Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7d529866-f0df-3e1d-90b5-07acca65da96.roa
File:                     7d529866-f0df-3e1d-90b5-07acca65da96.roa (raw, json)
Hash identifier:          D+PQYqwcogrkRIW+zTjTlfXnICUZtU4Fg4wH/5+tonw=
Subject key identifier:   EC:39:A7:5F:C4:04:1A:BB:60:18:19:2E:27:05:5F:F3:FE:86:DE:7E
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584A77809B629739842332E58290
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7d529866-f0df-3e1d-90b5-07acca65da96.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     376
IP address blocks:        206.167.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:9b:62:97:39:84:23:32:e5:82:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=83df8a24-c77f-4681-a907-ac37128c6342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:72:9f:97:fc:0d:04:1c:fa:31:49:c3:c6:ec:
                    2d:7a:c8:a2:9f:51:0e:3d:88:ea:e8:ff:72:ca:fc:
                    69:2a:a8:fa:5e:fb:3c:d1:a6:a2:f4:d5:6f:65:38:
                    55:97:94:7d:2d:88:fd:8e:15:f6:a9:a2:57:4a:22:
                    72:14:5d:25:7c:e2:be:ea:d5:7d:43:69:04:5e:76:
                    76:42:b2:18:e4:e3:0f:00:ba:1d:2a:2a:84:5f:88:
                    9b:4f:0c:3e:a7:c7:03:03:58:71:00:77:14:70:b8:
                    20:95:3b:80:44:08:99:aa:e5:de:7d:68:73:0f:6b:
                    a6:7b:cd:c9:2b:2f:9d:b4:02:f7:5c:71:8f:bb:65:
                    36:10:54:89:55:38:43:d4:c5:ed:43:eb:24:63:3a:
                    c5:ad:96:3b:c3:72:f6:1c:ca:29:2e:cb:16:1b:63:
                    ac:fd:1f:bd:6b:d3:ea:91:94:6c:95:d7:d8:27:b6:
                    b8:2e:a7:e4:99:06:3f:21:b6:87:a1:e5:4d:d7:74:
                    e1:75:c2:3a:70:b5:1c:7d:65:b9:c9:53:46:5f:cf:
                    78:81:e1:e8:5c:d0:84:78:37:1a:4a:52:f8:c7:d1:
                    c7:bf:18:c8:b6:69:e3:6e:5c:e3:7f:cb:2a:17:48:
                    ca:01:67:55:25:2f:e3:f2:e8:55:ec:58:52:a6:43:
                    3b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:39:A7:5F:C4:04:1A:BB:60:18:19:2E:27:05:5F:F3:FE:86:DE:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7d529866-f0df-3e1d-90b5-07acca65da96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:1b:af:dc:aa:76:60:e9:2b:e1:3e:c3:72:f5:07:70:e2:66:
         a6:d0:6d:d8:68:43:d3:53:65:16:bf:5b:ae:1f:92:77:31:f5:
         9f:0e:52:4e:93:30:fc:ba:7c:03:ad:46:a7:68:77:5c:ab:05:
         75:8d:92:aa:b2:06:f3:03:53:4f:d9:5f:de:19:05:c8:68:00:
         a4:b4:63:7c:e6:8c:64:b5:96:fc:2c:df:14:ae:3a:bd:4e:01:
         44:2e:c8:fb:8b:eb:a6:88:9d:24:46:38:c1:b7:0a:48:ea:1c:
         79:81:2b:4c:af:78:37:07:43:92:83:8e:ed:66:16:36:fd:4b:
         21:8b:a0:2f:2b:cc:7c:1b:ee:27:07:a7:64:6c:f6:4e:56:32:
         0d:8f:97:2c:39:02:29:82:45:e9:05:82:8a:c9:da:dc:08:f0:
         12:77:69:93:3c:34:79:9d:92:33:db:6b:b6:94:84:f3:69:a3:
         6b:fb:b7:87:46:d5:15:9a:06:b1:fb:c4:9f:ee:1f:30:2d:f9:
         d9:66:54:80:57:09:03:ce:b8:c3:08:69:c2:09:3a:e8:95:f7:
         39:b0:7c:81:f5:e9:04:1f:cf:f3:86:1b:99:25:e9:42:c9:12:
         cc:d3:61:6e:21:fd:db:fe:3d:e1:c0:99:47:b8:13:e0:f7:d4:
         14:3d:08:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:33:08 2025 by rpki-client