Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/efc4a549-56fb-37f5-a449-049b17d5c172.roa
File:                     efc4a549-56fb-37f5-a449-049b17d5c172.roa (raw, json)
Hash identifier:          xUL0PwesB2R05NgYu3Q3jCoSOWQfGKkGWPBkXdDGCdI=
Subject key identifier:   01:EC:28:88:AD:5C:7E:A0:98:D6:0D:13:3C:17:B0:BA:29:9F:18:AE
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584A96369C4A68DECEBFEBD2C080
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/efc4a549-56fb-37f5-a449-049b17d5c172.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     376
IP address blocks:        207.162.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:9c:4a:68:de:ce:bf:eb:d2:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=f5e11f4d-71d6-4154-9c20-cffda785eca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:04:b1:11:6d:78:c7:7b:80:c7:6a:f3:f4:2b:
                    55:ee:04:31:ad:c0:c5:33:4f:7a:40:e4:a9:fd:60:
                    65:bc:54:b3:82:a7:30:ca:64:0e:ea:f7:48:e1:a4:
                    ad:31:f1:eb:eb:78:67:ac:a6:a2:c1:20:1f:2e:b6:
                    7c:2f:89:96:77:f1:76:50:d0:67:98:c2:bb:a9:61:
                    fb:83:79:f5:4f:08:53:73:da:01:a0:17:5c:46:49:
                    9e:21:c1:85:a5:96:9c:89:9a:bc:29:5c:c7:b5:5f:
                    f5:27:fd:32:66:eb:b1:23:60:6a:9b:2a:cf:ca:d8:
                    41:dc:a6:6f:1e:8b:3d:44:3e:63:fc:cd:12:d9:64:
                    1d:42:7b:6a:78:74:0d:ee:3d:51:36:b1:fb:f0:e9:
                    e7:c3:5c:a0:3c:94:a7:55:84:66:1f:7d:69:02:70:
                    41:d4:d7:0d:a3:f3:2d:cb:c9:06:be:9b:8e:6e:5c:
                    57:19:4b:a9:dd:e2:15:2b:bd:f8:eb:f9:36:bb:a1:
                    48:f4:c4:b1:41:fb:10:cb:1c:49:cf:5f:19:ed:c3:
                    e1:28:70:d8:48:fd:99:ec:55:2c:13:4c:8b:da:11:
                    6d:4e:cc:06:a8:97:cf:f4:5e:4f:d9:ce:8d:67:17:
                    78:3c:af:ab:c6:c4:cd:4e:97:a7:19:76:49:76:00:
                    a9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:EC:28:88:AD:5C:7E:A0:98:D6:0D:13:3C:17:B0:BA:29:9F:18:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/efc4a549-56fb-37f5-a449-049b17d5c172.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:17:e1:e0:82:68:44:7d:78:10:d5:f8:91:90:13:93:2f:9e:
         85:cf:5a:3b:f7:3c:11:6a:a4:61:20:65:21:ac:4c:7c:20:70:
         e3:44:b2:15:06:42:43:f2:14:e2:8e:88:43:e5:08:61:72:22:
         6f:c7:9b:26:d4:02:21:50:da:3e:d0:61:63:85:64:68:65:a4:
         1d:3b:c9:c7:19:d8:5e:cf:4d:a3:96:88:87:4e:02:08:e6:42:
         f4:06:59:3c:b1:65:1b:a0:d4:71:f7:35:80:52:99:ec:f0:65:
         8b:d2:67:8e:53:af:53:78:cc:e1:2f:e4:64:34:36:56:09:8f:
         1d:40:2f:13:cf:e4:46:1a:13:f1:90:2a:09:03:b4:ab:c0:c0:
         d8:52:ab:fd:a6:9a:17:54:94:49:dc:1e:34:ec:fd:74:4b:8a:
         67:f3:a3:43:42:ac:2f:2b:5e:c2:21:c4:9b:fd:f1:28:06:27:
         2f:0a:1f:c8:64:d0:76:b3:c6:42:97:0d:88:2a:59:f2:91:33:
         4f:c6:ea:f9:74:ad:d7:9c:34:e7:84:86:75:60:0b:4d:1e:e1:
         32:e0:be:de:e7:f0:47:cc:62:27:8f:7c:0d:42:82:28:7d:47:
         76:f9:0a:ac:36:14:6f:fd:f6:56:de:01:20:9b:75:12:d3:b3:
         f8:20:39:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:28:24 2025 by rpki-client