Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a9a3ec3a-33b4-38b1-8dc9-c8b8d693b808.roa
File:                     a9a3ec3a-33b4-38b1-8dc9-c8b8d693b808.roa (raw, json)
Hash identifier:          WEfpuVs+WjWUsO9mmFeghCiEMoAalh47f7QSjODyT28=
Subject key identifier:   BC:F7:7B:E7:CF:16:68:4F:F6:FA:4F:75:BD:71:60:CF:7E:94:63:B5
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584A77809C12D1D396BBA5581680
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a9a3ec3a-33b4-38b1-8dc9-c8b8d693b808.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     376
IP address blocks:        206.167.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:9c:12:d1:d3:96:bb:a5:58:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=8893a6f3-d63e-4791-ad58-e1a3eb6454c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:15:27:da:f7:d0:bd:6d:2d:04:32:ce:4a:71:
                    a7:7a:c5:71:01:6c:d2:dc:d1:b8:0d:7d:ef:7f:b6:
                    2f:30:8b:05:49:24:7b:45:e1:55:f5:60:03:9d:aa:
                    0f:63:c2:b7:dd:34:75:ea:ff:0b:0f:51:1a:7c:29:
                    88:b0:6b:38:9c:5d:38:40:af:d6:65:f0:21:2b:6b:
                    1e:1a:40:ca:08:27:75:c9:8b:14:b0:97:58:84:75:
                    c5:36:08:57:89:ec:bb:3b:b4:94:1d:96:ef:aa:a6:
                    45:10:50:0f:b1:73:c4:2e:95:57:34:90:7d:b2:3e:
                    68:bd:bd:7f:8d:43:91:f6:93:12:83:87:10:24:ee:
                    ae:67:50:07:c8:d9:c9:40:e1:b9:d5:56:93:b5:cd:
                    04:2a:c4:38:81:50:af:4e:6b:64:40:82:f2:ad:43:
                    d2:e1:f2:fb:45:23:b3:2c:89:e6:00:a3:bb:30:69:
                    e7:27:52:a2:4d:3d:9f:27:f7:fb:39:57:31:35:d9:
                    c0:eb:9e:2d:75:8e:e6:b7:23:e7:98:67:34:41:9a:
                    18:34:f9:b2:28:01:12:aa:56:23:69:9e:09:5d:20:
                    44:1c:74:9b:dd:dc:30:ff:c7:55:f0:08:d8:65:16:
                    43:41:ff:d0:11:fe:b2:47:3f:39:5f:ca:fa:95:c2:
                    29:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F7:7B:E7:CF:16:68:4F:F6:FA:4F:75:BD:71:60:CF:7E:94:63:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a9a3ec3a-33b4-38b1-8dc9-c8b8d693b808.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:42:ef:53:b9:5d:19:ea:82:b5:07:ee:4c:9f:a2:a3:53:3f:
         a3:c7:89:53:c2:30:c3:d9:59:84:92:a6:45:66:ef:d6:39:e1:
         bb:0b:d4:7f:a8:31:c8:f6:4f:ea:8e:1a:ef:ad:fc:d6:92:d3:
         d5:2b:a9:b1:96:f8:ce:63:47:42:7c:e3:ab:07:22:70:6b:a5:
         da:ed:ee:c1:13:84:47:a1:ff:30:d7:ea:06:bd:c4:41:50:22:
         5b:87:7f:f5:4e:e9:5f:49:83:6b:a4:ec:3b:31:94:98:b8:b9:
         6e:ef:f6:4c:59:f5:b4:25:4a:d0:7d:c8:81:81:10:fe:cb:11:
         72:16:e5:78:f0:40:ef:cf:c8:3b:9b:0a:54:a7:e0:c0:dc:df:
         18:d1:87:79:87:59:cd:75:d9:2e:a2:aa:cf:8a:30:96:09:1e:
         34:c9:b1:32:fd:28:c9:ef:4b:61:50:13:c3:4f:a3:2a:81:5d:
         18:16:76:f2:37:cb:f0:1f:2d:54:d6:07:aa:b3:6a:ae:96:02:
         71:44:dd:5e:19:01:47:46:96:a5:f5:86:43:8d:fa:37:3c:3a:
         05:c2:ff:d5:82:6f:c6:fe:64:a7:6b:d9:4d:b8:65:d2:78:28:
         07:4f:c6:45:d0:34:a1:7c:e1:0f:92:38:fe:a3:eb:ff:5b:d1:
         06:04:74:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:25:16 2025 by rpki-client