Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/b2e5432e-486a-3195-a8c7-b69e19b4f706.roa
File:                     b2e5432e-486a-3195-a8c7-b69e19b4f706.roa (raw, json)
Hash identifier:          wUXYLlxrmriQ1F8picwd0sWzam1uUnKrGUanbay11Wc=
Subject key identifier:   11:62:B7:DE:E3:19:A3:FA:8C:1A:58:4D:DE:02:0E:3B:27:1C:75:FF
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584A9E96477F3C690F60AD1DFF80
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/b2e5432e-486a-3195-a8c7-b69e19b4f706.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     376
IP address blocks:        206.167.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:47:7f:3c:69:0f:60:ad:1d:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=28c49d9a-44af-4cd8-9cce-e3de9d27e0a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:54:49:9c:01:f1:8a:91:ca:82:70:23:77:7d:
                    95:f2:81:60:66:51:3b:09:d0:19:8c:27:68:bc:20:
                    96:35:3e:dc:cc:0e:ff:1e:1a:c5:bd:8e:2a:9e:16:
                    9c:a7:4f:30:61:96:2b:64:f7:bb:45:95:59:7b:50:
                    b0:00:26:1c:4a:50:7b:a4:1e:41:1b:18:d9:20:d7:
                    4a:29:f0:04:d9:cf:60:7d:3f:7a:aa:22:bb:28:ec:
                    5b:94:bd:c0:cd:fd:3b:62:26:91:44:79:90:a5:a0:
                    5e:52:ef:d7:f6:e9:c3:33:9c:55:0f:43:b5:7f:f2:
                    c2:bb:44:d5:e6:55:dc:0e:3a:a0:f8:38:87:4b:9e:
                    43:69:a2:20:4d:cd:22:89:da:73:f4:30:02:11:e0:
                    ed:82:1a:61:00:f8:66:3a:10:ab:28:fc:c6:57:b1:
                    c3:44:65:7a:33:e6:db:c1:e7:a8:27:99:af:16:2c:
                    4d:19:37:7c:b4:f0:0c:44:1d:31:83:33:f8:29:01:
                    a7:e7:fb:fb:8e:9e:75:35:e0:74:cc:8a:93:42:2a:
                    9b:f0:7c:b9:47:2f:30:ef:b8:04:11:1e:1e:23:15:
                    9a:84:27:fb:51:50:79:8a:0e:88:55:76:da:4b:68:
                    75:dd:17:50:e4:f5:1a:a9:e4:e2:da:9b:7b:45:9d:
                    fc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:62:B7:DE:E3:19:A3:FA:8C:1A:58:4D:DE:02:0E:3B:27:1C:75:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/b2e5432e-486a-3195-a8c7-b69e19b4f706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:82:22:dd:c8:39:a7:43:37:5d:e5:13:bd:37:58:99:26:ea:
         ae:3e:5f:8c:de:62:94:95:44:6a:bf:18:b2:98:a5:fa:0e:e5:
         ac:c1:0b:14:66:32:54:d5:46:6a:46:c2:d8:5b:75:8e:36:37:
         07:e2:22:2b:58:94:ce:40:ab:a6:98:79:67:e4:05:61:5c:5f:
         2e:76:3f:36:9e:70:07:06:7c:41:a0:68:6a:d6:7d:3d:7a:98:
         ab:12:c7:46:c9:2e:b1:84:0c:fd:80:93:4e:d2:69:ba:b7:6d:
         99:e4:30:06:73:24:80:4b:27:51:22:ed:ee:d6:5d:d4:59:ef:
         14:35:36:a9:e9:fb:03:b1:c5:0a:9d:e9:5e:0b:3a:15:c5:94:
         d3:bf:5d:de:95:b0:ce:51:3e:fd:56:ec:77:dc:73:38:5f:39:
         a6:d7:3a:8d:c8:cd:a2:61:50:ee:c5:9d:b1:58:b4:4b:ab:ee:
         65:53:69:2a:58:4d:ba:9f:d9:f2:65:62:c1:92:d2:a8:2c:d8:
         de:fa:4f:48:e1:41:bf:ce:7e:27:e5:77:92:55:ea:34:c5:6a:
         54:31:76:ca:7b:29:3f:89:1f:d0:61:44:4c:62:6c:69:eb:92:
         dc:e3:f3:ad:80:58:51:7f:25:e0:3f:63:2f:86:f4:a5:9f:37:
         b3:d9:f9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:30:25 2025 by rpki-client