Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/85a17e6f-8840-331e-971c-2bc335581fcc.roa
File:                     85a17e6f-8840-331e-971c-2bc335581fcc.roa (raw, json)
Hash identifier:          PvWHbPa1TWsJS43iQZqtc2BCSI9KETKPdqr4U8j7FAQ=
Subject key identifier:   96:C6:7B:7B:F8:0F:38:E4:3B:FC:4C:AB:7C:52:8B:0E:D3:57:6A:DF
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584E1E4457168D1D0220E8B4F6E0
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/85a17e6f-8840-331e-971c-2bc335581fcc.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     376
IP address blocks:        206.167.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:57:16:8d:1d:02:20:e8:b4:f6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=6152bc3e-25c9-4594-8887-33e56638028d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:46:8a:f0:bf:6a:7d:de:0f:eb:71:c1:d1:84:
                    4c:00:6a:c2:19:e3:49:dd:a4:90:0c:b6:46:24:ab:
                    8c:17:c4:03:60:dd:cd:2e:a6:d6:a8:e8:2c:5d:6c:
                    8f:c7:c6:7b:fe:4c:ca:a4:f4:f4:14:90:d5:eb:38:
                    d0:6e:26:21:8b:ae:0d:21:3a:c5:67:5e:07:71:56:
                    ba:be:23:91:97:32:c6:1f:ed:96:9f:6c:ff:b5:70:
                    5d:0a:10:67:e5:fe:61:b0:55:de:82:89:57:eb:c2:
                    83:70:45:53:fe:42:23:ca:2f:b6:c0:cf:32:3c:c1:
                    b9:63:b5:f5:05:50:42:6b:a1:c1:25:40:9f:92:c2:
                    44:87:08:4a:7f:5d:7b:9d:99:be:d6:20:4e:ba:0c:
                    de:f2:6f:ea:2f:ec:ff:22:cd:b2:e0:73:b5:92:74:
                    6c:4b:8a:b2:fa:13:7e:59:f8:ad:16:41:d5:97:40:
                    60:62:1d:a2:93:e3:5a:9d:1b:bb:05:3b:e9:44:24:
                    bb:93:81:4e:5e:c3:7b:8e:e3:6c:f6:2a:ce:ab:37:
                    98:7b:c8:af:ef:2d:64:be:eb:e1:81:23:88:2a:98:
                    6f:27:e0:1f:e5:46:be:0e:d6:94:14:b6:9c:bc:9c:
                    e2:58:49:64:0a:08:32:37:9a:34:f9:b1:79:22:72:
                    29:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C6:7B:7B:F8:0F:38:E4:3B:FC:4C:AB:7C:52:8B:0E:D3:57:6A:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/85a17e6f-8840-331e-971c-2bc335581fcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:4e:aa:b0:d5:4c:ae:72:c5:93:a0:55:ae:d2:6c:9d:92:fc:
         6d:c7:f0:bb:8f:b3:7b:34:da:ef:67:77:20:49:67:b2:c9:02:
         24:05:ad:d4:09:d3:a9:13:f3:08:e8:4c:5f:90:52:92:9a:37:
         ae:db:2a:f3:d7:fe:57:24:10:34:79:da:91:3a:a4:f4:ef:6a:
         de:1e:f9:a5:b7:bc:35:63:1d:85:2a:ca:cb:fa:77:47:26:29:
         bc:ab:be:50:7d:5b:68:a5:5d:63:cb:f9:1e:2c:cf:7d:6b:e7:
         b8:96:4c:23:27:c8:f9:45:32:fc:7d:5f:3e:d3:f9:3f:af:c8:
         49:6f:79:b1:4f:9b:4d:62:da:34:55:53:40:98:0e:d6:91:0a:
         23:09:76:53:cb:b0:75:f5:a3:20:9f:8c:af:a6:2f:67:45:c1:
         fd:8d:f7:ff:92:0f:c1:d0:49:e7:82:04:25:90:d0:b9:22:df:
         f9:fa:0d:68:a3:68:f2:19:2d:99:02:a2:72:3e:72:0e:e9:af:
         76:d1:3a:d8:b3:9b:4d:aa:22:7e:bb:f1:e8:53:ba:0e:1e:ce:
         8a:67:26:f0:61:e9:23:2a:95:33:fa:f1:3d:49:be:6d:5b:0e:
         bb:c3:40:93:a5:85:fa:ed:d7:e2:5e:c5:d1:09:ea:d0:23:bd:
         1e:d1:f4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:08:44 2026 by rpki-client