Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7d08bdda-53a9-39c3-84df-054ab7e8e7b9.roa
File:                     7d08bdda-53a9-39c3-84df-054ab7e8e7b9.roa (raw, json)
Hash identifier:          Qha1WwHtjE6Hcs9ld0tuP/72x5IuN9G1Qlpyl4/2NMg=
Subject key identifier:   98:DA:4E:78:19:D8:48:2E:9A:67:9F:B0:98:67:34:F8:7C:BC:B6:07
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584EA79852C135C68CA873C9F500
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7d08bdda-53a9-39c3-84df-054ab7e8e7b9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     376
IP address blocks:        206.167.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:52:c1:35:c6:8c:a8:73:c9:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3779a475-ee27-4ebb-9567-ebfb2df2eaea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4a:7e:d3:dc:56:82:da:69:e0:f0:89:c8:82:
                    93:b7:65:a4:32:d7:06:b9:2f:26:f6:74:b9:b1:19:
                    d6:dd:c1:86:a8:04:fc:42:35:cf:9d:32:8b:93:b6:
                    50:ba:a7:ca:18:d3:63:56:3a:a7:08:cd:d7:45:96:
                    4f:ba:63:de:8a:a9:01:e9:57:b2:31:b4:00:1d:fb:
                    e4:ea:0e:0b:ed:8b:dd:74:49:c6:a3:d0:50:2a:4a:
                    82:b2:79:1e:f3:4d:8e:6b:56:bc:36:52:45:0e:1a:
                    e3:db:02:52:26:c5:a8:88:5c:96:bd:52:bd:5c:98:
                    5a:fa:6d:88:b8:61:e3:b6:b6:9c:da:ec:c3:14:72:
                    ec:b5:a8:11:23:26:12:ef:cb:e9:f8:c4:5a:c6:aa:
                    1a:d9:5d:44:21:ab:fe:42:12:44:b2:e1:90:d8:3d:
                    e5:d1:a9:15:85:4c:93:95:60:e0:d9:43:c0:eb:ad:
                    41:ba:93:81:49:9d:2f:b6:3a:61:93:6f:cf:ad:f2:
                    0e:31:90:89:0c:66:e1:d9:1f:ca:31:d3:08:fe:67:
                    ed:66:32:0a:98:bb:b0:82:8f:58:e6:6a:d9:9d:5f:
                    99:c2:50:e7:7e:27:54:4e:7c:cc:4f:45:a9:23:7a:
                    d9:69:43:94:1a:ab:4b:a8:0e:dd:35:af:0c:2b:ee:
                    5f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DA:4E:78:19:D8:48:2E:9A:67:9F:B0:98:67:34:F8:7C:BC:B6:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7d08bdda-53a9-39c3-84df-054ab7e8e7b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:4a:77:8d:a5:3d:ee:44:af:bf:1f:45:43:49:b4:0f:04:c5:
         8a:97:99:8a:4c:53:8b:1c:23:36:e8:b6:b9:34:f7:9e:b8:cb:
         9f:d2:82:d8:04:b3:1a:2a:9e:5f:ad:8b:29:3e:54:7a:5f:e0:
         57:8b:65:02:3a:75:95:b8:06:be:89:c0:8e:9b:38:53:88:27:
         85:9d:34:b3:07:e0:5a:06:2e:d0:0d:2f:3a:82:3f:7f:dc:8b:
         5b:ba:93:cf:97:02:1e:e0:6d:d6:ea:32:3d:ff:b0:8a:f5:ff:
         30:d4:a1:c0:e4:eb:d4:39:85:07:6d:b9:3f:73:9a:b7:b4:4b:
         fa:00:5d:8f:d1:bb:e3:92:35:a7:b9:7b:73:02:45:b5:1e:a5:
         22:88:78:1e:9a:65:81:19:8a:4c:70:10:7d:94:df:ad:d7:30:
         f0:be:cb:a0:1b:21:07:5b:f6:19:8f:40:4d:ca:49:a0:cf:d6:
         77:8d:9e:46:64:e5:9d:6d:4d:63:9c:6b:ea:00:10:ac:7d:8a:
         e7:32:2b:5a:1b:e6:2d:f3:c3:72:26:c2:65:d2:68:55:33:b6:
         b1:41:e2:0d:ee:d6:71:f4:07:83:4d:64:9b:2f:87:99:08:c9:
         57:29:1d:42:70:e3:e8:d8:bb:45:e8:b1:0c:38:2a:70:ff:d4:
         d4:b5:d9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 22:00:21 2026 by rpki-client