Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f4f0a900-b310-382d-b883-64f958388735.roa
File:                     f4f0a900-b310-382d-b883-64f958388735.roa (raw, json)
Hash identifier:          PrcROejxYG93I6P2nugtfWw9e4KPzzmjdlYYSJYXxQs=
Subject key identifier:   8C:AC:AD:4C:03:D0:AC:3B:A7:8A:F5:3C:D9:6C:16:2D:DF:0C:BA:58
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584D83CAB2C12E07951078FC5F80
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f4f0a900-b310-382d-b883-64f958388735.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     26744
IP address blocks:        199.166.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:b2:c1:2e:07:95:10:78:fc:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=2c62830d-dde0-41e4-8937-b3b53f4b4a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:13:30:aa:21:ec:c7:2b:28:c6:a7:a3:ce:9d:
                    34:0e:67:05:ec:87:fa:b8:99:64:d7:2d:a2:ac:fa:
                    ff:00:89:b5:de:5f:21:c0:fa:12:0a:0a:c7:73:9b:
                    d3:82:3a:92:0f:cf:09:14:25:77:e7:d2:55:f3:63:
                    3e:a0:a9:10:55:70:6a:96:d0:b9:3b:75:5c:76:18:
                    91:cd:4c:4e:66:1b:1b:be:2f:86:b5:a4:49:92:1e:
                    34:a8:bb:0a:d0:c8:53:45:c8:97:c9:aa:7f:11:95:
                    cb:4e:b7:c3:d1:c7:53:b5:93:32:33:f8:6d:31:0a:
                    c9:b1:26:48:c0:b0:0f:51:45:d7:dd:07:42:5d:b8:
                    29:2f:a0:d1:ca:c4:50:e3:3a:f6:89:e5:68:e8:13:
                    91:6a:5e:1c:d2:a7:08:ea:16:d6:42:c8:db:01:49:
                    a9:0a:c6:80:0c:d9:a5:02:54:bc:28:fb:94:c8:2f:
                    53:31:4a:2b:da:57:a7:5c:6b:4c:4a:f7:0d:4a:45:
                    5d:0c:96:a9:3c:14:50:26:dd:8f:e1:95:91:88:a5:
                    92:16:c7:9b:3f:ea:c2:12:e2:59:2d:21:29:62:dd:
                    86:30:7d:5c:63:ad:0a:46:a9:c6:d6:01:0f:dc:52:
                    2d:0f:58:69:6b:02:e1:f3:36:1f:53:dd:a0:e4:09:
                    e0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AC:AD:4C:03:D0:AC:3B:A7:8A:F5:3C:D9:6C:16:2D:DF:0C:BA:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f4f0a900-b310-382d-b883-64f958388735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.166.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:aa:fc:e5:6c:26:30:76:f1:04:ec:75:7a:30:0b:42:d9:ab:
         f4:0d:08:7e:4f:92:a5:a5:30:95:6f:62:0b:8e:03:88:55:3f:
         ef:38:eb:81:98:59:02:79:9d:4c:fd:c8:0e:1d:b9:e5:85:86:
         b1:48:90:98:89:d2:06:17:03:2c:9a:4d:6c:70:e5:af:85:d3:
         52:8f:be:6a:c9:92:b2:76:ea:da:7a:f8:34:6e:b8:56:07:30:
         68:73:60:8d:53:f1:82:22:db:30:6d:41:63:c4:73:7d:a3:b3:
         ec:0a:e6:26:13:7b:a5:c2:fc:1a:99:35:ef:67:3a:5b:f4:6f:
         20:ff:98:8d:79:2f:95:f7:2b:e1:8d:0d:1b:fa:72:5f:4b:fe:
         f3:03:19:a2:35:bc:91:4b:39:b3:76:c9:8d:97:9e:34:9c:3c:
         a7:ce:ec:bf:09:6e:26:85:c8:9a:a7:b6:ba:d3:ac:e9:15:87:
         0c:18:df:b3:73:cb:1d:1c:01:79:c5:20:01:00:95:ef:88:4d:
         13:14:cb:aa:4c:59:f0:88:e6:7c:b7:8a:df:43:c1:a4:5f:a2:
         f2:1f:90:6b:00:fe:bb:2f:9a:9d:37:ec:00:05:a9:ea:30:4a:
         30:f2:43:1b:ab:ec:29:25:e9:00:ce:db:6a:2b:0b:c4:64:6a:
         53:14:19:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:40:31 2026 by rpki-client