Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/5b192817-3f38-3d11-8b87-469189a21eda.roa
File:                     5b192817-3f38-3d11-8b87-469189a21eda.roa (raw, json)
Hash identifier:          QXyKnTFUPGNkJlu4SV2JhpMGaISkEcSQPnElBsuo7sE=
Subject key identifier:   F6:6B:3C:F6:4A:FA:19:73:4E:A2:97:79:3D:EF:0E:C6:F4:8C:0D:84
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584AF2567F09DCABF017624D7980
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/5b192817-3f38-3d11-8b87-469189a21eda.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     398371
IP address blocks:        198.160.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:7f:09:dc:ab:f0:17:62:4d:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=84ec7546-878b-4f9f-83bd-c20f7b53b2e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:60:5e:ff:7f:f5:6a:a5:4b:37:3f:65:2b:e1:
                    9e:35:d5:5c:80:90:0e:6b:cf:70:d7:8b:49:f2:b7:
                    27:d6:9f:c1:e5:78:f7:72:9c:17:f6:d7:2c:7b:32:
                    0d:20:f6:63:d1:49:33:9e:c6:96:a9:e8:43:52:0a:
                    ac:91:64:a1:a4:fe:35:38:a7:41:f9:9e:1c:e0:87:
                    6e:52:25:b9:cc:5f:69:04:f0:05:78:a8:0b:85:b8:
                    25:9e:4b:f9:15:a7:97:81:77:d7:7f:2d:26:8e:77:
                    c9:f4:05:f6:39:a0:97:8d:61:e1:a2:75:1f:d9:21:
                    ea:62:93:26:0f:db:b7:f8:91:4e:44:07:69:28:aa:
                    98:82:9c:ae:32:2e:11:a1:5d:e0:42:03:a3:6b:d2:
                    5a:c4:88:44:37:58:05:70:ff:8f:3d:50:cf:59:0f:
                    d0:88:b4:35:c0:ae:b5:b1:ba:ec:0f:12:4e:4d:99:
                    12:5e:23:01:52:a3:09:3c:25:19:88:b7:7b:fa:61:
                    03:94:a3:0e:4b:e8:8f:23:b4:7d:f3:ae:53:b9:a7:
                    f3:74:66:21:9e:03:e8:e9:3b:f4:23:73:a6:5c:e4:
                    7d:4b:5d:4a:1a:0a:15:0d:c2:c6:0d:28:bf:b0:54:
                    cf:93:b7:dc:44:49:c7:97:68:96:52:5b:56:7d:5c:
                    37:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6B:3C:F6:4A:FA:19:73:4E:A2:97:79:3D:EF:0E:C6:F4:8C:0D:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/5b192817-3f38-3d11-8b87-469189a21eda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.160.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:e2:e5:98:44:26:b5:ae:ed:1d:a1:29:43:eb:28:2b:87:5d:
         de:fd:07:b2:cc:ea:53:e4:38:9e:7a:9b:75:a5:44:a9:03:d4:
         3e:3f:4b:fd:8b:5f:6e:ee:8f:f0:28:51:aa:14:d7:dc:88:64:
         1e:6d:27:8a:94:f6:59:08:6d:b4:a3:22:54:d0:4b:6a:3f:fa:
         96:0f:55:d0:d9:6a:39:be:81:1a:e1:a2:40:c8:38:f4:f2:5e:
         6b:2d:d5:33:71:c4:e6:41:ce:4e:ab:03:1f:a3:55:3d:b4:b4:
         cc:80:77:66:cb:d6:a3:94:56:29:ba:56:ee:e9:7b:fa:68:87:
         81:29:97:4e:f2:5a:5a:02:f2:a8:39:86:47:55:b1:84:99:21:
         1e:7c:f3:c4:00:43:40:19:33:09:53:54:ea:a6:ac:6a:38:f7:
         26:b7:eb:23:17:77:5d:38:8c:01:73:67:a6:fe:0d:6b:8c:d8:
         62:ca:1a:db:38:00:c1:2f:aa:e3:2c:cb:56:1e:e7:d6:06:60:
         81:f3:21:b7:c7:33:71:7a:a3:a1:00:bc:57:5e:e7:e3:b8:79:
         3b:c4:f1:fb:b5:c2:13:25:4b:0d:ce:e5:24:9e:b0:f2:92:80:
         da:11:64:e8:2a:ca:af:45:b8:75:73:6f:7d:17:fd:55:2d:08:
         7e:b7:81:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:13:46 2025 by rpki-client