Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/257e9e6b-918b-321c-8d0b-506b47ac5e16.roa
File:                     257e9e6b-918b-321c-8d0b-506b47ac5e16.roa (raw, json)
Hash identifier:          3KM03nR+9nJ68JOTsSSiGrzSEv5OgWYjW0LfD1q236c=
Subject key identifier:   FA:94:A2:7A:A1:6D:AA:89:AD:70:F9:48:43:D6:8A:2C:BA:D9:9C:37
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584F0672473C96FECC39705CB440
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/257e9e6b-918b-321c-8d0b-506b47ac5e16.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     26744
IP address blocks:        162.247.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:47:3c:96:fe:cc:39:70:5c:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=df38502e-f7c6-4d6a-b371-1989af507996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7e:b6:57:ba:c2:14:38:78:2a:9f:9e:f4:3f:
                    f6:da:90:61:88:c1:3b:65:fa:3a:96:79:81:c2:09:
                    1f:79:27:14:1e:8a:6e:05:c5:75:13:dc:a1:2d:ec:
                    60:b9:cf:fc:30:ec:8d:78:d6:2a:af:77:e9:e0:62:
                    82:a6:bd:51:4d:5e:42:c7:0d:a9:4d:84:5b:99:5c:
                    6b:82:93:2c:53:6e:e9:49:cb:ed:50:fe:6d:85:d5:
                    39:46:89:86:47:9d:c5:95:90:95:1e:5b:9a:35:f7:
                    1a:12:03:dc:86:48:20:a9:72:da:d3:1c:59:36:f0:
                    5e:7b:36:d1:d8:13:95:53:f4:6c:d6:4d:58:d1:79:
                    9e:9d:a8:c6:0c:8b:89:ef:4b:a3:95:c3:e1:f5:60:
                    0c:59:87:8e:89:9c:a8:53:ed:ac:61:40:98:bd:24:
                    23:1a:76:6b:a1:56:f0:56:dc:c1:a1:65:50:10:54:
                    fe:02:04:e9:28:52:c7:c5:ee:50:38:02:cc:99:d9:
                    6c:d3:0a:51:42:f4:5c:23:fd:07:c5:18:94:4b:81:
                    af:d2:e4:da:89:73:13:fb:75:56:e2:32:ba:60:45:
                    e5:bf:73:63:6c:b2:48:da:e3:d7:bf:d9:60:bd:1b:
                    83:92:91:b0:2d:fe:95:28:a6:c7:b2:e3:75:d6:d4:
                    27:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:94:A2:7A:A1:6D:AA:89:AD:70:F9:48:43:D6:8A:2C:BA:D9:9C:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/257e9e6b-918b-321c-8d0b-506b47ac5e16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:ea:63:9e:02:c3:88:41:e4:23:15:57:fa:69:ae:d9:54:d8:
         fb:ba:52:7e:62:1c:37:35:57:6a:07:c5:be:30:7d:69:1a:21:
         cf:a3:7f:c7:1f:f2:09:28:44:7d:4f:d0:65:5a:f5:48:7b:08:
         da:6d:ee:0b:02:6b:a9:94:3b:38:26:ea:45:1c:76:03:b6:ae:
         7c:bb:8f:0a:f0:88:cf:8c:b5:13:dd:a2:b8:df:da:10:73:08:
         de:f6:a5:e9:7c:37:df:c0:6b:22:a9:3a:3e:09:5b:08:f7:bf:
         24:76:04:3b:55:17:2c:ad:7b:9f:7f:9d:fe:30:96:cb:29:b7:
         7b:73:9e:00:ee:9c:14:c5:09:aa:59:40:ba:f6:b6:1c:a9:a1:
         00:82:0a:fb:19:d0:2c:fc:52:6e:b1:2f:bb:04:42:48:dd:fb:
         6f:67:0c:72:47:89:c7:e4:9d:ba:7c:4c:be:57:06:5a:45:0b:
         b9:d1:7f:74:cd:9b:19:d6:d6:6b:39:d1:d8:91:49:b6:25:b1:
         8b:90:5f:11:62:a6:a7:9c:1b:2f:18:7d:c6:ac:29:bb:6d:56:
         20:10:0b:a0:8a:6c:41:7f:b8:03:67:e1:a4:4c:bc:fc:36:7f:
         46:b3:e7:13:73:bc:8f:0f:85:0c:cc:c2:8d:03:4f:7d:0c:76:
         d2:6b:8d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:09:17 2026 by rpki-client