Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/26ae6838-38b4-340f-bed9-0bf33c3f4b61.roa
File:                     26ae6838-38b4-340f-bed9-0bf33c3f4b61.roa (raw, json)
Hash identifier:          LFNSq9ZmvapCyQT0BM7uyWgTHJ+t9rULdXxwI9q9JUc=
Subject key identifier:   01:17:85:5A:23:C0:29:79:0C:2E:86:96:E9:C9:F9:67:62:B3:CB:74
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584BC2706EFEA5CB029C8C282F10
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/26ae6838-38b4-340f-bed9-0bf33c3f4b61.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     26744
IP address blocks:        68.170.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:6e:fe:a5:cb:02:9c:8c:28:2f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=31f98bba-a233-4dfc-9f3b-2125683e43da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:87:6d:80:23:2b:91:39:6a:59:c6:0b:b3:53:
                    ca:56:00:8a:95:c4:41:8f:6c:9e:de:68:69:56:73:
                    72:e2:3b:0a:e4:d0:a5:86:ea:44:4c:24:83:4e:b6:
                    08:8d:a2:8c:80:26:94:79:79:6c:e0:14:1a:e6:13:
                    63:5d:c4:19:a8:38:85:42:94:60:6b:73:10:3c:4e:
                    48:39:49:65:f5:6c:b8:ff:68:f7:59:fb:13:fb:5f:
                    bf:85:55:4a:1c:eb:60:74:99:fb:c9:d5:13:e4:22:
                    e9:b6:16:b4:2f:30:bf:14:95:f7:6e:8f:46:9e:71:
                    f9:f5:0d:36:62:a0:78:cf:5d:e7:8d:f5:73:64:9f:
                    52:4a:52:fb:c1:d4:c5:c4:a7:0c:34:2b:d5:b1:b9:
                    4d:6b:ea:0a:41:a9:f1:be:72:85:46:6f:dd:68:80:
                    52:f6:89:63:a6:4e:85:9c:eb:ca:27:de:31:2d:48:
                    f3:71:c5:04:3a:50:62:c1:34:d5:4b:eb:27:ae:2b:
                    13:88:95:7e:ff:3b:db:85:93:d4:ef:1f:9e:12:c0:
                    d6:b5:14:bf:23:97:b6:8d:a0:47:08:01:4e:49:3c:
                    df:5f:fd:cc:ce:7d:c1:e5:33:c4:10:14:ba:62:eb:
                    2e:54:c0:c8:ff:fb:51:7c:9b:69:d2:2e:f6:c8:b3:
                    33:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:17:85:5A:23:C0:29:79:0C:2E:86:96:E9:C9:F9:67:62:B3:CB:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/26ae6838-38b4-340f-bed9-0bf33c3f4b61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:ee:f1:5b:aa:ea:c7:e0:d8:43:c5:a6:39:a1:b9:e7:8a:be:
         26:fd:15:cf:41:ed:e0:d6:c2:82:33:ae:36:9b:5a:41:7c:95:
         08:37:0c:f0:54:9d:91:63:a9:16:e0:de:d9:e9:43:cc:6c:d8:
         ad:2e:6e:a4:fa:54:23:b4:42:43:bb:f1:a0:b4:76:82:05:d2:
         ef:95:9f:a8:26:42:e5:4d:6e:d2:61:be:3e:6e:a5:e2:49:55:
         25:a3:6b:48:4b:90:e3:4c:d7:1a:6c:c0:4d:78:54:83:12:f2:
         b3:10:7b:22:48:47:00:ac:79:ed:76:63:8c:93:11:6b:9d:18:
         4e:5c:8b:c8:55:a9:92:6c:ab:4c:d7:be:d6:57:bc:59:a8:9c:
         33:98:80:b1:47:9c:23:1d:3c:8e:0d:01:96:2e:8d:08:94:17:
         67:ec:3a:7f:38:33:1d:3c:87:50:b1:64:74:3d:b3:ab:6b:4f:
         07:e9:4a:31:dc:b9:7f:75:9e:d2:97:b3:c3:7a:e9:c9:42:85:
         a5:e3:99:2a:6e:d4:8f:e0:d5:05:37:38:a9:62:c2:52:49:57:
         f9:22:c2:80:a3:1b:ad:74:61:e1:a9:58:74:b6:64:82:79:3c:
         8a:84:fe:a9:18:cd:42:2d:e2:87:76:58:49:56:a5:18:99:b1:
         1e:19:99:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:32:07 2025 by rpki-client