Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/03e98550-cc2c-3f70-8b2c-0686293a842a.roa
File:                     03e98550-cc2c-3f70-8b2c-0686293a842a.roa (raw, json)
Hash identifier:          wUlcnEUG8nGVu/zck9AXto0jo4Hd5pZE3TxEBazlw9g=
Subject key identifier:   4A:E0:21:EA:A0:83:FE:30:4D:35:AA:5E:10:2D:FA:2F:7E:DB:27:D2
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584AE1968F6437937B6BE3DC3000
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/03e98550-cc2c-3f70-8b2c-0686293a842a.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     26744
IP address blocks:        199.166.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:8f:64:37:93:7b:6b:e3:dc:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=a31d9787-d37b-496e-8412-c010b1521fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0e:5e:54:58:84:d7:02:45:d7:0f:6a:19:39:
                    72:48:00:e7:38:48:ee:9a:09:dc:cc:ea:9c:5c:9b:
                    7a:88:d3:cd:1b:d4:7e:d0:51:56:df:11:4e:67:d8:
                    ff:bf:2f:0d:bc:a3:02:b3:e0:ad:dc:18:1b:99:25:
                    3b:b1:6f:6d:a3:f6:32:f7:0b:ac:1e:b8:ee:62:9c:
                    52:99:87:c1:6e:42:bb:5a:e8:e9:fc:35:b1:43:02:
                    05:4c:b2:e2:53:4d:35:e9:64:f7:46:e0:ac:33:bc:
                    f2:22:c8:4d:1a:49:e2:63:8f:79:5f:b2:a9:39:9b:
                    15:8e:1f:9c:ef:9a:21:60:fe:e2:9d:b6:ed:e3:ec:
                    f4:56:ca:de:13:1b:c6:87:8c:5b:e4:51:4d:6f:dc:
                    bc:88:0a:00:09:e9:d6:d4:85:5a:72:d5:06:66:4b:
                    c3:42:d5:c3:47:14:21:85:64:fe:d2:d4:97:30:19:
                    55:7f:55:e4:49:a1:ce:bc:33:13:a7:c1:d7:09:09:
                    7d:7d:55:4b:53:5a:13:a3:01:c8:98:bb:f0:03:d4:
                    79:e7:3f:77:df:0b:b5:d4:3d:6a:cb:1e:d8:a8:4a:
                    1d:5f:b4:1d:c1:ac:d1:44:c5:20:d7:78:9b:6a:d8:
                    82:96:08:93:ad:26:83:73:9c:34:44:39:b6:72:63:
                    3d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E0:21:EA:A0:83:FE:30:4D:35:AA:5E:10:2D:FA:2F:7E:DB:27:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/03e98550-cc2c-3f70-8b2c-0686293a842a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.166.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:ca:2c:b1:7d:bd:6e:28:c3:1a:8e:82:24:75:e0:06:08:ba:
         9d:88:4f:f1:3c:c0:18:17:e8:4e:41:46:e4:14:36:c1:7f:3e:
         c2:94:3c:fa:67:86:e4:e1:d1:a2:ac:d9:f3:23:a8:29:5f:fb:
         e4:24:44:dc:c8:a6:38:52:73:da:c9:4d:86:f6:4d:4b:73:b9:
         2e:62:84:01:e9:2d:b4:a5:1e:26:b5:fa:b6:5b:1d:85:d7:fa:
         19:52:f7:1f:00:c1:a0:c8:7d:d6:7e:39:36:f4:44:e7:a8:10:
         5a:7f:9d:e2:86:e9:b4:77:7d:98:7e:4b:36:d2:c5:e2:b9:77:
         1b:1f:fd:1a:6b:76:80:bc:79:b8:59:cb:c1:d9:46:25:e7:7f:
         e3:b7:47:b3:b4:2d:6e:00:dd:fb:f0:b2:c6:dc:a5:d4:98:d7:
         7e:aa:5f:7c:7e:91:52:cf:55:23:73:e8:2e:24:b0:34:d0:62:
         eb:9d:55:f8:e2:30:43:3a:3f:71:f5:c1:36:41:fa:32:02:46:
         49:6c:03:9e:38:7c:6c:83:7d:22:04:ff:fa:cc:69:97:8e:25:
         5a:c0:5e:06:47:8f:ed:3d:97:74:fe:bc:24:d3:92:96:e1:c5:
         0a:c0:6a:cb:19:91:c2:25:f0:75:99:15:6f:64:fe:c6:74:41:
         88:45:51:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:36:53 2025 by rpki-client