Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7893e0d4-9358-36ee-8995-d40319972b35.roa
File:                     7893e0d4-9358-36ee-8995-d40319972b35.roa (raw, json)
Hash identifier:          ogAHQuCXOsXYg0L/pNcvKrfmLtJrjsqGR1Mn6ORTI7c=
Subject key identifier:   50:B4:75:AC:2A:8D:2B:AC:BD:C1:AF:5A:20:07:15:F6:27:DA:CE:CC
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858499829E8036F8874542FD42B40
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7893e0d4-9358-36ee-8995-d40319972b35.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     376
IP address blocks:        206.167.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:e8:03:6f:88:74:54:2f:d4:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=900a3b09-cc5b-4e86-9f9f-4c595dae42af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0f:03:01:46:7f:94:48:3b:3a:8d:f8:5e:67:
                    ed:f7:ef:9c:04:ac:2f:2f:be:d6:ab:2e:60:a9:13:
                    96:a9:3e:1e:f6:cf:cd:9b:00:db:7c:fd:42:2f:ac:
                    29:fc:dd:e6:7a:23:cd:54:3c:c8:ef:1b:82:30:9f:
                    cd:c1:1b:f5:d4:72:80:7d:77:1b:71:d5:21:12:cb:
                    ba:44:63:63:dc:d7:66:54:44:6d:9c:c1:6a:b6:83:
                    78:8d:dd:aa:47:b8:cf:e2:4d:ff:e7:b4:9b:0d:92:
                    15:4f:c7:6e:c8:13:34:9a:11:1c:71:5c:d4:31:d2:
                    8c:fa:ff:18:b5:a8:38:a5:74:70:39:c6:9f:e6:46:
                    7b:38:3d:ef:45:01:45:47:67:ae:31:6f:fb:a0:4c:
                    15:76:4b:9f:05:2b:d6:14:64:ba:b5:6b:43:bb:d5:
                    96:87:fb:b3:bd:e5:bd:45:fd:f1:03:11:14:d5:e8:
                    b0:e9:ca:f8:81:ab:c4:01:26:8d:09:19:57:12:58:
                    a9:b6:06:37:2e:e6:e7:99:5e:29:ab:61:4e:5e:b4:
                    26:e0:37:a2:5b:9d:b3:1b:4f:51:2e:2b:b7:87:d2:
                    4c:4a:e7:d0:31:18:36:22:6a:00:bb:74:e5:ea:d0:
                    2d:75:35:17:9a:1f:86:1f:a8:a0:83:30:69:da:76:
                    49:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B4:75:AC:2A:8D:2B:AC:BD:C1:AF:5A:20:07:15:F6:27:DA:CE:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7893e0d4-9358-36ee-8995-d40319972b35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ed:25:1f:57:ad:8f:d2:c3:2a:ed:9d:dd:3c:b1:ba:ab:ae:
         39:9c:81:a5:98:71:b6:8a:8e:34:42:2c:31:be:94:8c:cc:df:
         11:4d:e2:4a:ef:92:ae:1b:5b:03:89:c6:38:58:da:0f:81:0b:
         e6:87:67:8a:1e:b5:9e:5d:62:8b:6d:0f:94:62:55:b6:70:af:
         be:b5:61:17:f4:b1:3b:d1:a2:ac:24:13:5b:ae:c8:3f:73:82:
         25:44:88:14:cb:05:a3:59:fe:c2:b2:17:5f:a1:e1:82:a2:55:
         42:7f:0a:b4:80:3b:88:3b:5f:5a:60:df:a2:df:f1:ee:5a:b9:
         dc:24:cb:a1:2f:3b:61:c7:4a:1d:ca:2b:41:69:cf:5f:f5:5d:
         9f:a9:47:a4:4b:65:b9:97:99:3d:75:3a:1d:f5:61:45:65:46:
         f1:08:29:bd:ed:2a:45:f6:db:f4:e5:34:b4:34:89:39:0f:2f:
         bf:10:b6:0e:ea:ef:5c:2b:80:48:de:16:30:77:4e:8a:15:47:
         d1:f4:46:35:eb:38:94:69:7f:af:54:f8:ba:34:9a:31:c6:e8:
         96:ea:b5:f1:5e:ab:48:c5:ef:b9:81:48:31:d3:f2:e0:13:6d:
         85:1a:31:e1:cc:9d:1d:89:ad:d1:16:d0:c0:e1:c5:35:02:13:
         d6:4d:6e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:51:28 2025 by rpki-client