Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/e8c61a0d-c526-3ba0-9460-1a12aa1da868.roa
File:                     e8c61a0d-c526-3ba0-9460-1a12aa1da868.roa (raw, json)
Hash identifier:          n8NIcVnjsGmUhdTM/5+QpvgtlD8/zEYUUNR7jxhhujw=
Subject key identifier:   56:E4:76:0D:97:B6:62:29:C8:EA:E5:B4:5C:FF:85:04:15:B8:D3:D3
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584A96369B9B5588646C2C194D80
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/e8c61a0d-c526-3ba0-9460-1a12aa1da868.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     376
IP address blocks:        206.167.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:9b:9b:55:88:64:6c:2c:19:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=279e84a6-b4fa-47b9-b4cf-e9ea3a06fa8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a3:99:cb:d9:e4:8c:15:93:26:03:3c:3a:50:
                    56:2f:00:88:ad:75:1b:54:99:be:72:14:95:35:68:
                    a4:1a:47:ee:68:3e:04:18:2c:6c:71:74:85:72:52:
                    74:36:e9:51:42:b1:bc:4a:0f:e5:af:30:21:c3:29:
                    a4:8e:b0:12:5f:a1:39:60:79:49:57:b8:97:51:17:
                    55:0b:7c:c7:f6:43:fc:de:82:b1:63:42:37:73:5f:
                    9f:e4:49:eb:c2:e8:55:a0:b9:14:b1:02:b0:1a:e4:
                    e9:c3:91:dd:6a:f6:bd:e7:52:b1:57:ca:0b:7c:79:
                    a9:46:4b:1e:5d:24:75:90:82:27:c5:2d:91:94:df:
                    7a:2a:90:26:12:d3:dd:98:54:20:4e:8d:78:2d:c4:
                    22:45:35:7c:53:39:80:53:49:a2:a4:c7:1e:4c:7a:
                    dd:d3:1c:d0:2d:c1:8c:02:27:02:e7:ac:1b:9c:77:
                    45:b5:bd:2e:28:97:f8:d3:35:90:1a:48:fc:c7:bc:
                    ba:95:45:8d:23:98:d4:8d:8e:6b:52:eb:90:4f:11:
                    0d:63:d9:ab:9c:0c:a1:00:7b:f2:27:f4:4b:24:23:
                    ae:1b:bb:25:47:84:cc:39:b1:34:0d:f4:2a:c6:25:
                    c9:71:29:f8:c6:c5:2e:be:c9:39:ad:4f:df:08:52:
                    27:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E4:76:0D:97:B6:62:29:C8:EA:E5:B4:5C:FF:85:04:15:B8:D3:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/e8c61a0d-c526-3ba0-9460-1a12aa1da868.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:7a:32:2e:40:84:89:b5:ac:ef:6b:11:00:bb:b5:e9:08:bb:
         5c:91:94:7c:25:19:31:fa:85:13:e0:1d:5e:cd:c3:68:25:6c:
         c3:16:a5:e7:6b:f9:a3:b6:a1:5c:87:44:59:e7:21:3d:c7:ff:
         19:69:0c:23:0d:c7:2b:6f:50:4e:8e:07:c1:19:19:33:46:31:
         a9:13:d1:3e:48:03:f6:14:22:e6:21:08:bd:e2:51:35:0b:15:
         06:8e:d0:94:f3:29:7f:fe:53:08:a7:fb:75:61:67:21:73:82:
         b1:af:3f:eb:8e:d9:19:4c:48:ee:45:d1:c0:42:c0:f5:15:55:
         b8:ac:6f:ba:ce:bc:fd:be:a3:8e:e5:06:53:78:2a:fc:2c:57:
         0d:f5:a7:cd:e8:33:5a:e7:b7:0e:23:fe:00:62:7a:9d:d1:16:
         f5:09:2b:df:26:d6:fe:24:eb:08:a9:0f:d3:b1:03:f0:6d:ee:
         24:55:9c:c8:eb:26:62:c7:6d:7c:aa:c2:2f:d4:9c:17:82:03:
         c8:f8:fa:1f:08:71:c8:9f:0f:0f:58:2c:4e:5f:25:81:99:31:
         55:ab:ac:c4:38:11:c6:aa:51:e8:2c:84:a7:6b:c9:1e:b3:6d:
         a5:f6:65:0d:0b:67:9f:d3:6b:61:20:64:72:37:79:93:6e:f4:
         08:a1:94:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:25:15 2025 by rpki-client