Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/d967d62e-ad0b-3ec5-885d-d5a9420c4481.roa
File:                     d967d62e-ad0b-3ec5-885d-d5a9420c4481.roa (raw, json)
Hash identifier:          Nm908nt7zdWklPQWc09q0jaGC9f6Fk6td+XjwIBeyRY=
Subject key identifier:   29:0B:77:E2:40:79:CE:93:96:BA:9F:E6:B4:AD:EA:C3:64:8D:7E:F1
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584BB88D2EE7F4DC8C96FA10CF80
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/d967d62e-ad0b-3ec5-885d-d5a9420c4481.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     376
IP address blocks:        132.219.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:2e:e7:f4:dc:8c:96:fa:10:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=6c56f788-3670-4097-8bd2-1fe2888dcb1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ac:59:23:80:3c:20:36:5d:6c:f3:72:5c:47:
                    96:66:13:60:1f:5e:c0:65:e4:53:5c:10:35:93:30:
                    3c:6f:c9:ff:46:7b:92:6e:df:48:4a:f1:47:3c:64:
                    a0:f3:a2:88:e5:68:27:77:80:65:fa:c1:a2:99:e5:
                    51:66:73:ff:36:60:af:6d:0c:31:f6:c5:86:5e:32:
                    0d:19:9e:66:11:69:eb:8f:b3:c0:27:9d:f0:6e:3e:
                    f0:c7:d6:24:8f:a3:41:96:30:74:9d:63:d3:26:69:
                    01:60:46:bc:61:5f:ef:72:66:8c:01:9d:48:05:5d:
                    f0:60:03:21:5f:1f:6f:4a:7e:5b:1f:3e:b5:44:8a:
                    f8:3d:ae:66:b7:77:84:0d:96:f7:3e:ae:1f:f1:a6:
                    3f:a7:8f:9c:34:50:06:85:0e:e2:4c:c0:94:ac:ce:
                    0d:df:f0:3d:5d:d1:53:de:43:67:b9:ae:05:51:28:
                    17:d0:41:73:2b:34:a7:30:0e:44:d0:12:76:bb:90:
                    a6:31:8c:f5:4d:17:6e:57:1f:00:25:ae:d8:cb:7a:
                    cc:a8:c4:dc:a9:d2:ff:f6:0b:49:d3:55:43:ab:47:
                    4e:89:85:90:2a:d4:aa:9e:14:9b:19:c0:68:39:4c:
                    d3:53:f6:af:55:03:db:32:66:90:d8:4c:54:67:a7:
                    4d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0B:77:E2:40:79:CE:93:96:BA:9F:E6:B4:AD:EA:C3:64:8D:7E:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/d967d62e-ad0b-3ec5-885d-d5a9420c4481.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.219.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:42:99:f3:5c:d1:26:18:4d:18:56:b3:c6:14:79:aa:5e:bb:
         a3:c2:3c:8a:a1:35:21:34:5d:c3:cf:44:10:19:3e:ab:65:0b:
         48:3d:ac:fa:1c:9c:d9:a4:90:d1:cf:b7:92:1e:5c:7e:25:db:
         db:ea:57:3c:e8:60:77:62:f1:05:57:22:14:4b:87:74:c4:d7:
         e9:6b:26:89:53:81:9c:a2:24:84:16:e7:41:d4:f4:c6:aa:e2:
         73:1b:8d:34:1c:09:8e:58:85:ad:b9:47:25:d5:11:bb:85:6b:
         d3:c7:70:02:78:58:ec:23:da:4f:7b:f8:04:b2:46:6a:a5:04:
         ca:50:5e:a9:96:f1:94:b5:f0:d0:01:c9:f4:bf:68:ab:e2:b7:
         b2:21:8a:95:c0:60:87:61:9e:7c:3c:ee:3a:6d:83:8f:1f:fa:
         e4:ef:e2:74:b0:62:28:ab:8d:a1:a2:0e:3f:fc:e2:6d:87:44:
         27:81:de:a0:42:6b:0b:63:2e:a2:13:99:86:3b:55:1e:db:48:
         cd:c7:df:2d:09:de:a0:d1:3a:ec:49:0b:c7:c0:d7:6d:29:b1:
         78:c3:68:9c:49:a1:6f:3b:70:a8:2b:6e:ac:6a:c5:df:a5:15:
         c9:dd:4d:6c:be:a1:8e:3d:93:94:02:dc:d7:62:70:a7:69:0f:
         03:2d:78:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 14:35:05 2025 by rpki-client