Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/cc062a38-897b-3cce-9ca5-4e33c8a1b388.roa
File:                     cc062a38-897b-3cce-9ca5-4e33c8a1b388.roa (raw, json)
Hash identifier:          ecVRSBnL8GDJN5aE0uHddUwp8TwQCd3OsRQgUgnmmjk=
Subject key identifier:   DC:A0:7F:77:98:F0:26:55:F0:BF:D1:A0:9A:70:90:F8:91:15:31:45
Certificate issuer:       /CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Certificate serial:       010D0C9F4328584EA6F0C1CF9165B9D1B3765780
Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/cc062a38-897b-3cce-9ca5-4e33c8a1b388.roa
Signing time:             Tue 28 Jul 2026 19:57:48 +0000
ROA not before:           Tue 28 Jul 2026 19:57:48 +0000
ROA not after:            Mon 26 Oct 2026 19:57:48 +0000
asID:                     26337
IP address blocks:        162.251.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a6:f0:c1:cf:91:65:b9:d1:b3:76:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535
        Validity
            Not Before: Jul 28 19:57:48 2026 GMT
            Not After : Oct 26 19:57:48 2026 GMT
        Subject: CN=465a7c12-8a28-45bc-9875-0dfd2bc49cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e4:bd:b1:4b:33:12:ec:01:a2:0e:ef:d9:7e:
                    98:1b:99:49:9f:53:29:92:49:93:72:bc:7a:72:59:
                    f7:32:c6:39:5a:03:bb:5e:ca:0c:c9:58:9a:48:92:
                    04:9f:3c:bb:55:e6:f2:80:87:99:87:bd:51:d6:07:
                    d3:ba:f7:6e:63:c7:9e:79:bd:75:1e:4c:6b:18:bd:
                    87:1f:94:4b:92:7f:75:83:cc:e6:03:d1:4d:9b:d3:
                    4e:35:70:a3:2f:60:f5:66:6b:c2:06:f0:84:88:39:
                    e1:42:2e:d2:33:4b:af:c5:a1:aa:45:dc:c4:f8:b5:
                    4b:5c:b7:5c:9e:93:cb:c0:49:17:b4:31:8e:fb:94:
                    8c:75:57:e5:a4:63:8f:ae:7e:1f:a9:13:27:25:fa:
                    40:20:bd:21:09:f7:1a:27:42:75:3f:38:fc:7b:f0:
                    e4:e9:70:0a:6c:19:d2:ec:2c:12:39:e1:ba:a8:45:
                    59:34:e8:7a:01:e4:8a:38:64:94:78:dd:e8:44:be:
                    bd:17:73:6f:49:93:90:c7:02:71:3b:57:db:6b:e6:
                    f7:f1:0b:c5:ce:1c:b4:56:2a:4f:31:00:30:7d:1d:
                    8a:b9:e2:80:ee:d4:7b:21:24:06:58:ce:18:be:60:
                    f4:b4:0d:bc:07:22:24:ba:95:60:c1:99:60:be:50:
                    33:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A0:7F:77:98:F0:26:55:F0:BF:D1:A0:9A:70:90:F8:91:15:31:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/cc062a38-897b-3cce-9ca5-4e33c8a1b388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl

            X509v3 Authority Key Identifier:
                keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.251.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:d4:68:d9:9c:ea:5f:0e:36:c4:ec:9b:2c:ed:75:30:be:65:
         ca:c8:26:4e:09:3c:6c:fa:52:93:5a:8d:f9:52:93:b5:53:a4:
         45:a1:52:78:e2:e4:4b:56:af:8d:d9:20:ca:28:c0:fa:2c:bd:
         66:2f:ca:f4:0d:57:2f:db:8f:62:8c:ac:74:de:bf:71:2a:4b:
         6d:d8:fd:c3:78:38:d0:c1:3b:2e:b9:9d:11:89:1f:fe:27:7e:
         32:87:f1:f3:8d:c2:8b:7b:27:30:ed:c0:ea:e6:d8:85:ce:86:
         d5:88:cc:d5:d8:f7:d6:ca:4e:d3:9d:c2:f2:88:78:0c:3a:b9:
         05:59:7f:5f:4e:2e:d3:ed:48:38:98:30:65:39:a2:09:c8:88:
         25:ac:bf:2c:3b:36:ff:d5:2e:f2:89:17:e7:3c:45:cc:17:f6:
         cf:27:e5:16:b4:f4:18:bf:fb:4e:b5:63:95:12:07:de:cf:a9:
         29:14:ea:eb:d4:6e:cb:59:86:5a:35:dc:95:25:6f:58:e0:35:
         a7:1a:68:28:ed:0c:55:de:ea:fb:07:10:ac:4b:d3:8c:98:85:
         18:8a:cd:59:b6:3a:de:4f:b2:ef:39:f2:70:ac:26:ae:12:ef:
         ba:05:80:f2:13:d4:77:92:96:d6:e2:f3:55:39:da:7a:59:54:
         a4:76:83:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 07:04:40 2026 by rpki-client