Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/167193ac-9a5e-3186-bd61-a8eb3bdf66b0.roa
File:                     167193ac-9a5e-3186-bd61-a8eb3bdf66b0.roa (raw, json)
Hash identifier:          hM57/ZOSEF2NirQpcpwC8lM1gvha5XpypB86aXuPLIQ=
Subject key identifier:   3D:81:A3:B3:8E:C8:4D:DE:D3:A9:3F:08:77:DA:29:91:43:77:E3:DE
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584A7780A370C92D9B53B982F200
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/167193ac-9a5e-3186-bd61-a8eb3bdf66b0.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     376
IP address blocks:        206.167.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:a3:70:c9:2d:9b:53:b9:82:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=dfd08776-dd93-4548-b132-082d4d8d2896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:50:72:85:48:64:53:46:37:61:89:74:54:ca:
                    78:40:54:c0:fe:82:04:22:0f:90:ef:6f:d8:92:ca:
                    77:c9:68:e9:cb:81:00:4b:b8:a4:de:b8:e6:c2:5a:
                    26:9a:9f:9d:a8:b8:b7:a1:53:c5:02:e8:d3:c7:97:
                    60:ba:46:8b:d0:12:c6:53:e5:a7:ac:7d:a6:3a:e2:
                    fb:0f:9c:28:cd:91:fd:41:61:0b:63:2a:5a:67:46:
                    86:71:23:a3:91:7b:8c:eb:96:06:0b:22:b8:6f:42:
                    25:3c:54:10:06:2a:5a:be:2b:c2:76:10:f9:31:0d:
                    cc:b0:9d:52:95:13:0d:4e:02:db:f2:24:6a:6c:13:
                    54:93:44:91:7b:5c:88:5d:ab:b8:10:76:b6:91:98:
                    44:ed:3f:3f:41:fc:d1:2f:e3:fc:a0:e9:56:4d:30:
                    b2:cf:5c:b3:e2:68:2b:f7:72:fe:18:fc:dd:80:58:
                    83:9b:18:a1:37:9b:fb:af:9c:68:80:3a:dc:19:fb:
                    30:4d:3d:50:50:b4:31:ff:50:11:50:bc:3a:91:c8:
                    82:a0:3a:f5:17:ec:66:ce:54:59:d8:88:f4:94:95:
                    71:cc:2c:04:4c:96:f8:b7:35:f1:bb:41:3f:8f:bf:
                    5d:e7:b7:30:ea:29:79:9c:99:49:22:5f:20:f4:6e:
                    07:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:81:A3:B3:8E:C8:4D:DE:D3:A9:3F:08:77:DA:29:91:43:77:E3:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/167193ac-9a5e-3186-bd61-a8eb3bdf66b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:9d:15:24:de:cf:5d:fb:5d:63:49:25:af:27:5a:00:84:7f:
         d2:d1:dd:df:3e:d8:03:08:f7:a6:26:6b:68:0a:e5:3a:60:ed:
         27:f3:89:92:8f:e1:f7:dc:eb:a4:b3:e5:8e:2f:68:f4:3e:93:
         4d:d6:c3:1e:91:9c:07:76:98:06:aa:26:fb:ca:ea:80:a8:0f:
         41:59:71:2d:80:bf:c2:98:c0:80:ec:d7:69:b8:24:1e:d6:46:
         28:7d:4a:0e:57:f0:82:99:49:b2:fd:5b:7e:0f:9a:69:28:52:
         0d:ee:26:76:52:0e:38:6c:01:db:62:97:a2:9d:63:78:0e:54:
         dd:81:5b:e7:82:70:98:32:ca:c5:03:dd:93:91:1a:0e:72:b3:
         8c:0b:0c:52:29:69:83:69:44:f8:11:1c:f9:1a:f7:c0:9b:35:
         f6:89:39:83:13:5b:7e:f9:fe:82:31:8c:d8:78:dd:79:42:b9:
         47:55:35:44:c9:c0:91:98:39:80:7e:62:df:a9:53:ed:0d:a8:
         52:2e:fb:14:0f:5d:7c:b4:b7:3a:20:b3:41:45:5c:14:4b:40:
         5c:81:12:3d:1f:e3:2b:41:fb:cc:b2:d0:35:1c:f5:d9:08:63:
         6b:77:cb:96:ed:45:28:60:ba:99:0b:58:9d:ff:57:d3:0e:50:
         0f:95:46:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:26:33 2025 by rpki-client