Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/8bc94d77-81f1-31f2-9793-8b8c39aec503.roa
File:                     8bc94d77-81f1-31f2-9793-8b8c39aec503.roa (raw, json)
Hash identifier:          vhzFcbmlOaEk/zfRCyb0Xdkz2moCb0l4t/jZVGRDTCI=
Subject key identifier:   80:35:3A:3D:DB:B1:E6:B3:BD:6E:0F:9C:36:F5:AA:B2:EA:3C:F9:50
Certificate issuer:       /CN=5c6c3a7f-86b7-4f9a-b2ab-04c827927389
Certificate serial:       010D0C9F4328584A7E7B5DE2E943C94D95FF2890
Authority key identifier: 93:4F:C0:68:0F:B6:73:44:0B:D0:25:EB:63:C7:E7:CF:0A:DD:00:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/8bc94d77-81f1-31f2-9793-8b8c39aec503.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        67.202.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/5c6c3a7f-86b7-4f9a-b2ab-04c827927389.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/5c6c3a7f-86b7-4f9a-b2ab-04c827927389.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:5d:e2:e9:43:c9:4d:95:ff:28:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c6c3a7f-86b7-4f9a-b2ab-04c827927389
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=80f5da55-3859-42da-b401-fbcab649a190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bb:e7:5e:49:41:87:51:15:b8:c8:1d:07:59:
                    f8:97:e0:70:a3:4b:28:4a:0c:0b:a3:99:c4:11:18:
                    44:71:52:8f:6e:98:4a:21:f2:b1:44:7c:07:c1:58:
                    51:58:9e:31:02:28:91:03:ec:86:3a:97:6a:03:66:
                    17:a7:55:22:29:30:66:98:d0:a7:e1:04:e5:11:3e:
                    7f:ba:4a:c2:a5:fc:54:71:91:73:28:ab:43:3f:67:
                    0a:b9:5b:92:91:a9:1a:7b:cd:3d:00:b7:dd:78:46:
                    61:d2:6d:75:46:c8:db:5b:7a:9c:a3:19:f3:cf:bb:
                    62:6c:ef:43:8a:ac:c1:4b:19:4b:f7:04:f2:15:aa:
                    b4:5f:d8:51:97:fc:f9:9b:a4:39:2c:19:24:91:36:
                    b3:1b:12:05:88:02:f2:ab:8a:aa:b1:50:1e:ed:f5:
                    14:1a:a7:7e:eb:f4:17:da:fd:3e:b4:ab:a4:eb:07:
                    b3:ae:24:ed:6f:d7:84:42:7b:b6:e8:50:a0:d9:51:
                    c5:bf:80:b3:f0:4a:43:41:95:bd:f6:06:c2:c6:3a:
                    c5:7e:19:5a:f9:6f:f5:83:60:12:df:2a:ab:8d:61:
                    be:e7:8a:22:79:ca:34:6f:f6:c9:32:7b:41:b9:31:
                    0b:78:f5:bc:1e:76:bf:62:b1:cb:c6:5d:40:6e:22:
                    ad:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:35:3A:3D:DB:B1:E6:B3:BD:6E:0F:9C:36:F5:AA:B2:EA:3C:F9:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/8bc94d77-81f1-31f2-9793-8b8c39aec503.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/5c6c3a7f-86b7-4f9a-b2ab-04c827927389.crl

            X509v3 Authority Key Identifier:
                keyid:93:4F:C0:68:0F:B6:73:44:0B:D0:25:EB:63:C7:E7:CF:0A:DD:00:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.202.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:c9:6a:51:37:0c:82:fc:b2:40:15:93:d6:a2:ad:d2:c1:10:
         7a:76:48:64:a9:01:f3:3b:8b:bb:58:d1:e3:e7:d3:ca:b0:e6:
         ce:ee:a0:86:27:34:26:c4:10:14:4f:c9:4f:d3:7d:9c:b3:37:
         ec:fa:ae:12:fb:44:1f:ba:b8:a8:b4:10:c8:b6:f6:13:8e:e4:
         42:a2:15:26:39:be:58:b9:81:62:9d:61:c7:00:0c:91:cd:17:
         07:d2:ae:c3:29:74:f7:99:44:01:fd:d4:8c:c5:ee:8f:1e:61:
         aa:ee:71:b4:18:42:7b:7c:2e:b4:de:40:ca:05:7d:e1:6b:0c:
         de:bf:3a:8b:58:3c:1c:49:36:73:1a:34:96:31:d6:ec:01:03:
         00:9c:db:ab:e2:9b:91:a5:17:b7:40:0a:69:92:fe:c6:05:e0:
         02:99:72:98:64:42:43:d7:d1:07:f7:07:8c:5c:81:32:9b:89:
         49:9f:76:08:84:6f:8f:97:b3:a7:47:1f:32:29:1c:90:7d:74:
         8b:0a:2d:f5:76:ff:7c:57:22:9a:37:89:1a:8a:33:98:a3:32:
         9c:bf:0e:61:d1:d4:eb:02:cb:d4:ae:c0:5c:58:01:75:b0:ce:
         69:d0:a6:5b:a4:e9:37:4f:c0:af:d3:65:25:37:cf:66:21:5b:
         24:de:bc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:34:55 2025 by rpki-client