:da:17:f8:8a:5e:50:b9:6f:d7:82:a2:7b:95:bd:
                    01:fd:9c:f5:a9:db:c3:b3:95:d0:40:9d:cf:e7:7b:
                    36:a7:2a:5a:d4:bf:0d:52:05:7f:49:a5:3a:02:6e:
                    b0:ed:03:4d:3b:4d:9a:a8:0b:bd:33:00:5c:5b:85:
                    ec:da:e8:02:0e:7d:d5:65:41:c6:71:4b:3d:af:bc:
                    6f:e7:6c:82:5e:95:e0:61:b2:c6:64:c9:12:ff:25:
                    dc:84:b7:ba:0d:97:b6:a4:9c:08:45:c0:49:10:bc:
                    f3:23:4d:be:b0:9b:c2:be:b7:ff:59:4b:c8:f8:c9:
                    2b:03:6e:f0:c5:02:06:43:9f:3f:5e:80:c1:62:07:
                    ba:d5:c2:3b:09:03:b3:32:da:51:d2:ea:de:0c:ea:
                    fa:88:e8:48:b9:ed:96:4b:27:af:4e:ef:4f:21:02:
                    14:d6:8c:ec:12:f1:1e:a1:5f:90:46:f9:7f:ff:67:
                    ba:e1:4f:39:bb:82:e2:2f:b1:d0:58:cd:60:a7:7e:
                    d4:a9:8b:fa:9e:b0:41:d1:e3:33:e3:4a:2f:eb:4f:
                    79:d5:4e:da:e4:c8:23:87:ed:9e:e0:ef:15:b3:df:
                    87:f7:41:35:14:fd:d6:56:12:72:81:c2:2c:e6:1f:
                    77:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:72:18:53:A6:10:06:C5:E8:15:7B:E8:F7:55:CC:28:0D:54:55:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/ebef459f-54c1-3ed9-aabd-ce541811dc35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:61:db:28:c0:64:69:7c:be:d9:f4:94:0e:f9:c1:ac:f1:71:
         06:55:c7:12:7e:10:bf:33:56:aa:52:50:7b:46:4a:3c:58:bd:
         c6:bd:4c:15:3e:15:7b:2f:4b:7b:3f:db:38:65:de:a5:36:32:
         8f:bc:93:c0:f7:7c:a2:35:63:ee:09:6a:85:a4:8e:45:38:f8:
         a5:d6:77:f4:7d:39:1b:d4:c4:01:c7:0a:21:83:b3:b1:df:ed:
         f6:32:be:d9:5f:59:75:0b:b3:91:8c:8b:e3:02:06:33:dc:62:
         75:02:86:e1:9f:ef:dd:37:46:ef:7c:09:2d:14:50:9b:a8:6b:
         ad:91:cc:31:89:51:50:62:13:b4:eb:ea:89:06:3c:ec:79:8d:
         d6:76:6a:50:ec:1f:b3:49:1e:0b:01:1b:17:f1:9b:0f:36:65:
         d3:47:fe:94:76:b0:ef:ea:e8:62:38:7a:cd:23:86:0e:43:50:
         9c:6b:b2:92:99:7d:81:e9:2e:b7:bf:68:52:a9:02:94:dc:de:
         8d:80:af:9c:67:62:72:46:e9:83:2e:36:24:ba:a3:19:5d:90:
         49:91:96:2f:63:6b:0a:7d:20:1f:c1:61:f9:eb:61:55:a8:10:
         62:fb:eb:2b:03:70:f4:f3:4c:d3:35:a5:68:23:eb:8a:02:d6:
         3f:d4:61:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:56:47 2025 by rpki-client