Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/b148693d-3642-3e28-88dd-d6eaad9bad25.roa
File:                     b148693d-3642-3e28-88dd-d6eaad9bad25.roa (raw, json)
Hash identifier:          pz5uODqj0GX3uddRm5BF8uOHisyNCJOBdAYdafVudSw=
Subject key identifier:   D5:30:47:28:71:A5:A0:F0:C4:BF:00:34:E1:77:6B:3E:D5:EC:7A:07
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584F06724637547AC86C1AAD5300
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/b148693d-3642-3e28-88dd-d6eaad9bad25.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     26744
IP address blocks:        68.170.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:46:37:54:7a:c8:6c:1a:ad:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=00f4bd60-e9c6-4fbd-b1e2-c8f278394e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:ec:ab:f2:cf:cb:eb:1f:47:73:6c:42:dc:
                    d9:3d:3b:8d:16:ac:96:0c:81:42:07:05:97:d2:70:
                    b7:4e:5c:51:41:91:e7:84:07:80:cc:cf:9d:05:ee:
                    59:0f:33:1f:63:67:55:f6:10:da:ed:66:45:2b:96:
                    00:30:6d:9e:5d:d7:6a:8f:cc:9a:c3:4f:7c:aa:48:
                    e1:bc:8e:dd:ad:41:e1:6c:ce:88:de:14:38:e7:1b:
                    79:0d:27:25:5d:20:af:c0:e2:b7:4c:f2:d6:e9:2c:
                    60:e4:f8:28:2c:35:d2:ff:5d:36:fe:6c:78:9e:79:
                    98:90:de:4f:c5:5f:e1:32:fd:0b:1c:f5:07:f2:da:
                    15:3b:33:91:28:1b:24:2f:f8:7a:c3:f8:6d:81:35:
                    f2:9c:d9:dd:79:66:5e:9d:15:ae:5b:a6:a1:7b:ba:
                    79:ce:7d:5c:f4:cc:91:c4:a3:b9:9e:e8:57:fe:27:
                    0b:c8:eb:14:1f:74:9a:63:e5:b3:ab:25:43:72:f3:
                    9f:83:ae:7b:d2:3a:25:89:a3:54:97:94:e3:c6:e2:
                    be:8b:e4:9a:d2:be:b7:79:69:c8:97:10:80:f1:4b:
                    0c:0f:6a:34:5b:53:10:45:1e:6d:25:2f:a3:6a:2f:
                    00:3f:53:1e:fd:83:f7:44:0c:02:09:76:7c:a6:e0:
                    22:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:30:47:28:71:A5:A0:F0:C4:BF:00:34:E1:77:6B:3E:D5:EC:7A:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/b148693d-3642-3e28-88dd-d6eaad9bad25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:b5:87:06:55:de:33:51:00:91:ba:9f:8f:b9:65:54:ca:ae:
         e6:00:a5:c7:3c:ea:bc:0e:71:62:49:88:50:27:71:a2:2a:68:
         8e:5d:ef:fe:08:58:b8:7e:aa:0a:6e:36:67:ef:e5:75:ef:bb:
         7b:e7:bc:9c:8b:07:ab:62:d7:7a:4b:59:dc:6a:fc:1b:53:05:
         e9:d7:d2:bf:f9:3e:e5:0b:62:97:3a:5c:80:9f:d7:e3:a5:16:
         1d:ae:16:37:19:2d:b7:48:9c:df:8e:f1:c5:bf:d5:e1:ed:60:
         66:1a:7a:35:52:93:e0:0a:a5:8a:53:8b:65:fd:ee:b5:1d:53:
         f6:34:aa:10:38:99:41:f2:46:03:5e:69:4a:bd:aa:ce:dd:a1:
         03:41:ce:ce:c3:a8:41:3c:18:2e:17:76:8f:62:ee:b6:4f:bc:
         95:93:02:5b:71:45:25:5b:3c:2c:9a:16:62:9a:b6:e4:22:6a:
         e4:fe:78:c4:12:de:76:d1:0a:7f:94:b3:9d:b7:bc:a7:ac:e9:
         e7:b7:5f:4f:7a:52:2a:7d:9b:d3:7e:f8:22:c1:37:78:92:16:
         cd:ca:ca:9a:3c:99:2d:ab:bb:87:b7:38:e8:2e:f5:7c:bd:8e:
         e3:0e:20:ef:1f:e6:06:23:3f:42:1c:ba:62:e9:4a:fd:f6:6f:
         6b:89:47:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:12:42 2026 by rpki-client