Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/36dcd74a-01ba-35bf-a6aa-95841d136d7a.roa
File:                     36dcd74a-01ba-35bf-a6aa-95841d136d7a.roa (raw, json)
Hash identifier:          /UJmgkrwaIK0tKVUI9ZR7ikQU42qnHQHWhDX66yntoY=
Subject key identifier:   F0:DA:8F:9E:EB:1E:43:DD:5F:C7:77:91:1F:09:CA:0A:67:91:DE:01
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584F30527C80D5AC846DDB84AC80
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/36dcd74a-01ba-35bf-a6aa-95841d136d7a.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     26744
IP address blocks:        68.170.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:7c:80:d5:ac:84:6d:db:84:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=e3306019-b845-4c7e-b70a-48b38b0165bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:55:3f:ed:10:80:5d:46:37:d6:3e:7b:66:bf:
                    c2:36:6d:83:5a:b3:63:1e:59:49:9a:60:63:31:23:
                    da:5a:2c:34:80:8b:50:02:75:f0:50:34:69:d9:89:
                    d4:01:51:ed:8d:99:27:49:92:f8:8f:3b:d5:a8:9c:
                    23:af:53:ea:98:0d:bd:85:49:fc:13:3b:57:e2:93:
                    bb:2d:fa:b3:57:17:d2:a3:42:03:0a:12:3b:37:48:
                    37:75:eb:e5:89:8c:c8:e8:91:19:a1:66:0e:61:40:
                    d3:92:ec:70:f5:d0:ce:df:38:04:4d:ea:8d:a8:8d:
                    89:68:2a:b1:e6:d0:7a:b0:55:d1:df:dd:c8:9f:74:
                    45:aa:27:68:e8:a1:8f:a2:6e:47:68:35:28:a9:4c:
                    5f:6b:31:88:53:81:d4:4c:1f:a7:c9:b6:14:9a:07:
                    ab:43:6b:64:eb:3c:3f:31:8f:09:c1:5f:41:f0:67:
                    ac:49:f0:78:25:72:ee:cd:3f:cd:97:7e:79:60:fb:
                    8b:23:2f:cd:c4:be:15:2e:9a:47:54:54:d1:8e:2e:
                    d2:e9:44:35:9d:72:86:6a:ea:d9:91:d7:86:71:31:
                    cd:cc:d7:d9:70:bf:32:86:03:df:d4:3d:b8:33:94:
                    ad:32:08:3b:ea:ed:46:3e:68:c0:49:21:d5:19:7d:
                    15:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DA:8F:9E:EB:1E:43:DD:5F:C7:77:91:1F:09:CA:0A:67:91:DE:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/36dcd74a-01ba-35bf-a6aa-95841d136d7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:96:af:83:35:58:68:00:39:49:3a:ff:c8:17:70:de:c6:a1:
         50:f3:40:00:e7:64:3c:8c:27:47:7a:90:7d:41:e5:b3:ae:08:
         16:74:b2:a8:13:6e:87:56:61:33:8a:64:c4:a1:73:71:a3:42:
         bf:3f:3d:bd:9e:16:77:e8:21:44:f2:42:69:56:ed:9b:85:2a:
         94:eb:64:d7:71:d7:1d:9d:fe:3e:f0:c2:1e:e8:20:43:66:eb:
         6d:ba:30:f4:16:02:24:8b:61:f6:9d:9b:40:40:f7:70:9e:8a:
         63:5d:60:6d:8b:15:4d:15:50:d1:03:4c:7e:da:74:31:29:b1:
         28:de:39:a6:90:10:bd:34:93:62:fe:d1:43:9d:2d:53:81:9e:
         02:02:90:22:70:f4:d3:1d:d9:be:62:b1:05:d2:92:5f:fb:1c:
         35:4e:a4:82:6b:51:fe:97:6f:7b:7c:22:bd:2f:36:bb:57:64:
         9d:7c:9e:98:44:c5:41:aa:34:d7:9d:2e:30:90:43:5a:6d:ca:
         9b:e2:81:47:24:d6:82:9a:33:3b:eb:9c:27:cb:d4:bd:1d:5e:
         9e:78:bd:27:e7:a3:8c:1d:9c:b6:67:df:79:9a:1e:fa:58:f5:
         60:83:5f:ed:c8:07:97:80:e0:3b:03:d2:26:98:7d:b7:ee:03:
         ee:a8:7a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:54:19 2026 by rpki-client