Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/88e3d175-c5a4-3013-946a-49cb10702dec.roa
File:                     88e3d175-c5a4-3013-946a-49cb10702dec.roa (raw, json)
Hash identifier:          C86Cv9X2bfjlVC+70lYwkGVpuVjMao0KvAvSCoWBt0k=
Subject key identifier:   A6:B5:5F:3E:FD:94:90:70:EE:8A:88:36:45:95:68:C1:47:AD:7F:2F
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584F30527BF1278BA190DADCA400
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/88e3d175-c5a4-3013-946a-49cb10702dec.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     26744
IP address blocks:        199.166.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:7b:f1:27:8b:a1:90:da:dc:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=3ddf9cf6-262d-4c72-b8a3-543edc475387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e8:af:76:51:0a:df:64:a1:c7:fa:57:23:6d:
                    86:19:1c:da:bc:34:c0:98:8d:ea:c2:7e:53:82:95:
                    d0:a6:13:04:c9:9e:c5:d2:6c:4e:67:0b:3a:d7:76:
                    dc:35:de:1e:bf:e8:86:87:d7:7e:8b:63:8b:c5:f6:
                    3f:a4:b1:4b:64:f4:3c:fa:5d:41:1a:70:69:8d:a4:
                    44:a2:d8:ee:19:77:81:fe:a4:dc:ff:3b:55:50:23:
                    c0:e8:4f:25:8a:9a:3b:67:f4:01:42:42:02:c3:eb:
                    53:0f:93:23:48:73:a1:71:77:23:71:66:fb:a0:f5:
                    4d:97:9b:b7:67:35:11:16:7c:b8:22:72:fa:85:66:
                    b6:9f:2e:64:fb:aa:d0:6e:69:4f:a3:de:21:b6:66:
                    a8:30:6d:1c:fa:f6:8c:7b:a7:19:b3:83:98:64:92:
                    e6:72:ba:d2:8a:ab:87:48:45:17:11:8b:d6:52:f4:
                    c5:8b:ef:43:25:4e:3a:35:cf:b0:a5:2b:3e:0e:3a:
                    61:df:8b:49:52:7b:9b:8d:8f:50:a6:b5:d1:53:de:
                    21:53:3b:28:76:06:c7:17:c7:81:fd:46:32:67:83:
                    da:97:7c:58:68:54:0c:33:31:89:2f:91:97:bb:ba:
                    96:d6:ed:00:12:38:15:66:fd:f7:54:58:6b:b4:32:
                    82:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B5:5F:3E:FD:94:90:70:EE:8A:88:36:45:95:68:C1:47:AD:7F:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/88e3d175-c5a4-3013-946a-49cb10702dec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.166.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:09:42:d6:58:38:c7:aa:03:64:8c:c3:d0:15:a8:04:4f:cd:
         15:e8:00:f3:ec:cd:23:7a:c1:7e:ca:55:9b:08:1f:14:7b:6b:
         67:c1:09:e3:52:47:6c:e0:ee:9a:31:28:e2:9c:e3:cf:07:46:
         18:c1:48:c2:81:cb:07:95:d7:37:80:b4:db:46:30:e8:fc:a8:
         fa:7b:6b:a4:0a:9b:f5:7b:49:cb:85:c0:34:8d:e0:92:b5:db:
         6f:19:78:d9:01:27:bb:55:2f:14:a0:60:ad:cb:23:15:d2:ad:
         97:8d:4f:84:b7:7b:57:52:22:3c:c9:1c:eb:53:79:ba:e4:c8:
         a1:12:cd:1f:91:ca:a6:12:1d:a9:2c:fb:54:d4:d9:16:11:fa:
         1f:69:75:2f:19:b8:f3:0d:fa:1b:53:f2:de:4e:d0:81:3c:63:
         88:9e:b4:ae:d9:78:c6:35:9d:0c:ea:9b:e8:85:67:f9:e8:13:
         01:49:d2:b0:76:b7:27:2d:99:76:c2:c4:17:64:7c:cd:4e:2e:
         f3:e0:5a:87:4c:7e:ce:d3:4c:90:d3:0f:68:6b:f3:ab:44:0d:
         1f:1d:3a:5d:ff:0b:a7:af:c9:62:4a:c9:75:9f:43:78:8f:da:
         a9:01:3b:bd:84:6c:c5:e2:8b:5e:d2:73:6d:1a:2e:15:45:d4:
         53:76:86:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:39:56 2026 by rpki-client