Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/037ef550-7968-3868-af23-a6bf0dbbed55.roa
File:                     037ef550-7968-3868-af23-a6bf0dbbed55.roa (raw, json)
Hash identifier:          pE24rV0O25CCRkytkopvX45W6NaEpqlKeR9XL4mUZsQ=
Subject key identifier:   00:D6:DC:AA:6B:7D:84:8D:94:87:11:84:94:D9:B7:44:08:5F:05:FF
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584BC2706EBFC76A5732620B4A00
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/037ef550-7968-3868-af23-a6bf0dbbed55.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     26744
IP address blocks:        68.170.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:6e:bf:c7:6a:57:32:62:0b:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=d330956d-8619-484c-97c3-3e65b8284a89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4a:e9:0c:ba:d5:36:88:6c:1b:a1:61:93:a7:
                    7e:83:63:f1:78:65:d7:9a:cc:ff:e8:ff:40:45:0b:
                    a0:3b:08:91:76:3a:c1:a2:e1:b5:97:a3:66:f2:d1:
                    73:be:3b:58:a9:50:70:14:3e:fb:51:45:79:c0:ed:
                    02:e4:f8:25:94:48:af:62:87:bc:e3:91:2d:a8:e0:
                    11:d6:02:6a:fc:4e:46:f0:3b:f4:fa:f1:25:96:8b:
                    34:f7:01:0f:56:f9:73:e5:6c:1f:42:84:0d:27:ff:
                    94:59:6e:96:dc:ec:05:11:c2:c5:a4:62:bb:1a:f6:
                    35:7b:be:22:cd:88:be:7c:0a:96:65:0b:5a:a8:2f:
                    3a:2e:7d:32:38:09:75:47:b2:c9:63:68:d5:4e:33:
                    95:ea:26:5f:94:f1:37:8c:63:de:31:a5:aa:63:e7:
                    fc:0f:4f:eb:c9:7d:16:33:19:1b:ea:d4:d4:f8:3c:
                    e9:31:b9:ba:20:76:2e:27:69:f4:07:e7:98:cd:5c:
                    86:10:2a:17:85:f3:3d:c3:b7:0c:e9:b0:f2:2c:6d:
                    6f:24:dd:a1:58:4b:a5:d4:e0:9d:34:a2:b8:44:26:
                    62:2d:91:97:98:63:eb:89:9e:36:d4:b9:e5:03:f1:
                    63:23:18:eb:99:34:9d:0f:48:cf:c2:33:60:fd:84:
                    26:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D6:DC:AA:6B:7D:84:8D:94:87:11:84:94:D9:B7:44:08:5F:05:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/037ef550-7968-3868-af23-a6bf0dbbed55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:d5:dd:ef:bd:70:3c:fe:e0:41:fa:8e:a7:f5:eb:41:d7:8f:
         3b:66:da:0d:b0:e0:56:02:54:d4:b5:af:e1:64:4c:ba:67:7e:
         e2:10:9f:5f:df:77:d2:0d:82:db:76:b4:c7:ae:99:ee:a9:4a:
         04:8c:9b:19:73:f2:d9:72:8a:14:c8:12:30:f3:62:4a:94:cf:
         ec:b7:77:6f:e0:3c:35:62:0f:bc:fa:ce:99:c6:5a:c7:64:76:
         54:bf:30:02:43:a4:0c:f2:d3:77:08:92:35:71:24:53:33:08:
         e9:cd:3c:8f:3a:0f:ed:da:66:16:2a:87:7a:05:ba:23:6b:ed:
         64:dc:47:e8:3c:a1:ad:be:0b:9c:69:b6:ff:df:dd:ee:73:4c:
         24:58:f2:4f:0b:1a:81:cf:62:8a:57:24:b1:1c:db:b9:e4:2b:
         c1:c1:a6:28:51:d8:3c:e3:5a:d9:f8:9d:a8:b4:8d:dc:a9:b0:
         70:72:bc:1e:61:b0:0c:9f:a9:5e:5f:3c:18:9f:bb:6c:d9:db:
         39:3e:a6:56:cf:f4:28:c0:04:e6:d4:17:ca:5b:22:d0:a5:ec:
         e2:16:d3:99:09:fa:76:df:6c:95:0b:24:36:3f:47:cb:34:0b:
         ea:8c:35:4f:73:90:ac:62:c2:82:a8:63:f0:22:d2:e8:55:3a:
         f7:6e:f4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:10:53 2025 by rpki-client