Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/9839c9bd-a878-33ad-b2b2-c19b11817703.roa
File:                     9839c9bd-a878-33ad-b2b2-c19b11817703.roa (raw, json)
Hash identifier:          zw9QxIC/fJDR6FiVm7FCC/Ygg9TzHzaMcsG5CDRUIo4=
Subject key identifier:   2B:58:85:BC:CE:1E:CF:5E:D5:E8:77:4E:3A:C4:28:A2:5F:CC:68:7E
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584BC270708F48E4D7B8720C82C0
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/9839c9bd-a878-33ad-b2b2-c19b11817703.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     26744
IP address blocks:        162.247.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:70:8f:48:e4:d7:b8:72:0c:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=4b71f954-7f78-4434-a413-fc26ac1e901c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:00:92:df:f9:11:a1:a0:b7:f6:9a:f1:04:6c:
                    73:ff:3b:d1:67:20:7d:f6:f2:4c:f1:c0:b3:c4:a8:
                    b3:e9:1d:b1:6c:3e:84:cf:61:4d:8f:d4:58:c0:3e:
                    2c:e1:3c:09:39:1b:33:21:27:fd:a0:df:fa:2d:42:
                    02:37:50:37:5a:6f:5d:fa:9a:88:10:7c:7b:87:9c:
                    ce:dc:a1:ff:5f:d0:c1:ef:be:5e:68:e6:e2:f9:7a:
                    48:fb:a8:28:d4:77:25:94:e8:b2:1e:a9:43:73:b8:
                    be:26:57:08:13:7a:50:ee:0a:b9:2e:d1:66:d5:56:
                    ce:50:2c:45:f4:05:c1:a5:7c:fd:ea:23:df:a6:a9:
                    72:cf:c1:6e:a3:9d:30:9a:1b:47:3b:01:c2:14:bf:
                    5b:1b:56:47:b1:e6:3a:64:b0:91:5b:ad:25:c0:23:
                    7e:db:3b:9f:67:4d:98:72:91:9c:f6:bb:a5:cb:b8:
                    aa:3c:ff:3d:2a:e2:02:cc:a7:c8:5f:ba:46:89:32:
                    42:ff:67:fd:c7:15:72:f6:4a:cf:d6:4f:66:81:f9:
                    dc:bb:0e:f1:36:dc:80:e6:75:cc:34:10:f0:45:b7:
                    fb:e4:4a:42:68:1b:53:ef:13:ad:a5:f3:dd:51:a6:
                    6f:fc:35:d1:3a:db:1e:2f:94:1f:65:e1:9f:cf:e6:
                    c1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:58:85:BC:CE:1E:CF:5E:D5:E8:77:4E:3A:C4:28:A2:5F:CC:68:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/9839c9bd-a878-33ad-b2b2-c19b11817703.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:29:4f:e0:aa:eb:71:aa:b2:14:fd:6f:d6:b3:36:5f:76:72:
         3b:b4:f7:19:1f:eb:c8:d1:ef:48:12:cb:1a:a0:c5:4a:e2:7e:
         43:17:0a:50:22:19:f5:9e:ca:52:45:2d:cb:96:9d:44:14:ed:
         40:9c:d9:b4:8f:c8:cb:1d:7d:eb:2a:82:0c:98:6b:76:d9:3a:
         6b:51:48:47:69:45:e3:7f:09:58:f8:74:71:fd:97:42:4e:6b:
         70:d7:ab:25:01:93:cd:58:a5:39:4b:9b:d0:9b:97:b4:98:89:
         5c:f3:f2:94:0d:ff:63:82:32:57:1b:39:42:64:76:a6:9a:2e:
         e5:c4:5c:61:5c:48:db:77:41:50:cd:88:e6:5b:9e:53:16:db:
         79:20:52:df:d4:f5:0f:4e:fe:42:31:90:a2:d9:43:4e:fc:78:
         a5:a0:53:4d:c3:ae:35:d3:01:40:a2:fc:8a:44:48:02:11:cd:
         2a:81:10:2e:cc:a4:93:60:07:6f:2b:80:32:8e:e7:7a:44:0a:
         2e:58:c5:db:76:77:4d:0d:74:e4:9a:10:1c:09:6f:35:21:17:
         ce:2b:05:e7:5d:4f:b7:89:99:3b:ec:65:85:02:37:d8:ca:e1:
         31:9b:df:32:4f:58:05:7a:9b:31:d8:2e:08:1a:8c:e0:81:e9:
         a7:33:2b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:11:08 2025 by rpki-client