Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/94bb4585-ac3e-3f1d-af26-c38ccfefa578.roa
File:                     94bb4585-ac3e-3f1d-af26-c38ccfefa578.roa (raw, json)
Hash identifier:          1c8QnkPdhighgxLtkA2sYUatgz7G+ND3ncqHAZtR3XA=
Subject key identifier:   8B:40:23:58:4E:33:39:AA:EB:47:76:D1:B9:CB:B7:4B:E8:43:CA:A0
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584AA6F62F6D493BDC07B0710490
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/94bb4585-ac3e-3f1d-af26-c38ccfefa578.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     376
IP address blocks:        207.162.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:2f:6d:49:3b:dc:07:b0:71:04:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=fc9324e5-6530-4213-bde0-73ef228c9bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7e:10:b3:a7:dc:b6:ff:bd:dc:1e:2f:73:d0:
                    c8:a5:8a:cf:06:54:cc:c9:52:67:1e:ad:59:81:6a:
                    62:dd:21:56:5f:4d:c6:b9:db:47:d1:b5:0b:36:9d:
                    a9:78:63:cb:dd:d9:c1:33:08:e8:69:26:57:f1:13:
                    fa:80:09:41:58:eb:61:4f:4d:e6:5e:7a:73:d2:e7:
                    d4:52:4f:4a:d7:e8:a8:48:4c:d5:0a:f5:99:db:e8:
                    f8:96:d0:6b:45:2c:be:ee:f2:23:7c:17:13:81:ec:
                    fd:b5:26:c2:fb:2e:1c:0e:44:7b:c1:a4:3a:4a:50:
                    ff:d6:dc:22:03:a3:b8:09:1c:58:5a:5d:4b:a4:33:
                    e7:0d:0a:60:36:15:69:87:20:de:d5:2e:57:35:21:
                    69:54:e6:de:c2:b8:bc:d6:df:f8:74:89:75:ad:54:
                    05:f9:02:4d:d4:db:96:ff:24:17:7f:f6:b8:43:c7:
                    d8:5d:0f:bd:fd:55:97:d5:69:a6:eb:08:d8:53:3b:
                    b1:12:93:25:ba:0a:75:da:0b:5a:20:20:65:9c:fb:
                    82:67:36:da:d7:22:b2:62:e9:c1:a7:ae:b8:32:22:
                    57:36:de:e0:78:f0:62:02:b2:ed:59:02:bc:55:71:
                    08:3b:ec:1f:16:24:b8:27:e2:47:01:b0:6c:12:7c:
                    f7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:40:23:58:4E:33:39:AA:EB:47:76:D1:B9:CB:B7:4B:E8:43:CA:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/94bb4585-ac3e-3f1d-af26-c38ccfefa578.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:e9:2d:94:a2:a1:8c:6d:8e:b3:e9:bd:56:f4:99:b7:a5:90:
         dd:ac:7e:19:41:e0:24:4d:ad:4d:ef:29:69:67:b1:7a:ab:5e:
         b3:40:b8:35:dd:02:f9:bc:70:74:79:fb:48:bb:a8:f8:e0:36:
         a4:10:1b:7c:5a:58:29:da:91:1e:2f:cf:6d:a9:59:c6:3f:c4:
         34:87:48:25:ab:3d:3b:7a:d8:a7:17:e8:c4:f2:37:27:32:ec:
         1b:ae:a7:8b:0b:27:4f:a7:4b:1c:9a:c1:3c:ce:49:89:25:0f:
         5d:ff:33:3a:9a:7b:34:6f:0b:b4:da:e5:8d:33:74:ec:0e:1e:
         e3:3f:45:dc:c8:37:e9:cf:48:3d:5b:40:57:c5:44:84:25:1d:
         0c:11:c8:7b:c9:5f:17:87:d6:08:de:35:61:47:d7:dc:2f:ae:
         eb:29:93:d7:46:d1:f4:60:54:77:5c:7e:05:b0:a8:16:43:72:
         8a:f3:d7:3f:3e:27:39:4e:86:e9:60:40:29:98:d3:f9:1b:2c:
         5b:fb:d4:89:76:fe:e9:81:90:00:a9:c8:bd:b8:2e:60:3d:f7:
         50:ed:3c:a4:4e:64:0e:d9:e3:c2:4b:ce:ff:ac:c9:f6:ee:ce:
         32:ba:92:96:ca:8d:28:d8:09:d9:e9:48:9c:e6:74:e2:ce:fc:
         7e:dc:1e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:18:52 2025 by rpki-client