Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/86f52288-e2ff-362f-b9f8-e011462874e0.roa
File:                     86f52288-e2ff-362f-b9f8-e011462874e0.roa (raw, json)
Hash identifier:          9Wj9E6iJjP6kMTooRwa5XHcwMjKYtN04XBgBD/PtJ1A=
Subject key identifier:   4A:34:ED:E8:9D:07:F9:A8:49:08:6A:8B:90:75:AA:B8:0F:74:AA:A1
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584A7A4B5FF959EF58EA7A51C4A0
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/86f52288-e2ff-362f-b9f8-e011462874e0.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     376
IP address blocks:        192.77.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:5f:f9:59:ef:58:ea:7a:51:c4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=bfc9ebb2-bb2c-461c-9b98-44de6802ee68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:52:6d:6f:c1:ad:24:01:58:6c:d7:9e:68:db:
                    15:53:7b:37:4a:7b:30:62:72:71:f0:4d:80:d6:31:
                    33:c3:f3:12:01:4c:ae:c7:c5:f5:aa:9e:c6:2c:99:
                    ac:72:58:e4:23:36:eb:17:3b:30:d3:17:9a:65:ba:
                    86:16:7d:e1:44:2c:46:b1:f8:f2:f0:c6:4f:32:9d:
                    6f:90:63:cc:d9:da:17:a2:8e:f0:20:55:0f:27:fc:
                    fb:30:df:9d:62:99:c0:10:ed:0c:25:40:ee:79:13:
                    58:c4:c8:74:5b:48:d9:b4:1c:c7:0d:08:f6:55:1b:
                    db:dd:c5:32:0e:98:7b:85:39:c0:f4:43:b1:39:76:
                    08:f8:02:dc:66:6e:81:95:de:d8:ba:59:83:cf:00:
                    5a:87:4d:34:6e:d6:63:99:e6:16:32:3a:ab:30:8e:
                    ac:21:11:b2:f3:f0:ce:3b:58:55:62:ff:6c:ef:42:
                    f2:a0:c0:5e:25:8f:55:34:a9:8a:8c:b7:2e:46:fd:
                    7d:d1:b0:6a:ce:c2:8f:8c:34:fd:3a:fb:53:de:90:
                    03:be:80:c3:57:b1:68:0c:69:d8:3b:9f:45:42:8d:
                    b9:9c:be:ae:00:7b:2b:c7:1a:cc:27:44:32:54:0e:
                    6f:4a:ad:37:84:38:9a:45:f6:40:ad:26:cd:08:d0:
                    f7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:34:ED:E8:9D:07:F9:A8:49:08:6A:8B:90:75:AA:B8:0F:74:AA:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/86f52288-e2ff-362f-b9f8-e011462874e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.77.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:26:65:b0:9b:f1:f3:4c:1c:eb:b5:a5:96:48:ee:88:4e:23:
         a1:71:5d:35:56:7c:98:fc:6c:16:18:2b:0f:ac:2d:86:6e:d3:
         1e:81:fa:38:e1:d3:0d:62:45:94:59:68:3a:52:12:5f:af:5f:
         7d:97:a0:bc:c6:5b:20:32:c5:ca:77:c2:90:5d:a5:50:e8:b5:
         f6:36:00:c9:3b:41:a6:ed:8e:79:43:3b:4c:ff:c8:27:7e:6a:
         19:b3:6e:6e:55:f0:58:98:7e:df:93:b3:db:70:af:71:af:91:
         7a:09:69:59:e7:77:b1:b2:1d:6f:7e:e6:e3:83:e6:77:3c:07:
         a8:8a:a7:f2:02:e4:2d:b2:09:f6:d7:f0:3a:f1:72:19:89:0b:
         30:c6:ca:ab:ad:46:8c:0c:87:05:7c:54:2a:af:0e:21:b9:65:
         0c:50:d2:ab:33:26:a8:0f:58:11:46:52:5c:2d:d6:0d:ed:a7:
         c4:e4:f3:8c:b2:48:b9:01:eb:2e:bc:a4:1b:e9:b0:93:6e:a4:
         09:eb:34:b8:bb:95:55:7c:9e:c7:7d:91:65:16:32:5a:ea:fe:
         7f:07:a6:99:79:3b:63:e5:b6:bd:ce:b9:43:72:db:0d:d7:3d:
         91:7c:cd:60:81:37:60:8d:00:14:77:e4:e7:65:d7:41:e4:b3:
         99:11:51:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:27:09 2025 by rpki-client