Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7d529866-f0df-3e1d-90b5-07acca65da96.roa
File:                     7d529866-f0df-3e1d-90b5-07acca65da96.roa (raw, json)
Hash identifier:          ynzDpxVmoDwGFkf49Fc/2sYBvtDbysCV/0wjX7Z5WmA=
Subject key identifier:   F0:EE:6C:74:86:18:33:C6:55:8D:FF:C5:46:C5:71:DC:23:25:9E:2B
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858499829DFD068AEB157E49B0940
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7d529866-f0df-3e1d-90b5-07acca65da96.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     376
IP address blocks:        206.167.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:df:d0:68:ae:b1:57:e4:9b:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=52933b5d-7749-468d-a5f1-41cf2e68f1b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c4:50:80:78:c4:14:dc:a5:e1:9d:f0:97:dc:
                    6e:09:12:bc:c0:0e:22:55:91:2c:ce:78:b8:8b:0c:
                    0a:d5:f6:b2:4d:19:ed:b3:dd:38:2d:02:38:30:83:
                    09:cd:45:36:01:f8:25:31:00:e3:c0:cd:b5:f6:70:
                    b3:7b:90:4e:9d:fa:34:b7:e8:09:9a:9c:d9:84:dd:
                    2b:eb:f7:d4:47:ab:2e:77:82:50:63:a8:a9:e6:a0:
                    2d:e4:44:88:9a:2c:bd:59:2b:9f:9f:18:45:84:a7:
                    6e:10:10:48:3b:fd:2b:83:9b:f9:1c:7b:08:78:80:
                    75:57:b1:bc:45:79:48:2f:6f:0b:24:2d:12:4e:9e:
                    27:b2:6c:80:46:07:98:94:32:0e:00:f4:c7:d4:8f:
                    52:d4:10:65:ff:e8:06:ab:a5:a6:59:65:86:e1:bf:
                    62:c2:5f:91:f5:d8:3f:77:31:22:db:1d:09:e1:03:
                    89:b8:86:4b:ff:95:c0:e7:19:cf:81:52:bb:94:b3:
                    88:69:01:b2:3a:73:00:86:2c:f2:01:42:de:4b:1b:
                    85:12:76:91:e9:6c:41:a4:2c:5e:61:9c:b0:15:eb:
                    ba:19:b9:95:57:f5:60:ac:be:7e:00:7c:9f:c4:09:
                    8c:15:ba:ab:61:c8:44:b0:75:16:73:88:8c:d6:c2:
                    22:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:EE:6C:74:86:18:33:C6:55:8D:FF:C5:46:C5:71:DC:23:25:9E:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7d529866-f0df-3e1d-90b5-07acca65da96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:b3:e1:ea:bd:c6:31:c3:5b:d6:f2:50:f6:0b:06:5e:15:28:
         ea:1f:9d:43:2a:11:c2:98:5e:22:f0:dc:7c:83:4c:3e:19:14:
         06:52:a6:52:9e:de:6a:c3:2b:8b:44:1c:b8:d6:33:a4:c2:15:
         03:84:c3:06:13:d3:5f:fa:01:63:d7:b0:56:00:17:21:95:a6:
         d0:3b:d1:27:eb:44:fa:0e:40:b0:4e:0d:ba:fd:70:bd:f4:2b:
         35:50:3d:22:f3:43:21:e1:5d:33:46:f3:7a:43:9d:a2:60:2a:
         39:6a:66:bf:89:8c:2c:49:db:55:8e:69:17:53:84:72:c7:93:
         9a:93:92:96:a3:61:f5:a4:8a:38:28:3a:50:55:eb:32:c2:64:
         41:98:ba:3d:40:cd:31:6c:20:f6:91:c1:2f:d7:f0:eb:ab:97:
         31:e9:da:fa:79:95:31:28:f9:2c:17:6b:31:85:a2:54:e0:1a:
         5f:d0:3d:0a:44:5b:a7:e2:a2:c4:2d:11:72:8a:aa:1c:62:b9:
         77:a9:63:4c:e9:42:51:2d:7b:ac:8d:c1:99:73:5f:f6:a6:a4:
         ec:40:c4:79:bf:b1:00:b8:09:df:08:d1:b9:b1:1e:25:88:dc:
         93:7a:1c:a7:d3:e3:df:37:eb:d0:66:6f:be:f7:0e:34:bf:5e:
         54:88:67:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:43:09 2025 by rpki-client