Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a9a3ec3a-33b4-38b1-8dc9-c8b8d693b808.roa
File:                     a9a3ec3a-33b4-38b1-8dc9-c8b8d693b808.roa (raw, json)
Hash identifier:          fD8nz5pdA40yA4KYFwE7dJiB24Bz6/i2Vc5SZCcZ4IQ=
Subject key identifier:   11:E8:64:B6:0E:52:69:E4:3E:7D:1E:F3:2F:EA:E9:6D:FE:EA:DF:14
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584EA798367DC5716F6E04D53080
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a9a3ec3a-33b4-38b1-8dc9-c8b8d693b808.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     376
IP address blocks:        206.167.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:36:7d:c5:71:6f:6e:04:d5:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8ec022ff-0e58-4947-b9d8-e236040a4ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:16:05:9a:6f:f3:a4:83:51:ae:05:b1:0d:69:
                    15:3c:72:78:7c:82:d6:31:f5:be:c5:7d:4f:8a:aa:
                    b0:ac:1b:c2:5c:ac:91:0e:36:cd:ae:50:99:3f:da:
                    8a:c7:f2:f0:f2:df:90:e9:74:7d:9b:bc:87:9f:59:
                    c5:09:17:5d:46:3b:23:67:29:ba:4a:8c:b5:60:e3:
                    72:42:11:58:04:f0:c5:49:41:ef:83:ab:93:53:7a:
                    67:52:ac:f3:18:d4:5c:8d:f8:3b:eb:10:a7:a7:48:
                    2d:f8:fc:61:27:20:0c:97:8e:fd:d0:ca:02:35:01:
                    7b:07:91:da:e5:2b:d0:f5:c8:a8:4f:83:66:ea:26:
                    c0:49:39:3a:71:3f:0b:d1:a5:b8:8d:b9:22:ee:30:
                    da:87:0d:70:bf:dd:42:93:4c:af:ae:eb:ad:0d:29:
                    1c:56:c5:0f:cc:f0:73:2d:00:6a:c9:21:61:01:b8:
                    c8:4b:45:1b:0c:8c:c1:fb:00:9a:b9:d8:60:f8:4d:
                    7a:ae:d7:24:91:06:78:86:8e:c0:36:80:8b:2c:e3:
                    be:27:6e:95:dc:46:93:52:4e:6a:d1:e9:49:f3:2f:
                    9f:05:15:af:2c:45:75:ad:f5:9b:40:fb:a3:f3:70:
                    00:4a:23:05:c4:23:ab:17:7a:41:25:03:c3:17:8d:
                    7b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E8:64:B6:0E:52:69:E4:3E:7D:1E:F3:2F:EA:E9:6D:FE:EA:DF:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a9a3ec3a-33b4-38b1-8dc9-c8b8d693b808.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:27:96:18:87:ae:93:53:5d:fe:56:3d:2a:58:74:86:9b:e2:
         d5:76:a4:91:f3:7c:42:1d:f3:38:75:81:b8:f4:b0:e9:0f:17:
         7e:70:79:7e:9e:c2:09:b6:c2:04:14:4f:63:56:e1:ec:4e:62:
         2c:3d:a6:8f:40:34:cb:6b:e0:bd:c4:60:ad:50:3c:af:b8:b1:
         73:b2:7a:67:14:15:1f:de:89:7f:31:18:7c:44:1f:e3:d7:f5:
         70:83:d2:ee:59:8b:fe:9b:75:8f:b9:17:32:46:94:e7:d3:a9:
         1a:e9:3d:91:8b:0d:79:91:cd:34:a7:b1:24:fc:14:16:26:6e:
         b8:e8:e0:e2:10:8e:5c:56:02:07:3b:68:ca:0a:87:e2:c6:ce:
         8d:9a:05:84:b8:48:c2:16:cf:1e:32:3f:53:75:0d:57:4e:c9:
         55:99:81:8f:2e:37:28:f7:ba:e0:9f:29:43:e2:10:f7:a4:f7:
         29:20:9a:51:3d:41:ac:80:dc:c2:49:40:f7:2b:9c:1e:29:40:
         0e:bc:84:a5:50:dd:22:c5:56:b3:95:4b:8f:a2:19:57:68:3b:
         c3:d1:f4:d0:05:61:e5:5d:74:d2:9d:f1:81:84:28:61:ae:47:
         64:aa:83:e9:71:fe:a7:d2:da:7d:61:9c:7d:42:a7:3a:55:da:
         82:79:0a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 22:00:44 2026 by rpki-client