Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/14d7f8be-cc1f-3049-af7f-accdf81cb5e4.roa
File:                     14d7f8be-cc1f-3049-af7f-accdf81cb5e4.roa (raw, json)
Hash identifier:          mrz50Lt4ln2Ht1qgLuRS3wK7tht+xA3TX3fy0EE5AP8=
Subject key identifier:   56:E0:ED:C7:BA:8E:62:22:61:C6:40:FD:54:8B:AB:20:AA:57:A3:C9
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584EA79852672ECE378DF94C3100
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/14d7f8be-cc1f-3049-af7f-accdf81cb5e4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     376
IP address blocks:        206.167.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:52:67:2e:ce:37:8d:f9:4c:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=bb5db2b9-9855-4e69-8f5e-437798fc7320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:51:9e:57:09:66:c9:b9:87:3e:79:50:11:fe:
                    a4:86:99:0c:8f:46:11:ae:dc:27:54:bb:4a:94:a3:
                    75:19:08:9a:d0:68:aa:91:3f:e3:46:9a:c8:f0:7b:
                    eb:cb:3f:c9:ce:25:f0:6d:da:7b:4e:58:70:07:09:
                    9b:df:38:48:5a:64:8d:d0:2b:e4:00:bc:90:07:7b:
                    0c:7d:7e:33:17:9f:4b:8e:6d:d9:78:91:74:bb:a7:
                    d1:90:a3:b3:fd:c2:aa:2e:26:b8:a4:39:ed:8b:c4:
                    23:69:8d:2c:04:bb:92:1a:e0:e1:89:cd:02:bc:5b:
                    4b:01:9e:52:99:b7:ac:cb:45:46:72:c9:15:c9:93:
                    21:f7:87:ff:eb:6c:9c:3b:e4:e0:62:1c:66:25:53:
                    22:19:12:d6:d6:0c:89:0d:c0:4b:69:cd:c6:df:c3:
                    42:0a:ec:04:ba:c5:a6:5b:d6:9b:ae:de:6f:c2:8a:
                    44:9b:1e:d4:17:20:3e:3b:1e:aa:d3:db:37:f7:3a:
                    0f:01:fe:af:a9:85:12:96:58:96:f9:d2:d8:67:11:
                    fe:5a:3c:a4:2a:42:f3:4c:eb:14:72:08:e0:35:02:
                    0c:0b:9d:03:63:24:c0:10:35:52:f2:26:9b:aa:24:
                    04:13:66:55:1e:0a:6d:6b:11:62:43:a8:9e:15:ba:
                    d2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E0:ED:C7:BA:8E:62:22:61:C6:40:FD:54:8B:AB:20:AA:57:A3:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/14d7f8be-cc1f-3049-af7f-accdf81cb5e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:d1:72:87:98:82:87:fa:9e:42:33:1d:19:09:d4:a4:e7:a5:
         ea:31:31:07:99:11:13:33:88:fb:dd:05:8b:08:61:3e:73:a0:
         56:e9:44:88:67:be:78:68:0c:8e:0d:86:d5:52:50:d2:fc:ce:
         34:01:d6:2c:f2:cb:31:8a:7b:f8:39:18:8b:fb:71:bb:f9:8d:
         0e:29:7a:ae:a5:ce:db:96:9c:b9:15:68:8f:02:40:a8:0a:99:
         7d:93:03:f8:e3:ce:61:29:b0:5b:18:5c:b8:07:5e:3b:85:82:
         6d:37:f9:f5:ab:b5:c2:fa:e4:99:4d:34:45:b8:4e:6f:a3:45:
         23:fc:63:b6:50:64:d3:d1:5d:6c:a4:e6:c1:07:f0:10:4e:a9:
         f6:7d:37:88:a9:b4:a7:b7:d8:5d:32:79:eb:1c:81:69:23:fe:
         67:b8:78:64:86:db:12:67:98:0a:5a:45:6b:6e:56:7e:82:e8:
         36:08:87:c3:02:7d:f7:d6:5f:5f:cd:68:6f:bf:bb:d0:73:e4:
         2a:f8:f2:68:c7:0a:ca:16:01:76:e7:99:a6:6b:b7:75:ba:9e:
         88:b0:bd:e9:d6:9a:bd:96:27:51:ad:d6:4a:b9:58:6f:70:20:
         85:eb:a5:88:2c:24:11:0b:1d:ea:d5:b0:04:6e:8b:d1:ac:7c:
         27:45:6a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:51:01 2026 by rpki-client