Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/c06b68a3-2e52-3ef4-a048-29fac226c21c.roa
File:                     c06b68a3-2e52-3ef4-a048-29fac226c21c.roa (raw, json)
Hash identifier:          Ki/WgYoB9EMEFVLZDjFgH/VsFLg62jjgTXYs33CUsPA=
Subject key identifier:   53:80:77:0A:B1:EA:E6:E0:5F:18:70:0D:CC:EE:9C:46:AF:2E:06:84
Certificate issuer:       /CN=5161da6e-b7c6-48c9-a8c0-935b5c591083
Certificate serial:       010D0C9F4328584B047C03E6CA38F658A857FFC0
Authority key identifier: 8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/c06b68a3-2e52-3ef4-a048-29fac226c21c.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     11626
IP address blocks:        208.71.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:03:e6:ca:38:f6:58:a8:57:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5161da6e-b7c6-48c9-a8c0-935b5c591083
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=5bd66457-c92e-45c1-a5f0-fb9ded70db17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:11:55:15:0e:4f:a2:45:f9:05:56:61:ed:29:
                    cf:e3:76:ab:63:5a:60:3f:f2:f6:b1:c3:86:a0:61:
                    f9:ec:ac:1b:bf:85:3e:00:e3:b8:9d:fb:76:25:06:
                    74:89:31:a7:ec:a4:da:0e:3d:92:ab:a8:35:12:fc:
                    65:ab:42:d9:73:4e:f3:ff:3a:89:da:4e:aa:d2:49:
                    d0:c0:e2:ba:64:e2:1f:6a:2c:66:2a:48:8b:3c:2c:
                    ba:df:ff:fb:a3:16:a5:3f:86:55:0c:3c:d9:09:6a:
                    82:92:43:d7:62:9f:0e:17:78:86:2c:5a:aa:ab:9e:
                    e2:21:a7:c2:50:6b:2e:1f:af:83:53:28:79:1e:55:
                    61:76:3d:74:fa:7f:98:fc:8c:3e:e3:ce:a9:b9:dc:
                    61:29:77:60:6a:52:ac:f7:cb:a8:21:76:58:13:8e:
                    cf:36:50:fe:1c:5e:e0:6f:29:aa:b2:ad:0e:f6:d7:
                    eb:95:96:ee:65:e7:91:44:15:ea:00:96:55:05:4f:
                    a9:7f:fe:8d:9e:55:00:e7:f8:ba:e6:44:69:8a:2a:
                    5d:0d:2a:30:78:81:6f:66:e8:9f:98:e0:24:77:1f:
                    d6:84:9b:08:74:dc:8e:e6:1a:bb:b5:4d:80:5e:50:
                    62:20:26:e1:fd:54:08:60:ce:8f:f9:41:82:4d:53:
                    73:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:80:77:0A:B1:EA:E6:E0:5F:18:70:0D:CC:EE:9C:46:AF:2E:06:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/c06b68a3-2e52-3ef4-a048-29fac226c21c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl

            X509v3 Authority Key Identifier:
                keyid:8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.71.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:3a:93:7b:26:45:68:be:9e:57:9c:a8:52:17:09:58:8b:9e:
         c8:03:f4:34:4b:df:66:29:7d:53:0e:b2:e7:ee:12:9e:da:40:
         51:48:e9:0a:e1:a8:26:ab:a8:07:2b:9d:20:ad:17:35:0d:0d:
         a5:60:1f:f3:1e:65:7c:24:93:df:99:ad:56:66:18:39:c6:0d:
         38:6a:a2:ab:e0:ad:2d:00:1f:a9:eb:24:b8:bc:94:75:47:f5:
         8b:29:5a:93:dd:5c:81:db:49:19:99:ab:35:f6:8e:f2:df:23:
         43:6e:1c:7b:84:53:a0:f0:d9:b8:35:ed:a7:5b:49:41:d1:39:
         1c:b7:d5:b8:86:4c:ec:55:70:a2:dd:d9:ac:9f:dc:cb:0a:d6:
         eb:b0:1e:6a:9d:88:56:f1:65:ea:37:8b:69:11:76:4a:fa:f4:
         ed:71:e1:8f:a9:d8:cc:f7:65:57:5d:73:f8:1c:40:77:99:50:
         8a:78:d3:8a:9d:c0:c8:68:31:83:18:bc:19:7f:ee:46:f5:85:
         4a:19:19:42:72:16:81:3e:e6:9d:3f:da:7e:df:7c:71:a5:46:
         8c:1c:d3:3a:19:6d:59:6c:6b:eb:9e:66:ed:75:8c:e0:f9:48:
         7c:a4:c6:d8:08:74:79:b8:93:80:e9:0d:32:69:40:f0:71:33:
         21:41:3c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:17:49 2025 by rpki-client